This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Losting messages

Hi,

 

We are having an issue with the Kiwi Syslog Server  (ver. 8.3.7), and i would like you to help us.

 

We have a Kiwi Server, with only one rule: No filters, ... writes to a TXT file and Stop the message.

Using the "Kiwi_SyslogGen" utility ... and allways using UDP - Port 514 - we did several test:

 

Test 1. Send 2.000 messages to the kiwi server, sending continously ... with an inter-delay messages of 10 ms.

Results: The Kiwi writes a TXT file with 2.000 lines.

All seems to be Ok.

 

Test 2. Send 2.000 messages, sending in 100 packet burst every 10 seconds.

Results: The Kiwi writes a TXT file with 2.000 lines.

All seems to be Ok.

 

Test 3. Send 2.000 messages, sending in 500 packet burst every 10 seconds.

Results: The kiwi writes a TXT file with 854 lines.

Where is the 1.146 messages that does not appears in the file ???

 

Could be a network problem? We installed the "Wireshark" utility (Sniffer) ... and the WireShark tells us that the machine received 2.000 packets from that IP address.

So, the network seems to works fine.  Furthermore, we install the KiwiSyslog Gen Utility ... IN THE SAME machine that the kiwi server.

The results is a TXT files with 935 lines.

 

We had did this test dozens of times, and the results it seems to be random. 854, 935, 1.056, 1.132 ... Always is rounding the 45- 50% of the messages.

In all the test, we had chequed the message queu overflow.  Always is 0.

 

What is happening? Could you, please, help us with this?

Thank you in advance.