This is at 350k [rcortiz@simon ~]$ sudo nice -10 /usr/sbin/tcpdump -i eth2.10 -s 90 -nn port 514 -B 49152 -w /tmp/tcpdump | cut -c 1-8 | uniq -c tcpdump: listening on eth2.10, link-type EN10MB (Ethernet), capture size 90 bytes 2362650 packets captured 2366273 packets received by filter 0 packets dropped by kernel
[rcortiz@simon ~]$ sudo tcpdump -r /tmp/tcpdump | cut -c 1-8 | uniq -c reading from file /tmp/tcpdump, link-type EN10MB (Ethernet) 117917 09:41:16 349991 09:41:17 349993 09:41:18 349998 09:41:19 349997 09:41:20 349991 09:41:21 349994 09:41:22 349998 09:41:23 349994 09:41:24 349994 09:41:25 349991 09:41:26 349997 09:41:27 349994 09:41:28 349995 09:41:29 349997 09:41:30 349991 09:41:31 349999 09:41:32 349991 09:41:33 349997 09:41:34 349995 09:41:35 349996 09:41:36 349994 09:41:37 349991 09:41:38 349995 09:41:39 349995 09:41:40 349998 09:41:41 349991 09:41:42 349997 09:41:43 This is at 375k [rcortiz@simon ~]$ sudo nice -10 /usr/sbin/tcpdump -i eth2.10 -s 90 -nn port 514 -B 49152 -w /tmp/tcpdump | cut -c 1-8 | uniq -c tcpdump: listening on eth2.10, link-type EN10MB (Ethernet), capture size 90 bytes 27833539 packets captured 27833657 packets received by filter 0 packets dropped by kernel [rcortiz@simon ~]$ sudo tcpdump -r /tmp/tcpdump | cut -c 1-8 | uniq -c reading from file /tmp/tcpdump, link-type EN10MB (Ethernet) 183409 14:03:50 374463 14:03:51 372685 14:03:52 374993 14:03:53 374939 14:03:54 374985 14:03:55 374996 14:03:56 374993 14:03:57 374995 14:03:58 374989 14:03:59 374990 14:04:00 374989 14:04:01 374993 14:04:02 374988 14:04:03 374994 14:04:04 374991 14:04:05 374987 14:04:06 374996 14:04:07 374996 14:04:08 374989 14:04:09 374994 14:04:10 374990 14:04:11 374989 14:04:12 And lastly, this is is at 395k [rcortiz@simon ~]$ sudo nice -10 /usr/sbin/tcpdump -i eth2.10 -s 90 -nn port 514 -B 65536 -w /tmp/tcpdump | cut -c 1-8 | uniq -c tcpdump: listening on eth2.10, link-type EN10MB (Ethernet), capture size 90 bytes 24496844 packets captured 24496981 packets received by filter 0 packets dropped by kernel [rcortiz@simon ~]$ sudo tcpdump -r /tmp/tcpdump | cut -c 1-8 | uniq -c reading from file /tmp/tcpdump, link-type EN10MB (Ethernet) 104069 14:24:18 394806 14:24:19 394986 14:24:20 394952 14:24:21 394713 14:24:22 394868 14:24:23 394990 14:24:24 394952 14:24:25 394990 14:24:26 394991 14:24:27 394993 14:24:28 394990 14:24:29 394986 14:24:30 394991 14:24:31 394992 14:24:32 394993 14:24:33 394991 14:24:34 394988 14:24:35 394989 14:24:36 394990 14:24:37 394995 14:24:38 394990 14:24:39 394987 14:24:40 394994 14:24:41 394989 14:24:42 394988 14:24:43 394991 14:24:44 unfortunately I have reached the max in my 1GB from the spirent. and 395k is the max it will send out Robert. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

