Re: SCADA
| Newsgroups | gmane.comp.security.firewalls.wizards |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 14 Apr 2009, Marcus J. Ranum wrote: > Oddly, plog works faster than regular UDP syslog on some systems, > because the bpf implementations are sometimes faster than the UDP > stack. I've been doing some testing with rsyslog recently, and with the 4.x development branch I have had it reliably recieve udp messages at as close to gig-e wire speed as a tuned tcpreplay could push them (IIRC it was ~300,000 messages/sec for ~256 byte messages) with no losses (over a fairly quiet network). it can't currently write them from it's memory buffer that fast (only ~80,000 messages/sec sustained), but you can put a lot of memory in a dedicated log server today to handle bursts. David Lang