RE: very busy syslog server

2005-12-08 Thread Imri Zvik
Already tried different values, even some really high arbitrary ones... I think I will try splitting the work load on a couple of instances of syslog... I hope that would do the trick -- Imri Zvik PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp -Original Message

RE: very busy syslog server

2005-12-08 Thread Imri Zvik
now it has 3GB of RAM, but I am still seeing packets being dropped due to full socket buffers. Thanks, -- Imri Zvik PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp   From: Jin Guojun [mailto:[EMAIL PROTECTED] Sent: Wednesday, D

RE: very busy syslog server

2005-12-08 Thread Imri Zvik
Hi, I have tried polling, and it did not improve the performance. Regarding the inserts - I am using delayed inserts to solve that problem exactly. I have already tried to log into files, and still had this issue... Thanks for reply :) -- Imri Zvik PGP (2.6.3ia) Public Key: http

RE: very busy syslog server

2005-12-07 Thread Imri Zvik
Hi, First, thanks for the reply. Now, I see that you too are missing messages I don't know when was the last time you rested the counters, but missing 22911 events is quite a lot :/ Thanks! -- Imri Zvik PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp -Ori

very busy syslog server

2005-12-07 Thread Imri Zvik
ue to no socket ->>>123677 dropped due to full socket buffers 0 not for hashed pcb 266525 delivered 133260 datagrams output I have tried to increase net.inet.udp.recvspace, but it didn't solve the problem. I would appreciate any hint or tips. Thank you i