In the last episode (Feb 20), Will Saxon said:
> I am trying to use ntop in the 'border filter' mode to get some
> statistics on that link, which is a gigE link typically seeing
> 40-120Mbps sustained traffic (varies throughout the day). The
> capturing interface is an intel pro/100+ server adapter, plugged into
> another port on the switch set to mirror the gigE interface.
>
> Obviously there ought to be some drops due to serialization
> differences, etc. But ntop is reporting upwards of 2/3 packets
> dropped in the kernel and running tcpdump on that interface for any
> length of time reports usually 50% drops in the kernel.
You first need to determine what is being overloaded. Run top. Is
ntop running at 100% cpu? If so, you'll need a faster machine. If
it's close to 100%, bumping debug.bpf_bufsize might help. What are the
user/system/irq CPU percentages while ntop is running?
--
Dan Nelson
[EMAIL PROTECTED]
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message
