Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 13 Feb 2004 01:30:51 +0200
From:      "Mustafa N. Deeb" <mustafa@palnet.com>
To:        "'Emre Bastuz'" <info@emre.de>, <freebsd-net@freebsd.org>
Subject:   RE: 4.9-STABLE heavily dropping packets? libpcap issue?
Message-ID:  <004e01c3f1c0$44224fa0$8d00000a@felfel>
In-Reply-To: <1076622177.584b09df25514@webmail.emre.de>

next in thread | previous in thread | raw e-mail | index | archive | help
You can start by doing "netstat -m" and take it from there

~~~~~~~~~~~~~~~~~~~~~~
Mustafa N. Deeb
Technical Director
Palnet Communications Ltd.
Tel: +970-2-2403434
Fax: +970-2-2403430
www.palsms.com
www.paltime.net
www.palnet.com



-----Original Message-----
From: owner-freebsd-net@freebsd.org
[mailto:owner-freebsd-net@freebsd.org] On Behalf Of Emre Bastuz
Sent: Thursday, February 12, 2004 11:43 PM
To: freebsd-net@freebsd.org
Subject: 4.9-STABLE heavily dropping packets? libpcap issue?

Hi,

for sniffing purposes I have a FreeBSD 4.9-STABLE box running on
highend,
state-of-the-art hardware (Xeon something) with all bells and whistles.

The NIC=B4s an onboard copper em0 with gig-e capabilities.

Nevertheless I am getting massive packet drops (40%-60%) when I start
sniffing a
gigabit ehthernet segment although the CPU load is very low.

After doing some research in in the appropriate mailing list archives I
found
out that there are (or were?) sometimes issues with the libpcap. As
there was a
more current one in the ports collection (0.8.1 as opposed to 0.7 in the
base
system) I used this instead (with LIBPCAP_OVERWRITE_BASE=3Dyes) but =
still
I am
losing the same amount of packets when doing a tcpdump.

I definitly do _not_ know what else I can do to reduce the amount of
lost data.
*sigh*

Things I did to improve the situation so far:

- Update from RELEASE to 4.9-STABLE
- Compile a custom kernel with reduced drivers and SMP support
- Update libpcap and recompile tcpdump

Does any of you have an idea else I can do?

Any parameters in the kernel that can be tweeked further, like
NMBCLUSTERS or
NMBUFS?

Cheers,

Emre

--
http://www.emre.de                        UIN: 561260
PGP Key ID: 0xAFAC77FD

I don't see why some people even HAVE cars. -- Calvin

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?004e01c3f1c0$44224fa0$8d00000a>