From owner-freebsd-questions@FreeBSD.ORG Fri Mar 24 23:03:51 2006 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2646516A400 for ; Fri, 24 Mar 2006 23:03:51 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from pi.codefab.com (pi.codefab.com [199.103.21.227]) by mx1.FreeBSD.org (Postfix) with ESMTP id BDB3E43D46 for ; Fri, 24 Mar 2006 23:03:50 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from localhost (localhost [127.0.0.1]) by pi.codefab.com (Postfix) with ESMTP id 0C2B65C7A; Fri, 24 Mar 2006 18:03:50 -0500 (EST) Received: from pi.codefab.com ([127.0.0.1]) by localhost (pi.codefab.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 21331-02; Fri, 24 Mar 2006 18:03:49 -0500 (EST) Received: from [199.103.21.238] (pan.codefab.com [199.103.21.238]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by pi.codefab.com (Postfix) with ESMTP id 2D7FD5C66; Fri, 24 Mar 2006 18:03:49 -0500 (EST) In-Reply-To: <20060324211741.GA40819@bewilderbeast.blackhelicopters.org> References: <20060324211741.GA40819@bewilderbeast.blackhelicopters.org> Mime-Version: 1.0 (Apple Message framework v746.3) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <83E0BC22-BFFA-47EE-88DA-D6A5D1862081@mac.com> Content-Transfer-Encoding: 7bit From: Charles Swiger Date: Fri, 24 Mar 2006 18:03:47 -0500 To: Michael W. Lucas X-Mailer: Apple Mail (2.746.3) X-Virus-Scanned: amavisd-new at codefab.com Cc: questions@freebsd.org Subject: Re: filling up UDP socket buffers like mad X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Mar 2006 23:03:51 -0000 On Mar 24, 2006, at 4:17 PM, Michael W. Lucas wrote: > Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server. > > I'm having trouble with DNS, DHCP, and syslogd locking up, and I think > I've found what they all share in common. > > During the lockups, the box starts dropping UDP due to full socket > buffers. I have a dumb little script to capture the rate of drops > over 5 seconds, and it's about 45 a second. > > 168725 dropped due to full socket buffers > 168958 dropped due to full socket buffers There is generally a cause behind the socket buffers filling up, whether that is some form of livelock due to an OS problem or a misconfiguration with a firewall/dummynet setup. You could look at the output of "netstat -a(n)" for insight as to where the packets are being queued up, but "netstat -s" would be useful to show to us as well. -- -Chuck