
deri at ntop
Aug 15, 2012, 9:08 AM
Post #2 of 2
(285 views)
Permalink
|
Peter having PROMISC set, it means that all incoming packets received by the NIC, regardless of their MAC address, are sent to NAPI/Linux. The system tries to dispatch them to the correct component, based on the MAC address etc etc. regardless of the fact that monitoring apps are running or not. Having drops means that your system is not fast enough to handle all these packets. THis does NOT mean that your system is necessary slow, but that that NAPI is not too efficient. One question: how did you balance the interrupts across cores? Did you 1. kill irqbalance 2. run "PF_RING/drivers/PF_RING_aware/intel/ixgbe/ixgbe-3.7.17/scripts/set_irq_affinity.sh eth6" ? If not please do. Cheers Luca On Aug 15, 2012, at 1:20 PM, Peter Bates <peter.bates [at] ucl> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > Hello all > > Apologies in advance - this isn't strictly a PF_RING question or > relevant to this list, but I know people here do have similar setups. > > On a system here, even without necessarily running an application to > monitor the traffic, I'm still seeing drops at the actual interface > (ixgbe driver, PF_RING transparent_mode=1): > > eth6 Link encap:Ethernet HWaddr 00:1B:21:D8:3A:15 > UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1 > RX packets:219069786 errors:0 dropped:2614719868 overruns:0 > frame:0 > TX packets:6 errors:0 dropped:0 overruns:0 carrier:0 > collisions:0 txqueuelen:1000 > RX bytes:2140536201 (1.9 GiB) TX bytes:468 (468.0 b) > > Is this simply because my hardware cannot cope, or are there any > further settings I can tweak here - such as increasing the MTU? > > I currently run: > > ethtool -C eth6 rx-usecs 1000 > ethtool -C eth6 adaptive-rx off > ethtool -K eth6 tso off > ethtool -K eth6 gro off > ethtool -K eth6 lro off > ethtool -K eth6 gso off > ethtool -K eth6 rx off > ethtool -K eth6 tx off > ethtool -K eth6 sg off > > Thanks for any advice. > > - -- > Peter Bates > Senior Computer Security Officer Phone: +44(0)2076792049 > Information Services Division Internal Ext: 32049 > University College London > London WC1E 6BT > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.17 (MingW32) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ > > iQEcBAEBAgAGBQJQK4YGAAoJELhVoVpEMS6Rqq8IAJU9SQSRP0bSY3Dnu56NdMam > zejwKC2vN+7Da0ET7wRYVpJXA0ImXx6NF9ybrtlH7bTiRjw4r+wY9f/71Yu/ElyE > DvYvn4nRk1NO2T1i5yUW3kneqs9xalxojJXKpFYffA826AJX+a0X1YZPAAfczR17 > PWSVhaB+mRe7R9dObiEp66ksGW70JD4lkIsYQbIulmriay24FeAKFjpjhxPprz6E > t+YQMUakjyyYzdSvAJtEVhieJyZhbW+29+yRhg9MCKDpAyG2YjNgZmUpcE3/2Noh > iqs+BGUuWaWWE1PdfE9oYKpePozlTu2YNfrFCurQv+UbjIOLWZomxj3T/lYN5GI= > =41l/ > -----END PGP SIGNATURE----- > > _______________________________________________ > Ntop-misc mailing list > Ntop-misc [at] listgateway > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list Ntop-misc [at] listgateway http://listgateway.unipi.it/mailman/listinfo/ntop-misc
|