Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 15 Jul 2008 14:20:13 -0700
From:      Robin Sommer <robin@icir.org>
To:        "Bruce M. Simpson" <bms@FreeBSD.org>
Cc:        freebsd-net@FreeBSD.org
Subject:   Re: BPF problems on FreeBSD 7.0
Message-ID:  <20080715212013.GA91123@icir.org>
In-Reply-To: <487B5840.3000401@FreeBSD.org>
References:  <20080711202737.GB27418@icir.org> <487B5840.3000401@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help

On Mon, Jul 14, 2008 at 14:44 +0100, Bruce M. Simpson wrote:

> One place to start might be: netstat -B output in 7.x (I *think* this got 
> MFCed), this will let us see what the drop count is for the Bro process, 
> and what the flags are for the open BPF descriptors in the system.

Thanks for the suggestion. Here's the netstat -B output at the time
it has stalled (after about 6 hours of working normally):

   Pid  Netif   Flags      Recv      Drop     Match Sblen Hblen Command
14557  nxge0 p--s--- 2162189525  32514465  42815457 4194248 4194258 bro

Top shows:

  PID USERNAME  THR PRI NICE   SIZE    RES STATE  C   TIME   WCPU COMMAND
14557 bro        1 -58    0    272M   267M        5  25:53  0.00% bro



A few minutes after starting the process, when Bro was still working
fine, a netstat -B output was:

# netstat -B
  Pid  Netif   Flags      Recv      Drop     Match Sblen Hblen Command
14557  nxge0 p--s---   4779235         0     94967     0     0 bro

Thanks,

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin@icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080715212013.GA91123>