Date: Tue, 15 Jul 2008 14:25:27 -0700 From: Julian Elischer <julian@elischer.org> To: Robin Sommer <robin@icir.org> Cc: freebsd-net@FreeBSD.org, "Bruce M. Simpson" <bms@FreeBSD.org> Subject: Re: BPF problems on FreeBSD 7.0 Message-ID: <487D15C7.3040700@elischer.org> In-Reply-To: <20080715212013.GA91123@icir.org> References: <20080711202737.GB27418@icir.org> <487B5840.3000401@FreeBSD.org> <20080715212013.GA91123@icir.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Robin Sommer wrote: > On Mon, Jul 14, 2008 at 14:44 +0100, Bruce M. Simpson wrote: > >> One place to start might be: netstat -B output in 7.x (I *think* this got >> MFCed), this will let us see what the drop count is for the Bro process, >> and what the flags are for the open BPF descriptors in the system. > > Thanks for the suggestion. Here's the netstat -B output at the time > it has stalled (after about 6 hours of working normally): > > Pid Netif Flags Recv Drop Match Sblen Hblen Command > 14557 nxge0 p--s--- 2162189525 32514465 42815457 4194248 4194258 br the Recv number is JUST past 2^31. at your rate of receiving packets, it passed that value about 2 minutes before this snapshot was taken.. > > Top shows: > > PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND > 14557 bro 1 -58 0 272M 267M 5 25:53 0.00% bro > > > > A few minutes after starting the process, when Bro was still working > fine, a netstat -B output was: > > # netstat -B > Pid Netif Flags Recv Drop Match Sblen Hblen Command > 14557 nxge0 p--s--- 4779235 0 94967 0 0 bro > > Thanks, > > Robin >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?487D15C7.3040700>