<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Before as of up to yesterday and this happens on both 2.0.7 and 2.0.8. <div>It is possible it is something in my network but I dont see any indications. </div><div>To my knowledge, typically when PF Ring slots run out, it is either a memory leak or buffer overflow or too many sessions to deal with.<br><br><div>> Date: Thu, 7 May 2015 22:27:08 +0200<br>> Subject: Re: [Oisf-users] Sudden packet loss on 2.0.7 and 2.0.8<br>> From: petermanev@gmail.com<br>> To: coolyasha@hotmail.com<br>> CC: oisf-users@lists.openinfosecfoundation.org<br>> <br>> On Thu, May 7, 2015 at 10:20 PM, Yasha Zislin <coolyasha@hotmail.com> wrote:<br>> > Just noticed today that version 2.0.7 and 2.0.8 on my set up start getting<br>> > huge packet loss after less than 24 hours of running. About 30% packet loss.<br>> > It was averaging about 0.05% before.<br>> > This was not happening before. Memory utilization is about 70% (of 140GB).<br>> <br>> Before - as in 2.0.7 ?<br>> <br>> <br>> ><br>> > PF Ring reports that it run out of "Free Num Slots" and I believe that's<br>> > when packet loss starts to happen.<br>> ><br>> > Not sure how to troubleshoot this since stats.log dont show anything weird.<br>> > Maybe PFRing slots buffer gets full but how do I check in Suricata what is<br>> > filling it up?<br>> ><br>> > Any suggestions would be appreciated.<br>> ><br>> > Thank you.<br>> ><br>> ><br>> > _______________________________________________<br>> > Suricata IDS Users mailing list: oisf-users@openinfosecfoundation.org<br>> > Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/<br>> > List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users<br>> > Suricata User Conference November 4 & 5 in Barcelona: http://oisfevents.net<br>> <br>> <br>> <br>> -- <br>> Regards,<br>> Peter Manev<br></div></div> </div></body>
</html>