From owner-freebsd-stable@FreeBSD.ORG Tue Jul 4 15:04:20 2006 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5EDC516A4DA for ; Tue, 4 Jul 2006 15:04:20 +0000 (UTC) (envelope-from owensr@comcast.net) Received: from sccrmhc14.comcast.net (sccrmhc14.comcast.net [63.240.77.84]) by mx1.FreeBSD.org (Postfix) with ESMTP id E3E1343D46 for ; Tue, 4 Jul 2006 15:04:19 +0000 (GMT) (envelope-from owensr@comcast.net) Received: from lappy2 (c-69-243-17-124.hsd1.va.comcast.net[69.243.17.124]) by comcast.net (sccrmhc14) with SMTP id <20060704150419014004k05re>; Tue, 4 Jul 2006 15:04:19 +0000 Message-ID: <001701c69f7b$1e6b2550$0301a8c0@LAPPY2> From: "Raymond Owens" To: Date: Tue, 4 Jul 2006 11:04:16 -0400 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1807 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: if_bridge.c question X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Jul 2006 15:04:20 -0000 I am running 6.1 release on some systems. I have a question about the = bridging changes in if_bridge.c which were made in the stable branch. I = am having a problem bonding two heavily loaded network interfaces for = IDS purposes. There is greatly increased packets droppage when using = 'ifconfig bridge0 monitor' to merge the two sniff interfaces under 6.1 = release. (I am trying to get around using two concurrent Snort = processeses) Is it expected that the new bridge monitor function introduced in the = stable branch will have much less packet droppage in identical = situations when bonding busy interfaces? If so is there a way to get = this without upgrading whole system to 6.1 stable? Will binary upgrade = using 6.1 stable ISO provide this functionality also? Also I had tried netgraph (and one2many) to bond the interfaces and it = worked fine but at traffic peaks during day it would eventually stop = seeing any packets at all on the virtual interface. Thanks