* Re: nflog : We are losing events. Increasing buffer size to 1736704
@ 2015-09-16 4:48 Ken-ichirou MATSUZAWA
0 siblings, 0 replies; 3+ messages in thread
From: Ken-ichirou MATSUZAWA @ 2015-09-16 4:48 UTC (permalink / raw)
To: Akshat Kakkar; +Cc: netfilter
Hi,
On Wed, Sep 9, 2015 at 6:54 PM, Akshat Kakkar <akshat.1984@gmail.com> wrote:
> It doesnt get increased more than 1736704.
> Even if I set 1736704 as the default buffer size, then also I get the
> same message
> We are losing events. Increasing buffer size to 1736704
>
> Why is that so? What makes the buffer size having ceiling at 1736704
> (= 212KBytes)
It would be better to show your ulogd.conf, someone might be able to
help you more easily. I guess... set netlink_socket_buffer_maxsize
in ulogd.conf adequately and also check /proc/sys/net/core/rmem_max.
Thanks,
^ permalink raw reply [flat|nested] 3+ messages in thread
* nflog : We are losing events. Increasing buffer size to 1736704
@ 2015-09-09 13:24 Akshat Kakkar
2015-09-15 5:24 ` Akshat Kakkar
0 siblings, 1 reply; 3+ messages in thread
From: Akshat Kakkar @ 2015-09-09 13:24 UTC (permalink / raw)
To: netfilter@vger.kernel.org
Hi!
I am using nflog for logging iptables traffic. When traffic rate is
increased, I see message like
We are losing events. Increasing buffer size to 12000
We are losing events. Increasing buffer size to 16000
...
We are losing events. Increasing buffer size to 1736704
It doesnt get increased more than 1736704.
Even if I set 1736704 as the default buffer size, then also I get the
same message
We are losing events. Increasing buffer size to 1736704
Why is that so? What makes the buffer size having ceiling at 1736704
(= 212KBytes)
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: nflog : We are losing events. Increasing buffer size to 1736704
2015-09-09 13:24 Akshat Kakkar
@ 2015-09-15 5:24 ` Akshat Kakkar
0 siblings, 0 replies; 3+ messages in thread
From: Akshat Kakkar @ 2015-09-15 5:24 UTC (permalink / raw)
To: netfilter@vger.kernel.org
Anybody? Please ...
ulogd_inppkt_NFLOG.c:443 We are losing events, increasing buffer size to 1736704
On Wed, Sep 9, 2015 at 6:54 PM, Akshat Kakkar <akshat.1984@gmail.com> wrote:
> Hi!
>
> I am using nflog for logging iptables traffic. When traffic rate is
> increased, I see message like
> We are losing events. Increasing buffer size to 12000
>
> We are losing events. Increasing buffer size to 16000
> ...
>
> We are losing events. Increasing buffer size to 1736704
>
> It doesnt get increased more than 1736704.
> Even if I set 1736704 as the default buffer size, then also I get the
> same message
> We are losing events. Increasing buffer size to 1736704
>
> Why is that so? What makes the buffer size having ceiling at 1736704
> (= 212KBytes)
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2015-09-16 4:48 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2015-09-16 4:48 nflog : We are losing events. Increasing buffer size to 1736704 Ken-ichirou MATSUZAWA
-- strict thread matches above, loose matches on Subject: below --
2015-09-09 13:24 Akshat Kakkar
2015-09-15 5:24 ` Akshat Kakkar
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).