Date: Mon, 10 Dec 2001 21:11:02 -0800 From: "Crist J. Clark" <cristjc@earthlink.net> To: Vlad Marchenko <mv@sumdu.edu.ua> Cc: freebsd-stable@FreeBSD.ORG Subject: Re: syslog lose lines in log Message-ID: <20011210211102.D1922@gohan.cjclark.org> In-Reply-To: <20011210190257.8D8EB3BB384@manager.sendoutmail.com>; from mv@sumdu.edu.ua on Mon, Dec 10, 2001 at 01:02:57PM -0600 References: <20011210190257.8D8EB3BB384@manager.sendoutmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Dec 10, 2001 at 01:02:57PM -0600, Vlad Marchenko wrote: > Need advise on my problem. I have mail application that sends a lot of lines > to MAIL log: 100+ lines per second. Since we have stats based on analyzing > maillog, it's important for us to have ALL lines. I noticed that under that > load, syslog lose at least 30-40% of all lines. Digging the situation I > found that it happens because DGRAM kind of socket used for delivering > messages to syslogd by syslog(3). > OK, I've installed /usr/ports/system/syslog-ng that supports STREAM unix > sockets, and patched /usr/src/lib/libc/gen/syslog.c to have SOCK_STREAM > type of socket when opening socket in function connectlog(): Without actually looking at the validity of the code, does the mailing application generating this noise actually use the syslog(3) in libc? -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011210211102.D1922>