[rsyslog-notify] Forum Thread: Re: Getting omudpspoof for 5.8.6 on Ubuntu LTS - (Mode 'reply')

[noreply at adiscon.com]

User: dlang 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=24878#p24878

Message: 
----------
What I am talking about as far as performance goes

With normal UDP forwarding, rsyslog opens the socket and then for each
message it creates a UDP message and sends it.

with omudpspoof, rsyslog needs to open and close the socket for each
message. This adds several (fairly expensive) syscalls to the processing of
each message. This adds overhead both to rsyslog and to the kernel that you
will not see directly.