Hi, On Wed, Sep 9, 2015 at 6:54 PM, Akshat Kakkar <akshat.1984@xxxxxxxxx> wrote: > It doesnt get increased more than 1736704. > Even if I set 1736704 as the default buffer size, then also I get the > same message > We are losing events. Increasing buffer size to 1736704 > > Why is that so? What makes the buffer size having ceiling at 1736704 > (= 212KBytes) It would be better to show your ulogd.conf, someone might be able to help you more easily. I guess... set netlink_socket_buffer_maxsize in ulogd.conf adequately and also check /proc/sys/net/core/rmem_max. Thanks, -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html