On Dec 23, 2009, at 7:31 PM, Robert Hajime Lanning wrote: > Not latency, but buffer overruns. We had a java app that > we were writing. We had it send UDP syslog to localhost. > (Coder preferred that instead of JNI to the syslog lib.) > We got about 50+ percent packet loss. We had to put a > delay in the logging thread, between packets.
If you're talking syslog-ng, the default input buffer is ludicrously small. Over time, as we deal with more and more traffic, I've increased log_fifo_size 2000-fold (from 100 to 200,000). At that point, CPU usage by an SEC process running messages through a 5000-line config became the bottleneck, rather than the artificial limitation of a smaller buffer than the box and software could handle. -------------------------------------------------------------------- Leon Towns-von Stauber http://www.occam.com/leonvs/ "We have not come to save you, but you will not die in vain!" _______________________________________________ Tech mailing list [email protected] http://lopsa.org/cgi-bin/mailman/listinfo/tech This list provided by the League of Professional System Administrators http://lopsa.org/
