Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 06 Dec 2012 09:30:14 +0000
From:      Matthew Seaman <matthew@freebsd.org>
To:        Olivier Nicole <Olivier.Nicole@cs.ait.ac.th>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: netstat -i
Message-ID:  <50C065A6.6080704@freebsd.org>
In-Reply-To: <201212060912.qB69CcTG018111@banyan.cs.ait.ac.th>
References:  <201212060551.qB65phdO016130@banyan.cs.ait.ac.th> <50C05FD8.1040609@freebsd.org> <201212060912.qB69CcTG018111@banyan.cs.ait.ac.th>

next in thread | previous in thread | raw e-mail | index | archive | help
On 06/12/2012 09:12, Olivier Nicole wrote:
> There is only one layer 3 network on that physical infrastructure (at
> least in that VLAN). And there are only 8 machines in that VLAN, no
> routing, as the VLAN is primarily designed for NFS.
> 
> I did not sjow the most disturbing figure where at output bytes is 3.7
> TB at MAC level but only 156 GB at IP level (2000 times less). The
> large amount of output bytes is understandable for the machine is an
> NFS server.
> 
> 3TB is not big, but is at IP level, not at MAC level.

It could be down to broken equipment attached to the network.  If
something is spewing out malformed packets, you might well see that sort
of effect.

Try firing up tcpdump or wireshark -- they'll both capture the layer 2
traffic and given the volumes you're seeing, it should be fairly obvious
from visual inspection of the output what is going on.

	Cheers,

	Matthew






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?50C065A6.6080704>