Re: [fw-wiz] SCADA

On Tue, 14 Apr 2009, Marcus J. Ranum wrote:

Oddly, plog works faster than regular UDP syslog on some systems,
because the bpf implementations are sometimes faster than the UDP

I've been doing some testing with rsyslog recently, and with the 4.x development branch I have had it reliably recieve udp messages at as close to gig-e wire speed as a tuned tcpreplay could push them (IIRC it was ~300,000 messages/sec for ~256 byte messages) with no losses (over a fairly quiet network). it can't currently write them from it's memory buffer that fast (only ~80,000 messages/sec sustained), but you can put a lot of memory in a dedicated log server today to handle bursts.

David Lang
firewall-wizards mailing list