LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   losing netconsole udp packets (https://www.linuxquestions.org/questions/linux-newbie-8/losing-netconsole-udp-packets-4175451300/)

mccabehm 02-22-2013 11:58 AM

losing netconsole udp packets
 
I am using linux 2.6.38 netconsole to forward kernel log messages to a second host. On the second host I have syslog-ng 2.0.9 running. I see that not all messages get to the second host. For example "echo 1 > /dev/kmsg; echo 2 > /dev/kmsg" on the first machine results in only the first message reliably arriving at the second host; message 2 is often, but not always, missing. The relevant portion of the syslog config file looks like:

> source src {
> internal();
> udp(ip("0.0.0.0") port(6666));
> };

I see the same losses when running netcat (v1.10) on the second host. I know udp is not reliable, but as syslog uses udp extensively I would not have expected these kinds of losses. My systems are not stressed at all during these tests.

Are there any syslog config options that can minimize these losses? Any other possibilities to investigate?

mccabehm 02-22-2013 01:29 PM

I will try tcpdump to see what packets do/do not arrive at the interface on the second host.

mccabehm 02-25-2013 01:03 PM

tcpdump shows expected packets arriving at second host's interface. And no packets dropped; no overruns. So where are they going?


All times are GMT -5. The time now is 06:01 AM.