<div dir="ltr"><div>Here is the output of both:</div><div><br></div><div>ethtool -k p4p2<br>Features for p4p2:<br>rx-checksumming: off<br>tx-checksumming: off<br>        tx-checksum-ipv4: off<br>        tx-checksum-ip-generic: off [fixed]<br>
        tx-checksum-ipv6: off<br>        tx-checksum-fcoe-crc: on [fixed]<br>        tx-checksum-sctp: off<br>scatter-gather: off<br>        tx-scatter-gather: off<br>        tx-scatter-gather-fraglist: off [fixed]<br>tcp-segmentation-offload: off<br>
        tx-tcp-segmentation: off<br>        tx-tcp-ecn-segmentation: off [fixed]<br>        tx-tcp6-segmentation: off<br>udp-fragmentation-offload: off [fixed]<br>generic-segmentation-offload: off<br>generic-receive-offload: off<br>
large-receive-offload: off<br>rx-vlan-offload: off<br>tx-vlan-offload: off<br>ntuple-filters: off<br>receive-hashing: on<br>highdma: on [fixed]<br>rx-vlan-filter: on<br>vlan-challenged: off [fixed]<br>tx-lockless: off [fixed]<br>
netns-local: off [fixed]<br>tx-gso-robust: off [fixed]<br>tx-fcoe-segmentation: on [fixed]<br>tx-gre-segmentation: off [fixed]<br>tx-ipip-segmentation: off [fixed]<br>tx-sit-segmentation: off [fixed]<br>tx-udp_tnl-segmentation: off [fixed]<br>
tx-mpls-segmentation: off [fixed]<br>fcoe-mtu: off [fixed]<br>tx-nocache-copy: off<br>loopback: off [fixed]<br>rx-fcs: off [fixed]<br>rx-all: off<br>tx-vlan-stag-hw-insert: off [fixed]<br>rx-vlan-stag-hw-parse: off [fixed]<br>
rx-vlan-stag-filter: off [fixed]<br>l2-fwd-offload: off</div><div><br></div><div>Also, these are the optimizations I have made based off the following article:</div><div><br></div><div><a href="http://dak1n1.com/blog/7-performance-tuning-intel-10gbe">http://dak1n1.com/blog/7-performance-tuning-intel-10gbe</a></div>
<div><br></div><div># -- 10gbe tuning from Intel ixgb driver README -- #</div><div># turn off selective ACK and timestamps<br>net.ipv4.tcp_sack = 0<br>net.ipv4.tcp_timestamps = 0</div><div># memory allocation min/pressure/max.<br>
# read buffer, write buffer, and buffer space<br>net.ipv4.tcp_rmem = 10000000 10000000 10000000<br>net.ipv4.tcp_wmem = 10000000 10000000 10000000<br>net.ipv4.tcp_mem = 10000000 10000000 10000000</div><div><strong>net.core.rmem_max = 524287</strong><br>
net.core.wmem_max = 524287<br><strong>net.core.rmem_default = 524287</strong><br>net.core.wmem_default = 524287<br>net.core.optmem_max = 524287<br><strong>net.core.netdev_max_backlog = 300000</strong><br><br></div></div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Fri, Jun 6, 2014 at 3:20 PM, Cooper F. Nelson <span dir="ltr"><<a href="mailto:cnelson@ucsd.edu" target="_blank">cnelson@ucsd.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
What is the output of 'ethtool -k' for your capture interface?<br>
<br>
What are your sysctl settings for these variables?<br>
<br>
net.core.netdev_max_backlog<br>
net.core.rmem_default<br>
net.core.rmem_max<br>
<div><br>
On 6/6/2014 1:14 PM, Jason Batchelor wrote:<br>
><br>
> I hit reliably both on the wire and on a pcap. This is why I feel there<br>
> has to be some issue with application layer processing. I am somewhat<br>
> perplexed by this and seek any guidance those with more experience may<br>
> be able to give. Thanks in advance!<br>
><br>
<br>
</div>- --<br>
Cooper Nelson<br>
Network Security Analyst<br>
UCSD ACT Security Team<br>
<a href="mailto:cnelson@ucsd.edu">cnelson@ucsd.edu</a> x41042<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v2.0.17 (MingW32)<br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
iQEcBAEBAgAGBQJTkiJ9AAoJEKIFRYQsa8FWdOgH/1dOj5yLjXsMF0AugkweRL/y<br>
tuFcJBnl8i9yrQHxG/zgl8SKroIL5Vbl9gBAbwqleJuyOTo9Dw4fE9Uj1p2cOt2w<br>
Iss0VXgTIURmJvOUQD/KB6Dmih/3XgPeCr+M4aRPXoVdjMpV+MYkH0cJE2ES4hjy<br>
cH1ecvGqAPwHGsbGOKr/ij9RbG1UdffK8P34SYnZg/w3QARaEa+k8lGQwVEdwbRt<br>
Lbu8+Izi24yCd8SNAAqqQMuO0lWoRTRjO5j0HAagD4PenlAHG3kGcjz8L+Dva+ng<br>
T4YiCZRyWwg70lDTkojCYuUOTZ6WTP1pTbJcHunbZtO0W8n3zQuWhDWPsCLpx7E=<br>
=MDfe<br>
-----END PGP SIGNATURE-----<br>
</blockquote></div><br></div>