On Mon, 30 Sep 2013, Rainer Gerhards wrote:
I don't see anything that jumps out at me in your configs.
just checking, the system doesn't log any errors from the kernel during your
test does it?
I am wondering if the tcpdump command that I use, is the best indicator of
how many packets are coming in?
******tcpdump -i eth2.10 -nn | cut -c 1-8 | uniq -c*************
if you have any other activity on the network (like a ssh session into the
server) you may want to limit it to port 514 traffic
tcpdump -i eth2.10 -nn port 514| cut -c 1-8 | uniq -c
I am curious if the server just cannot handle the traffic that I am
sending it? and that is why we are seeing such a fluctuation in the resulfs?
that's possible, what does the output of tcpdump look like during your test?
I note that you are using vlans for this (this is on vlan10), is this on a
dedicated switch? or is this on a vlan of a switch that is doing other things as
well?
David Lang
need to think a bit about this and also hope that David joins the
discussion.
I think a priority is to get to consistent local results, else further
testing is almost impossible.
Rainer
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
