Hi Gautam I guess you are using standard drivers, with defragmentation enabled in the pf_ring kernel module, in that case if you have many fragments, at that rate, that could slow down the processing. Did you try disabling defragmentation to figure out if the bottleneck is there?
Regards Alfredo > On 19 Mar 2018, at 06:35, Chandrika Gautam <[email protected]> > wrote: > > Hi, > > We are observing some intermittent drops in pf_ring statistics in one of the > production sites. I need your valuable inputs to debug this issue. > > Brief description of the setup is - > > Fragmentation is enabled at kernel level. Traffic at site is varying from > 500Mbps to 1 Gbps. We have observed cpu usage per thread of our application > and it is not exceeding ~20-30 percent and there are no alarms raised by > applications. > So I am suspecting whether kernel fragmentation logic could slow down the > processing and causing pf_ring to drop these packets. Can you please confirm > whether this can cause the drop ?If yes, How shall we debug this issue. > Please let me know if you need any data from the sites. > > > Regards, > Gautam > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
