From owner-freebsd-questions@FreeBSD.ORG  Thu Feb 21 16:57:22 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id ED2EE16A404
	for <freebsd-questions@freebsd.org>;
	Thu, 21 Feb 2008 16:57:22 +0000 (UTC)
	(envelope-from wojtek@wojtek.tensor.gdynia.pl)
Received: from wojtek.tensor.gdynia.pl (wojtek.tensor.gdynia.pl
	[IPv6:2001:4070:101:2::1])
	by mx1.freebsd.org (Postfix) with ESMTP id 6F4D613C478
	for <freebsd-questions@freebsd.org>;
	Thu, 21 Feb 2008 16:56:56 +0000 (UTC)
	(envelope-from wojtek@wojtek.tensor.gdynia.pl)
Received: from wojtek.tensor.gdynia.pl (localhost [IPv6:::1])
	by wojtek.tensor.gdynia.pl (8.13.8/8.13.8) with ESMTP id m1LGrxKv002352;
	Thu, 21 Feb 2008 17:53:59 +0100 (CET)
	(envelope-from wojtek@wojtek.tensor.gdynia.pl)
Received: from localhost (wojtek@localhost)
	by wojtek.tensor.gdynia.pl (8.13.8/8.13.8/Submit) with ESMTP id
	m1LGrtnt002349; Thu, 21 Feb 2008 17:53:58 +0100 (CET)
	(envelope-from wojtek@wojtek.tensor.gdynia.pl)
Date: Thu, 21 Feb 2008 17:53:55 +0100 (CET)
From: Wojciech Puchar <wojtek@wojtek.tensor.gdynia.pl>
To: Jim Flowers <jflowers@ezo.net>
In-Reply-To: <20080221155416.M53150@ezo.net>
Message-ID: <20080221173851.D2250@wojtek.tensor.gdynia.pl>
References: <20080221155416.M53150@ezo.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
Cc: freebsd-questions@freebsd.org
Subject: Re: ipfw pipe show
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Feb 2008 16:57:23 -0000

> answer but there is one thing that is still a puzzle.
>
> I have a pipe configured as:
>
> ipfw pipe 2 config bw 768Kbit/s queue 20Kbytes
>
> When I use `ipfw -s 4 pipe 2 show, one bucket is shown:
>
> 00002: 768.000 Kbit/s    0 ms  20 KB 1 queues (1 buckets) droptail
>    mask: 0x00 0x00000000/0x0000 -> 0x00000000/0x0000
> BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp
>  0 tcp     12.###.##.77/80      88.###.##.175/2200  10565  8421549  0    0 103
>
> I understand that there is only one bucket but how are the source and
> destination ip addresses and ports chosen to be displayed from all that are

yes. use queues through this pipe for implementing smart traffic control 
(best of a kind i must say).

>
> While I'm at it this pipe has a 768 Kbps bw limit and is currently running at

what kind of traffic is it? single or lots of tcp connections? looks like 
a single connection

> less than 250 Kbps.  Why are packets still being dropped at the rate of about
> 1%, fairly consistently?

turn off the pipe and check the traffic again. it looks like your pipe is 
setup correctly.

are other rules ok?