From owner-freebsd-questions@FreeBSD.ORG Wed Oct 21 15:20:30 2009 Return-Path: Delivered-To: questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5F6261065672 for ; Wed, 21 Oct 2009 15:20:30 +0000 (UTC) (envelope-from amvandemore@gmail.com) Received: from mail-yw0-f178.google.com (mail-yw0-f178.google.com [209.85.211.178]) by mx1.freebsd.org (Postfix) with ESMTP id 17A2E8FC0A for ; Wed, 21 Oct 2009 15:20:29 +0000 (UTC) Received: by ywh8 with SMTP id 8so5996555ywh.3 for ; Wed, 21 Oct 2009 08:20:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type; bh=a1e4qwFDQoubTs43qPOPRXVh4ZmqW/AXiKkNsBNxiu4=; b=BnOHk8IqDE7Ax+og/VMXUT06lr5I2JyLZD7sfuwaSASJ5IOpUz3LyLD0d1/kN80MmX HkVY25s8VJaFUGomn7h8TT0Rx0VlAMmdHvbBWEwRkLm1Av33orHKwDhGrgQ+xcARF9Mk IFvacmUDeihyHv+C7EuX3meiONPXT8P0B9G2g= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=ghpAmtz2EOHfpl1Bmk9Wui/nAmvcNW3NLk4+dqtaIUMmAbtYuzIeA0/zctP8G6jGqC dxxYPTNZLnnKaFLmqVW35RTr0BZK/3tnfGb8C3UMaYxuK4pgA3kOQQyYdhumWcUX7vW0 C1N3G6aZdvMtkrtRvoK5/aAUSzNKlTKnDSaXE= MIME-Version: 1.0 Received: by 10.150.251.27 with SMTP id y27mr13285369ybh.227.1256138427864; Wed, 21 Oct 2009 08:20:27 -0700 (PDT) In-Reply-To: <2dab70a30910210758q616eb1e6sb42d5405f0ec9d1f@mail.gmail.com> References: <2dab70a30910210758q616eb1e6sb42d5405f0ec9d1f@mail.gmail.com> Date: Wed, 21 Oct 2009 10:20:27 -0500 Message-ID: <6201873e0910210820h1f7f9ce4y69df25fffb3681bc@mail.gmail.com> From: Adam Vande More To: Paul Halliday Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Cc: questions@freebsd.org Subject: Re: Looking for troubleshooting tips. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Oct 2009 15:20:30 -0000 On Wed, Oct 21, 2009 at 9:58 AM, Paul Halliday wrote: > I use Freebsd as the base for my network monitoring sensors. These > machines run a netflow probe, act as a netflow collector and spool > full content data from a snort process FIFO that is bound to a span > port. During peak hours this can be 100MB saturated, its connected to > a GB intel NIC on the box (there is a separate uplink). > > In the background numerous little scripts run to produce summary data. > > The basic template for these systems has been the same for the past 4 > years and things have worked great. Recently, one of these machines > started to become a little laggy and I can't seem to identify the > issue. > > This system has always seen a lot of packet loss, I expect this though > as it is a busy site but this has never affected its performance. Can > an overloaded NIC cause serious performance issues like those I am > seeing? > > This is a recent top: > > last pid: 98870; load averages: 1.54, 1.41, 1.31 up 1+01:57:10 > 11:50:24 > 142 processes: 2 running, 139 sleeping, 1 zombie > CPU states: 30.9% user, 0.0% nice, 15.0% system, 1.7% interrupt, 52.4% > idle > Mem: 450M Active, 328M Inact, 168M Wired, 33M Cache, 110M Buf, 3700K Free > Swap: 2048M Total, 5112K Used, 2043M Free > > 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 > > To be honest, I don't know which counters are important. Is there > anything specific I should be concentrating on to determine the cause? > > Thanks. > > The top stats indicate a moderate load, nothing to worry about there. I think you'll need to focus on network specific troubleshooting and you'll need to provide more info than what you've given to start with that. -- Adam Vande More