From owner-freebsd-stable@FreeBSD.ORG  Sun Jun  8 14:47:39 2014
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 8EAA41FC;
 Sun,  8 Jun 2014 14:47:39 +0000 (UTC)
Received: from nschwmtas01p.mx.bigpond.com (nschwmtas01p.mx.bigpond.com
 [61.9.189.137]) by mx1.freebsd.org (Postfix) with ESMTP id F39CD2B0D;
 Sun,  8 Jun 2014 14:47:38 +0000 (UTC)
Received: from nschwcmgw06p ([61.9.190.166]) by nschwmtas01p.mx.bigpond.com
 with ESMTP
 id <20140608144736.QRCV26407.nschwmtas01p.mx.bigpond.com@nschwcmgw06p>;
 Sun, 8 Jun 2014 14:47:36 +0000
Received: from hermes.heuristicsystems.com.au ([121.210.107.100])
 by nschwcmgw06p with BigPond Outbound
 id Bqnc1o00329zwdD01qnciP; Sun, 08 Jun 2014 14:47:36 +0000
X-Authority-Analysis: v=2.0 cv=Pdd9d1dd c=1 sm=1
 a=SEJ2iDwVkb98DYvesvueMw==:17 a=JipEcVzqA9wA:10 a=8nJEP1OIZ-IA:10
 a=GHIR_BbyAAAA:8 a=VyOSTZy-hWPC2zCHKdQA:9 a=wPNLvfGTeEIA:10
 a=SEJ2iDwVkb98DYvesvueMw==:117
Received: from [10.0.5.3] (ewsw01.hs [10.0.5.3]) (authenticated bits=0)
 by hermes.heuristicsystems.com.au (8.14.5/8.13.6) with ESMTP id s58EkhOR079544
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT);
 Mon, 9 Jun 2014 00:46:44 +1000 (EST)
 (envelope-from dewayne.geraghty@heuristicsystems.com.au)
Message-ID: <53947752.2090507@heuristicsystems.com.au>
Date: Mon, 09 Jun 2014 00:46:42 +1000
From: Dewayne Geraghty <dewayne.geraghty@heuristicsystems.com.au>
User-Agent: Mozilla/5.0 (Windows NT 6.1;
 rv:24.0) Gecko/20100101 Thunderbird/24.3.0
MIME-Version: 1.0
To: Adrian Chadd <adrian@freebsd.org>
Subject: Flowtable stats
References: <5393B20D.9050806@bsdinfo.com.br>
 <CAJ-Vmom+jOc7mCo+uffiiio9m4USAkeF_hQJDyPfO4awQf_r_Q@mail.gmail.com>
In-Reply-To: <CAJ-Vmom+jOc7mCo+uffiiio9m4USAkeF_hQJDyPfO4awQf_r_Q@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: FreeBSD Stable Mailing List <freebsd-stable@freebsd.org>
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 08 Jun 2014 14:47:39 -0000

While preparing to transition from 9.2Stable to 10.0Stable, I noticed
that there is no ability to examine the status of the flowtable.  The
sysctl net.inet.flowtable.stats was useful to ascertain if the
net.flowtable.maxflows (or previously net.inet.flowtable.nmbflows on 9.*
and 8.*) is sufficient or excessive.  For boundary devices with 1G (or
less), it is helpful to tune.

Is there another sysctl that I need to tweak to see this, or a
supporting program? 

It would be useful to see  Hits/Lookups, while misses might be useful if
expiry were tuneable.

Refer to single CPU boundary device FreeBSD9.2:
net.inet.flowtable.stats=
table name: ipv4
        collisions: 12
        allocated: 0
        misses: 225821
        max_depth: 1
        free_checks: 1502021
        frees: 225785
        hits: 220339242
        lookups: 220565063

net.inet.flowtable.nmbflows=25600 looks about right, while the FreeBSD10
(server) that I'm using has autoset net.flowtable.maxflows=427552

There was no mention in UPDATING or the 10.0R Release Notes.
Regards, Dewayne.