[Oisf-users] (no subject)

[Peter Manev]

On Thu, Mar 27, 2014 at 2:43 PM, Travel Factory S.r.l. <mc8647 at mclink.it> wrote:
>
> Today I restarted my tests.
>
> - kernel upgraded to 3.13.6
> - lan driver recompiled
> - compiled suricata 2.0
> - suricata configured according to the new guide from Peter
> - lan traffic of about 500mbit
>
> Results:
> ifconfig still has dropped packets... actually there are more now, and not
> only as multiple of 4...
>
> my tests to filestore a file still fail
>
> capture.kernel_drops now increase during suricata work
>
> tried to add a BPF filter host <my_ip> and did the tests again, still losing
> packets and capture.kernel_drops increases (very little)
>
> I'm using AF_PACKET. I really don't know what to try next...
>
>
>
> My server is a HP 360 gen8 and lan card is also from HP:
> 04:00.0 Ethernet controller: Intel Corporation 82599EB 10-Gigabit SFI/SFP+
> Network Connection (rev 01)
>         Subsystem: Hewlett-Packard Company Ethernet 10Gb 2-port 560SFP+
> Adapter
>         Physical Slot: 1
>         Flags: bus master, fast devsel, latency 0, IRQ 28
>         Memory at f7b80000 (64-bit, non-prefetchable) [size=512K]
>         I/O ports at 6000 [size=32]
>         Memory at f7b70000 (64-bit, non-prefetchable) [size=16K]
>         [virtual] Expansion ROM at f4000000 [disabled] [size=512K]
>         Capabilities: [40] Power Management version 3
>         Capabilities: [50] MSI: Enable- Count=1/1 Maskable+ 64bit+
>         Capabilities: [70] MSI-X: Enable+ Count=64 Masked-
>         Capabilities: [a0] Express Endpoint, MSI 00
>         Capabilities: [e0] Vital Product Data
>         Capabilities: [100] Advanced Error Reporting
>         Capabilities: [140] Device Serial Number 38-ea-a7-ff-ff-92-e5-b0
>         Capabilities: [150] Alternative Routing-ID Interpretation (ARI)
>         Capabilities: [160] Single Root I/O Virtualization (SR-IOV)
>         Kernel driver in use: ixgbe
>         Kernel modules: ixgbe
>
>
>
>

Did you run the cpu affinity script for the NIC driver?
What is the output of - modinfo ixgbe ?
Is irqbalance off ?
How many threads are you starting in AF_PACKET?
Is all offloading disabled on the NIC?


thanks
-- 
Regards,
Peter Manev