[Oisf-users] Issues with Application Layer Filtering

[Jason Batchelor]

> Uh, maybe I'm missing something, but why is your interface reporting a
capacity of 1GB/s?

I don't have a firm answer for you off the top of my head why that is.
However, ethtool seems to show us at 10g speed.

ethtool p4p2
Settings for p4p2:
        Supported ports: [ FIBRE ]
        Supported link modes:   1000baseT/Full
                                10000baseT/Full
        Supported pause frame use: No
        Supports auto-negotiation: Yes
        Advertised link modes:  1000baseT/Full
                                10000baseT/Full
        Advertised pause frame use: No
        Advertised auto-negotiation: Yes
        Speed: 10000Mb/s
        Duplex: Full
        Port: FIBRE
        PHYAD: 0
        Transceiver: external
        Auto-negotiation: on
        Supports Wake-on: d
        Wake-on: d
        Current message level: 0x00000007 (7)
                               drv probe link
        Link detected: yes


On Fri, Jun 6, 2014 at 4:35 PM, Cooper F. Nelson <cnelson at ucsd.edu> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Uh, maybe I'm missing something, but why is your interface reporting a
> capacity of 1GB/s?
>
> >   *-network:1
> >        description: Ethernet interface
> >        product: Ethernet 10G 2P X520 Adapter
> >        vendor: Intel Corporation
> >        physical id: 0.1
> >        bus info: pci at 0000:42:00.1
> >        logical name: p4p2
> >        version: 01
> >        serial: a0:36:9f:07:ec:02
> >        capacity: 1GB/s
> >        width: 64 bits
> >        clock: 33MHz
> >        capabilities: pm msi msix pciexpress vpd bus_master cap_list rom
> ethernet physical fibre 1000bt-fd autonegotiation
> >        configuration: autonegotiation=on broadcast=yes driver=ixgbe
> driverversion=3.19.1-k duplex=full firmware=0x8000030d latency=0 link=yes
> multicast=yes port=fibre
> >        resources: irq:76 memory:d0f00000-d0f7ffff ioport:7ce0(size=32)
> memory:d0ffc000-d0ffffff memory:d1100000-d117ffff memory:d1380000-d147ffff
> memory:d1480000-d157ffff
>
> Can you run ethtool on your interface (no options) to verify its running
> at full speed?  Example below:
>
> > Settings for eth2:
> >         Supported ports: [ FIBRE ]
> >         Supported link modes:   1000baseT/Full
> >                                 10000baseT/Full
> >         Supported pause frame use: No
> >         Supports auto-negotiation: Yes
> >         Advertised link modes:  1000baseT/Full
> >                                 10000baseT/Full
> >         Advertised pause frame use: No
> >         Advertised auto-negotiation: Yes
> >         Speed: 10000Mb/s
> >         Duplex: Full
> >         Port: FIBRE
> >         PHYAD: 0
> >         Transceiver: external
> >         Auto-negotiation: on
> >         Supports Wake-on: d
> >         Wake-on: d
> >         Current message level: 0x00000007 (7)
> >                                drv probe link
> >         Link detected: yes
>
>
> - --
> Cooper Nelson
> Network Security Analyst
> UCSD ACT Security Team
> cnelson at ucsd.edu x41042
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.17 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iQEcBAEBAgAGBQJTkjQLAAoJEKIFRYQsa8FWrnoH+gNZsOHc0jJ+u1OFTh4Yh1tc
> qNlFq16MqTDvSkPX37A9v2FIajyffsUw/uuE8ezPIZfbB64DabCcjXJST5n9JF4L
> 8CSEE7W/JXnW5PekYrG5bUoaz7uIwrtfdVhzLaJ732IU7PS19s8Wjx3ojXnSVBC2
> +5tP00TSETjS4BIWOge3b+lSkfIhyPgouG4DI6tTx7fPIEz3b2sufW9IZbgTXfMh
> vQSHB6X9dcyQWJAPUNjzgrVYfjLKl9KrzT8EChvvdNm+iRUrOqOC2DPoDzTDlmz6
> DxJyH10mlsakwbPfbsSqBX3KFDALUO+NenzEQeyOmEKyoXr7BZVJzzDWyfA5hx0=
> =c4LT
> -----END PGP SIGNATURE-----
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20140606/f009e577/attachment-0002.html>