> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Rainer Gerhards > Sent: Tuesday, September 01, 2009 10:52 AM > To: rsyslog-users > Subject: Re: [rsyslog] abort in 4.2.1 / UDP message loss > > > As a side-note: I think that my UDP message loss may partly be > related > > to DNS > > resolution. I will try this in a lab tomorrow. But I still think a > lot > > of > > packets never leave the source system. This may be related to the > > virtual > > environment I am currently using for the lab. I hope to be able to > > generate > > the traffic by a program, because that offers me the flexibility (now > > and in > > the future) to test complex messages scenarios (what, granted, does > not > > help > > if it does not expose the problem...). > > Very interesting - I just did a couple of tests with UDP and various > DNS > resolution settings. The message loss I see is definitely related to > DNS > resolution. This is especially interesting as in my lab setup there > should be > no need to do more than the initial query. This points into some area > that > either is buggy or needs to be optimized.
... my simplistic requery-avoidance logic does not take the source port into account. So a requery is also done if the host is the same as before, but the port changes. Thus the difference. Needs to be optimized ;) While this does not point to an obvious bug, I'll still try to get a segfault without DNS resolution. Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
