Subject: Re: NetBSD in BSD Router / Firewall Testing
To: Mike Tancsa <mike@sentex.net>
From: Steven M. Bellovin <smb@cs.columbia.edu>
List: tech-net
Date: 12/01/2006 11:25:31
On Fri, 01 Dec 2006 10:00:09 -0500
Mike Tancsa <mike@sentex.net> wrote:

> At 09:55 AM 12/1/2006, Steven M. Bellovin wrote:
> 
> > > ipintrq:
> > >          queue length: 0
> > >          maximum queue length: 256
> > >          packets dropped: 133721212
> >
> >This is the second report we've seen recently of packet drops in this
> >queue.  We need to understand what's going on, I think.
> 
> Hi,
> 
> I am guessing I am just overwhelming the box no ? Each of my
> generator boxes are blasting about 600Kpps in opposite directions
> through the box 10 byte UDP packets.  Even when doing just the one
> stream in NetBSD, the box (r2) acting as the router is totally
> unresponsive from the serial console and OOB NIC.
> 
I'd have expected the problem to show as drops on the output queue, not
ipintrq, unless you're running at near-100% CPU.  The previous case did
not involve CPU exhaustion -- does yours?

		--Steve Bellovin, http://www.cs.columbia.edu/~smb