From owner-freebsd-net@FreeBSD.ORG Sat Apr 5 15:27:47 2014 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5A6C2802 for ; Sat, 5 Apr 2014 15:27:47 +0000 (UTC) Received: from mail-pb0-x235.google.com (mail-pb0-x235.google.com [IPv6:2607:f8b0:400e:c01::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 2DE3ACEA for ; Sat, 5 Apr 2014 15:27:47 +0000 (UTC) Received: by mail-pb0-f53.google.com with SMTP id rp16so4717614pbb.26 for ; Sat, 05 Apr 2014 08:27:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=Henmy3mgVV4jafpHqci/7S53cpm6ck3ln2EKx+OBsTw=; b=XcweRaCQAv75vZVc5NbkEJ/44JVqh+eJnZm1iiUE10HtaBgvoaxW4N759ZdMHRQ70t amDryjM/C4n4c0NggS56ck+lIL9iwScgcrTQs95Ss0mGbvwNLH5QX+hOX6qe8l9icelC p6VEdCvyLZ9Iix30kMUCek7NX8i505f2TV9XsoLcXt+CGFr4tgAyJMoLP+BylL9X3OJ/ gDKeHWnFrxVAkheXZM57/S69DdhmfGz4gL5TqLqrkbH4oa6YOYU/Khha+ws8xoEg8kLV F4o2/TsZKzdeT/GGLwEhW0p+uNTMdo1sXy4lc5J2T9qSRODGJEsHoUSZdckBntAxI3ny aLsg== MIME-Version: 1.0 X-Received: by 10.66.141.12 with SMTP id rk12mr62933pab.152.1396711666088; Sat, 05 Apr 2014 08:27:46 -0700 (PDT) Sender: ermal.luci@gmail.com Received: by 10.70.88.109 with HTTP; Sat, 5 Apr 2014 08:27:46 -0700 (PDT) In-Reply-To: References: Date: Sat, 5 Apr 2014 17:27:46 +0200 X-Google-Sender-Auth: nAZZMc6Z-twO9QA88ohfDuzc6pQ Message-ID: Subject: Re: netisr 0 : %100 and other netisr threads are waiting From: =?ISO-8859-1?Q?Ermal_Lu=E7i?= To: =?ISO-8859-1?Q?=D6zkan_KIRIK?= Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.17 Cc: freebsd-net X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Apr 2014 15:27:47 -0000 Hello, what are you using to divert packets, ipfw(4) or pf(4)? Can you show your configuration on that as well! On Fri, Apr 4, 2014 at 6:54 AM, =D6zkan KIRIK wrote= : > Hi, > > I am trying to use suricata on FreeBSD 10 amd64. > FreeBSD behaves as a VLAN router and NAT Box. > > Traffic is about 400Mbps. > When i diverted traffic to suricata, swi: netisr 0 thread gets %100 cpu. > other netisr threads are %0. And Even I remove the divert rule, netisr > still eats %100 cpu. I think that something looping :) > And after 1-2 minutes, one of igb0 and igb1 stops working. > Only reboot solves problem. > > Hardware has 8 cores, 24GB Ram > > My loader.conf : > > hw.igb.txd=3D"4096" > hw.igb.rxd=3D"4096" > hw.igb.rx_process_limit=3D1024 > hw.igb.num_queues=3D3 > net.isr.maxthreads=3D3 > net.isr.bindthreads=3D1 > net.isr.defaultqlimit=3D4096 > net.isr.maxqlimit=3D20480 > net.link.ifqmaxlen=3D10240 > > How can I debug this situation? > Any suggestions? > > Best regards > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > --=20 Ermal