very busy syslog server

Imri Zvik imriz at
Wed Dec 7 03:20:11 PST 2005


First, thanks for the reply.

Now, I see that you too are missing messages....
I don't know when was the last time you rested the counters, but missing
22911 events is quite a lot :/

Imri Zvik
PGP (2.6.3ia) Public Key:

-----Original Message-----
From: Claus Guttesen [mailto:kometen at] 
Sent: Wednesday, December 07, 2005 1:15 PM
To: Imri Zvik
Cc: freebsd-performance at
Subject: Re: very busy syslog server

> I'm trying to setup a syslog server to serve a large group of servers.
> For the syslog daemon, I have chosen rsyslogd, and the backend is
mysql (on a different
> machine).

Maby you could put the syslog-messages into a file and then import it
into mysql?

We have 10 webservers sending http-logs to one dual PIII.

syslog~#>netstat -s -p udp
        167166048 datagrams received
        0 with incomplete header
        0 with bad data length field
        0 with bad checksum
        19371 with no checksum
        810 dropped due to no socket
        18964 broadcast/multicast datagrams dropped due to no socket
        22911 dropped due to full socket buffers
        0 not for hashed pcb
        167123363 delivered
        122985843 datagrams output

They are kept in flat files.


More information about the freebsd-performance mailing list