From owner-freebsd-net Wed Oct 9 18:51: 4 2002 Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0CB5E37B401; Wed, 9 Oct 2002 18:51:03 -0700 (PDT) Received: from carp.icir.org (carp.icir.org [192.150.187.71]) by mx1.FreeBSD.org (Postfix) with ESMTP id B322143E3B; Wed, 9 Oct 2002 18:51:02 -0700 (PDT) (envelope-from rizzo@carp.icir.org) Received: from carp.icir.org (localhost [127.0.0.1]) by carp.icir.org (8.12.3/8.12.3) with ESMTP id g9A1p2O2055508; Wed, 9 Oct 2002 18:51:02 -0700 (PDT) (envelope-from rizzo@carp.icir.org) Received: (from rizzo@localhost) by carp.icir.org (8.12.3/8.12.3/Submit) id g9A1p2Gn055507; Wed, 9 Oct 2002 18:51:02 -0700 (PDT) (envelope-from rizzo) Date: Wed, 9 Oct 2002 18:51:02 -0700 From: Luigi Rizzo To: Christopher Smith Cc: hardware@FreeBSD.ORG, net@FreeBSD.ORG Subject: Re: High interrupt load on firewalls Message-ID: <20021009185102.A55432@carp.icir.org> References: <20021009170002.A54675@carp.icir.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: ; from csmith@its.uq.edu.au on Thu, Oct 10, 2002 at 11:18:42AM +1000 Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, Oct 10, 2002 at 11:18:42AM +1000, Christopher Smith wrote: ... > Ok, so any of the network benching products that can spit out a stream of > UDP traffic should suffice ? i presume so, yes. I have some tweaks in the kernel to duplicate packets in the kernel and get higher peak rates, but the patches for that are broken at the moment. > Ok. Will normal netstat do ? I tried it on one of our machines and got yes, the only advantage of "ns" is that it shows multiple interfaces and does not scroll the screen. > This only seems to indicate ca. 80kpps, which doesn't seem to agree with the > numbers I see in 'systat -ip'. Is there a counter rolling over somewhere ? no idea. BTW it seems that you are adding in and out traffic. when i said 260kpps i meant that the box was receiving 260kpps (actually more) and transmitting 260kpps. On the other hand i had basically no firewall work, so that is in line with your numbers. cheers luigi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message