I am using linux 2.6.38 netconsole to forward kernel log messages to a second host. On the second host I have syslog-ng 2.0.9 running. I see that not all messages get to the second host. For example "echo 1 > /dev/kmsg; echo 2 > /dev/kmsg" on the first machine results in only the first message reliably arriving at the second host; message 2 is often, but not always, missing. The relevant portion of the syslog config file looks like:

> source src {
> internal();
> udp(ip("0.0.0.0") port(6666));
> };

I see the same losses when running netcat (v1.10) on the second host. I know udp is not reliable, but as syslog uses udp extensively I would not have expected these kinds of losses. My systems are not stressed at all during these tests.

Are there any syslog config options that can minimize these losses? Any other possibilities to investigate?

I will try tcpdump to see what packets do/do not arrive at the interface on the second host.

tcpdump shows expected packets arriving at second host's interface. And no packets dropped; no overruns. So where are they going?