Submit a ticketCall us

AnnouncementsFace your biggest database issues head-on

Our new eCourse helps you navigate SQL Server performance blocks by teaching you how to recognize and deal with the three DBA Disruptors: Performance Hog, Blame Shifter, and Query Blocker. Register today to learn how to defend your environment and fend off menacing disruptions.

Register for your free eCourse.

Home > Success Center > Network Performance Monitor (NPM) > NPM - Knowledgebase Articles > Error decoding packet for Syslog RFC 3164 formatting

Error decoding packet for Syslog RFC 3164 formatting

Created by Eric Bryant, last modified by Caroline Juszczak on Sep 10, 2018

Views: 1,401 Votes: 2 Revisions: 6

Updated September 20, 2018


This article explains a non-common way that some devices send syslog messages adhering to RFC 3164 and how to manipulate Orion Settings table to accept messages.


Syslog viewer may show the following errors when a syslog message is detected:

Error Decoding Packet Decode packet failed, packet missing starting '<'
Original packet is:

PortQry Test Message


All Orion versions


  1. Open the /orion/admin/AdvancedConfiguration/Global.aspx page.
  2. Enable EnableRfcRelay in the SyslogService.SyslogSettings section.
  3. Save and restart the service.
Last modified