[Oisf-users] Issues with Application Layer Filtering

[Jason Batchelor]

I was rolling 3.19 but for giggles installed the latest 3.21.2.

I executed the following commands in doing so:

rmmod ixgbe
tar -xzfv ixgbe-3.21.2.tar.gz
cd ixgbe-3.21.2/src
make clean && make && make install
modprobe ixgbe InterruptThrottleRate=4000 FdirPballoc=3
ifup p4p2
cd ../scripts
./set_irq_affinity p4p2

 ethtool -K p4p2 tso off
 ethtool -K p4p2 gro off
 ethtool -K p4p2 lro off
 ethtool -K p4p2 gso off
 ethtool -K p4p2 rx off
 ethtool -K p4p2 tx off
 ethtool -K p4p2 sg off
 ethtool -K p4p2 rxvlan off
 ethtool -K p4p2 txvlan off
 ethtool -N p4p2 rx-flow-hash udp4 sdfn
 ethtool -N p4p2 rx-flow-hash udp6 sdfn
 ethtool -n p4p2 rx-flow-hash udp6
 ethtool -n p4p2 rx-flow-hash udp4
 ethtool -C p4p2 rx-usecs 1000
 ethtool -C p4p2 adaptive-rx off


Spun up Suri and retested, unfortunately I'm still having the same problem
:/

Baffled by this one so far?

On Fri, Jun 6, 2014 at 4:59 PM, Cooper F. Nelson <cnelson at ucsd.edu> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Ok, what driver are you using?  Have you tried the latest one available
> here?
>
> > http://sourceforge.net/projects/e1000/files/ixgbe%20stable/
>
> - -Coop
>
> On 6/6/2014 2:50 PM, Jason Batchelor wrote:
> >> Uh, maybe I'm missing something, but why is your interface reporting a
> > capacity of 1GB/s?
> >
> > I don't have a firm answer for you off the top of my head why that is.
> > However, ethtool seems to show us at 10g speed.
> >
> > ethtool p4p2
> > Settings for p4p2:
> >         Supported ports: [ FIBRE ]
> >         Supported link modes:   1000baseT/Full
> >                                 10000baseT/Full
> >         Supported pause frame use: No
> >         Supports auto-negotiation: Yes
> >         Advertised link modes:  1000baseT/Full
> >                                 10000baseT/Full
> >         Advertised pause frame use: No
> >         Advertised auto-negotiation: Yes
> >         Speed: 10000Mb/s
> >         Duplex: Full
> >         Port: FIBRE
> >         PHYAD: 0
> >         Transceiver: external
> >         Auto-negotiation: on
> >         Supports Wake-on: d
> >         Wake-on: d
> >         Current message level: 0x00000007 (7)
> >                                drv probe link
> >         Link detected: yes
> >
> >
>
> >
>
> - --
> Cooper Nelson
> Network Security Analyst
> UCSD ACT Security Team
> cnelson at ucsd.edu x41042
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQEcBAEBAgAGBQJTkjnOAAoJEKIFRYQsa8FW18oH/jueoSijiceThPAWCDtgPoQG
> 1ziCUnvjIZsjtcLNKzR3oyzZ1xAHmOCchG9owcHUPK2EQZRTY6BCS7fTP2LgxUjM
> 8hSMmEQCU+7UYzkAv9jFBevRBRkoXKmOZwteAkxOt/bS848sIjgjfBN6aWqY4ax2
> chauv0SpqBLTyxnjrbBG8l8kYC6y0AzM5nR3bfGv6w4qwaQUbWIUM9qPn/VG5nfr
> EsrDBOPpA201cwc+zNZKZxYIheGT0j9pr6ljgmvL0HSMJvNJvtHQFJluzlUg0jfo
> /oaPmlddLcHUQ47nRQBdEyOduj09LNXCAGSSzkh3VgjNcscn9hQNQpRyCLsadoA=
> =O+wi
> -----END PGP SIGNATURE-----
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20140606/1013834a/attachment-0002.html>