From owner-freebsd-net@FreeBSD.ORG Tue Jul 15 21:20:13 2008 Return-Path: Delivered-To: freebsd-net@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C63441065679; Tue, 15 Jul 2008 21:20:13 +0000 (UTC) (envelope-from robin@icir.org) Received: from fruitcake.ICSI.Berkeley.EDU (fruitcake.ICSI.Berkeley.EDU [192.150.186.11]) by mx1.freebsd.org (Postfix) with ESMTP id A9D318FC1B; Tue, 15 Jul 2008 21:20:13 +0000 (UTC) (envelope-from robin@icir.org) Received: from empire.ICSI.Berkeley.EDU (empire.ICSI.Berkeley.EDU [192.150.186.169]) by fruitcake.ICSI.Berkeley.EDU (8.12.11.20060614/8.12.11) with ESMTP id m6FLKDCb017358; Tue, 15 Jul 2008 14:20:13 -0700 (PDT) Received: by empire.ICSI.Berkeley.EDU (Postfix, from userid 502) id 55192E28809; Tue, 15 Jul 2008 14:20:13 -0700 (PDT) Date: Tue, 15 Jul 2008 14:20:13 -0700 From: Robin Sommer To: "Bruce M. Simpson" Message-ID: <20080715212013.GA91123@icir.org> References: <20080711202737.GB27418@icir.org> <487B5840.3000401@FreeBSD.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <487B5840.3000401@FreeBSD.org> User-Agent: Mutt/1.5.17 (2007-11-01) Cc: freebsd-net@FreeBSD.org Subject: Re: BPF problems on FreeBSD 7.0 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Jul 2008 21:20:13 -0000 On Mon, Jul 14, 2008 at 14:44 +0100, Bruce M. Simpson wrote: > One place to start might be: netstat -B output in 7.x (I *think* this got > MFCed), this will let us see what the drop count is for the Bro process, > and what the flags are for the open BPF descriptors in the system. Thanks for the suggestion. Here's the netstat -B output at the time it has stalled (after about 6 hours of working normally): Pid Netif Flags Recv Drop Match Sblen Hblen Command 14557 nxge0 p--s--- 2162189525 32514465 42815457 4194248 4194258 bro Top shows: PID USERNAME THR PRI NICE SIZE RES STATE C TIME WCPU COMMAND 14557 bro 1 -58 0 272M 267M 5 25:53 0.00% bro A few minutes after starting the process, when Bro was still working fine, a netstat -B output was: # netstat -B Pid Netif Flags Recv Drop Match Sblen Hblen Command 14557 nxge0 p--s--- 4779235 0 94967 0 0 bro Thanks, Robin -- Robin Sommer * Phone +1 (510) 666-2886 * robin@icir.org ICSI/LBNL * Fax +1 (510) 666-2956 * www.icir.org