I am using a Dell PowerEdge 2300 running Red Hat Linux 7.2 for a
syslog consolidation machine. It is also our network monitoring
system and it runs Cricket, NMIS, and cflowd and Flowscan for Cisco
NetFlow collection.
Lately the machine has been running extremely slow whenever anything
that happens on the box needs to syslog something (su, logins, etc.).
I've checked /var/log/messages and it repeatedly contains the
following line:
Sep 6 14:23:54 cinshrnms02 syslogd: recvfrom inet: Resource
temporarily unavailable
Notice the Recv-Q for the syslog port (UDP 514) in the netstat output
below. The box does A LOT of SNMP polls as well as receives syslogs
from about 6-8 Cisco routers (3600 series and 7100 series) on T1 and
DS3 links. An strace of the syslog process reveals it getting and
EAGAIN error
and then going into a nanosleep.
My question is are there any compile-time or run-time options (via
/proc) that I can tweak to get better syslog/UDP performance out of
the box? Is there anything else at which I should be looking?
It's an old box (cpuinfo, meminfo, kernel info below), but I was
having similar problems on a quad Xeon 700 with 2GB RAM. I've already
upped /proc/sys/fs/file-max and /proc/sys/net/ipv4/ip_local_port_range
as well as /proc/sys/net/core/netdev_max_backlog, wmem_default, wmem_max
rmem_default, and rmem_max.
I may just need beefier hardware, but I wanted to see if there was
anything else I could tweak before we spend cash :)
Thanks for your assistance,
Andy.
Andrew Rechenberg
Infrastructure Team, Sherman Financial Group
arechenberg @ shermfin.com
*****************************************************
syslogd CMD line: syslogd -m 0 -r -x
RPM: sysklogd-1.4.1-4
Kernel: RH 2.4.7-10
/proc/cpuinfo
processor : 0
vendor_id : GenuineIntel
cpu family : 6
model : 5
model name : Pentium II (Deschutes)
stepping : 2
cpu MHz : 397.958
cache size : 512 KB
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 2
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge
mca cmov pat pse36 mmx fxsr
bogomips : 794.62
/proc/meminfo
total: used: free: shared: buffers: cached:
Mem: 525684736 416747520 108937216 315392 90697728 265424896
Swap: 534601728 0 534601728
MemTotal: 513364 kB
MemFree: 106384 kB
MemShared: 308 kB
Buffers: 88572 kB
Cached: 259204 kB
SwapCached: 0 kB
Active: 24156 kB
Inact_dirty: 323928 kB
Inact_clean: 0 kB
Inact_target: 712 kB
HighTotal: 0 kB
HighFree: 0 kB
LowTotal: 513364 kB
LowFree: 106384 kB
SwapTotal: 522072 kB
SwapFree: 522072 kB
NrSwapPages: 130518 pages
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address
udp 0 0 0.0.0.0:32768 0.0.0.0:*
udp 41056 0 0.0.0.0:514 0.0.0.0:*
udp 0 0 0.0.0.0:2055 0.0.0.0:*
udp 0 0 0.0.0.0:69 0.0.0.0:*
udp 0 0 0.0.0.0:69 0.0.0.0:*
udp 0 0 0.0.0.0:734 0.0.0.0:*
udp 0 0 0.0.0.0:111 0.0.0.0:*
--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list
