Date: Sat, 5 Apr 2014 00:02:46 -0700 From: hiren panchasara <hiren.panchasara@gmail.com> To: =?UTF-8?B?w5Z6a2FuIEtJUklL?= <ozkan.kirik@gmail.com> Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org> Subject: Re: netisr 0 : %100 and other netisr threads are waiting Message-ID: <CALCpEUHQJtOME9qLCn4N5PaZa=cRBdmeRrPR7hSwTPghDz_RuQ@mail.gmail.com> In-Reply-To: <CAAcX-AFDqwG0xJ8_qcaG_K0-TC8xE4EfKLR0GURkMGQiZOKCpQ@mail.gmail.com> References: <CAAcX-AFDqwG0xJ8_qcaG_K0-TC8xE4EfKLR0GURkMGQiZOKCpQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Apr 3, 2014 at 9:54 PM, =C3=96zkan KIRIK <ozkan.kirik@gmail.com> wr= ote: > Hi, > > I am trying to use suricata on FreeBSD 10 amd64. > FreeBSD behaves as a VLAN router and NAT Box. > > Traffic is about 400Mbps. > When i diverted traffic to suricata, swi: netisr 0 thread gets %100 cpu. > other netisr threads are %0. And Even I remove the divert rule, netisr > still eats %100 cpu. I think that something looping :) To be clear, this happens only *after* you divert traffic to suricata, righ= t? > And after 1-2 minutes, one of igb0 and igb1 stops working. > Only reboot solves problem. > > Hardware has 8 cores, 24GB Ram > > My loader.conf : > > hw.igb.txd=3D"4096" > hw.igb.rxd=3D"4096" > hw.igb.rx_process_limit=3D1024 > hw.igb.num_queues=3D3 > net.isr.maxthreads=3D3 > net.isr.bindthreads=3D1 > net.isr.defaultqlimit=3D4096 > net.isr.maxqlimit=3D20480 > net.link.ifqmaxlen=3D10240 > > How can I debug this situation? > Any suggestions? I am not an expert here but please upload o/p for "sysctl net.isr" and "sysctl dev.igb" which would show error counters to get some idea about why igb0 or igb1 stops working. Whether we are running out of some resources or something else is going on. cheers, Hiren
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CALCpEUHQJtOME9qLCn4N5PaZa=cRBdmeRrPR7hSwTPghDz_RuQ>