Hello Pablo, Thanks for the answer! >> /etc/ulogd.conf: >> rmem=442368 PNA> ^^^^^^ PNA> Rising this value will delay hitting ENOBUFS. This is the size of the PNA> receiver buffer. 1. "delay" means I will get ENOBUFS in any case (early or later)? 2. What ENOBUFS does depend on? Packets per second? Bytes per second? Amount of iptables/shaping rules? CPU performance? 3. Is there any way to calculate or predict the high limit of traffic rate/number of rules/etc when the system will still manage to process ULOG without alerting with ENOBUFS? 4. ipcad buffers (I suppose this is the same as rmem for ulogd) is set to 4M: /etc/ipcad.conf: buffers = 4194304; But I'm still losing ULOG messages. Does that mean I have to rise this value more? -- Best regards, Alexander -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
