Re: Application layer classifier for ipfw

2008-08-01 Thread Petri Helenius
Patrick Tracanelli wrote: I have raised the queue lenght a lot, up to 40960, and the behavior was the same. Ill keep trying and let you know if any success. No queue depth is going to help you if you receive more data than you can process. Pete

Re: FreeBSD 7.1 tcp problem (syncache)?

2008-12-01 Thread Petri Helenius
I couldn't get Apache 2.2 ab to work on 7.0 at all. The ab from 2.0 worked fine... Pete Andre Oppermann wrote: Paulo Fragoso wrote: Hi, We was using one machine with FreeBSD 6.4-RELEASE running apache-worker-2.2.3 + mysql, this server can answer high request from one client using ab:

Re: bsnmpd & BGP full view

2008-12-26 Thread Petri Helenius
On Dec 25, 2008, at 10:10 PM, Hartmut Brandt wrote: In any case it should re-read the kernel table only every 10 minutes and in the mean time monitor the routing socket to update its copy of the table. If of course someone is doing a lot of updates on Why does it have to re-read the tabl

Signalling out of accept

2009-05-06 Thread Petri Helenius
Hi, What is the preferred way of getting out of an accept in an multithreaded application? On linux it works that the in-kernel filedescriptor is closed from the signal handler but that does not seem to do the trick in FreeBSD 7.1 or 7.2. Is using poll the only option or preferred anyway?

Re: bikeshed for all!

2007-12-12 Thread Petri Helenius
How about routing domain or forwarding domain? Pete Julian Elischer wrote: So, I'm playing with some multiple routing table support.. the first version is a minimal impact version with very limited functionality. It's done that way so I can put it in RELENG_6/7 without breaking ABIs (I hope

Re: bikeshed for all!

2007-12-12 Thread Petri Helenius
Julian Elischer wrote: Petri Helenius wrote: How about routing domain or forwarding domain? which shortens too rdom / rd ? fd would be quite overloaded acronym. vrf would work for me too. Quite accepted industry term. Pete freebsd-net@freebsd.org mailing list http

named.root

2008-02-05 Thread Petri Helenius
Any chance the recent root zone changes would make it to 7.0? Pete ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: HEADS UP: zerocopy bpf commits impending

2008-03-24 Thread Petri Helenius
Pardon the basic question, but is the current patchset "zero copy" or "one copy"? The paper I saw a link to described a mechanism to eliminate one of the two copies the traditional bpf approach makes but I haven't taken a look into the actual code. Pete _

Re: FreeBSD em ether driver lockup

2004-06-16 Thread Petri Helenius
ming fu wrote: Is there a suggestion on how to trigger the watchdog to be called. It is really time consuming to diagnose this as it takes hours or dates for the em to lockup once. Some vendors are kind enough to sell motherboards broken enough for em to never get interrupts. However the current

Re: Intel 10GbE Driver committed

2004-06-17 Thread Petri Helenius
ming fu wrote: Does this one replace the em driver? It does not. However as far as I understand the semantics of the chips aren´t that much different so I wonder why another driver instead of adding to em. Pete ___ [EMAIL PROTECTED] mailing list http:

Re: IPFW2 versrcreach update

2004-07-21 Thread Petri Helenius
James wrote: uRPF should not emit an ICMP when it drops a -reject route. Even with ip unreachables, Cisco won't emit ICMP when uRPF is killing a packet. The source that triggered uRPF drop condition cannot be trusted as it may have spoofed the packet. Where would the ICMP go anyway because you

Re: fooling nmap

2004-09-04 Thread Petri Helenius
Colin Alston wrote: What exactly is the point/benefit of such a change? On related note, it would be nice if the OS bundled dhclient would report OS version like it does on Windows and Linux. Would make some operations easier. Pete ___ [EMAIL PROTECTED

pfil question

2004-09-20 Thread Petri Helenius
Andre Oppermann wrote: BTW: You may be better off using pfil_hooks instead of netgraph for your tool. You'll save one m_copym and m_freem for each packet. Is pfil zero copy or one copy by default? If the driver supports it, does a packet get directly DMA'd in mbufs and passed over the pf which

Re: Intel PRO/1000 CT (82547EI) - em0: watchdog timeout

2004-09-24 Thread Petri Helenius
Pavel V.Zheltobryukhov wrote: I send Ctrl+C and boot process was continued. But network card doesn't work. I check cable - it's good. I can't send any ping packet to other computers. I tried other transmit modes - I switch NIC to 10Mbit half duplex and 10Mbit full duplex via ifconfig options. No

Re: [PATCH] Make em(4) use device sysctl tree

2004-10-15 Thread Petri Helenius
Bruce M Simpson wrote: Here is a non-critical patch to bring em(4) into line with other drivers, by using the sysctl tree created for each device by the bus framework. Does anyone here have an idea why some platforms (like Thinkpad X31 or i875 Supermicros) have trouble rebooting with 5.3-BETA w

Re: FreBSD & MPLS stack (fwd)

2004-09-29 Thread Petri Helenius
Kalin Hristov wrote: It would be very nice As they say about the MPLS "The feature of the Internet" Did they change the acronym from "Mostly Pointless Lamp Switching"? Pete ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/fr

Re: modularization

2004-10-06 Thread Petri Helenius
Garrett Wollman wrote: < said: Yes, something in that direction, plus: protocols: IPv4, IPv6, TCP, UDP, ICMP, IPX, etc. Just about everything as modules. It is not generally regarded as a good idea to make artificial boundaries between (e.g.) IP and TCP. However from the success of the O

Re: PPTP/PPPoE mpd/poptop performance

2004-10-26 Thread Petri Helenius
Pawel Malachowski wrote: Hello, I would like to ask people using mpd about performance on particular hardware setups. I am interested in the numbers of sessions (probably PPTP with weak encryption) and total bandwith, that can be achieved with, e.g.: . 300MHz CPU, . 1GHz CPU, . 2GHz CPU. Althoug

Re: OpenBGPd?

2004-11-13 Thread Petri Helenius
Łukasz Bromirski wrote: Hi, Is anyone working on a port of OpenBGPd, or current version of Quagga (0.97.3)? openbgpd compiles fairly painlessly on 5.3. Making it work on 5.2.1 was definetly more work. Pete ___ [EMAIL PROTECTED] mailing list http://lists

Re: kernel mode httpd/ftpd for FreeBSD?

2005-02-10 Thread Petri Helenius
Alexey Zelkin wrote: Why not ? Having small and reliable kernel http server able to handle static content only and limited functionality, would be useful in many cases. Why? Pete ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailm

Re: kernel mode httpd/ftpd for FreeBSD?

2005-02-10 Thread Petri Helenius
Julian Elischer wrote: Petri Helenius wrote: Alexey Zelkin wrote: Why not ? Having small and reliable kernel http server able to handle static content only and limited functionality, would be useful in many cases. Why? able to run without a filesystem, while in single user mode? Didn&#

Re: ABI suggestions?

2005-02-21 Thread Petri Helenius
Julian Elischer wrote: if anyone has any ideas on this, let me know :-) regards julian p.s. would this be generally useful (assuming it can be achieve without any overhead when compiled out)? I would like to fetch the tcpcb contents to userland over an ioctl or so and additionally have some netst

Re: iSCSI initiator driver beta version, testers wanted

2005-03-19 Thread Petri Helenius
Danny Braniss wrote: with tags enabled, iSCSI is much faster, but it also causes a deadlock :-( this is what i run: newfs -U / cd / restore rf /home/file.dump What are you using / what's recommended as iSCSI server? Pete ___ freebsd-net@freebsd.org

altq enqueue

2005-03-21 Thread Petri Helenius
Is there a way to send packets from userland process to a specific altq defined queue? Pete ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: can't get linerate TCP iperf between two Intel PRO/1000 82544GC cards

2005-04-02 Thread Petri Helenius
Does somebody have the programming specs for the em chips? Despite of multiple contacts and promises Intel has been unable to produce them. Pete Chris Tracy wrote: Hi, I have been attempting to get iperf to generate a line-rate TCP flow (~989Mbps) across a GigE link but can only get a maximum of

Re: FreeVRRPd project status

2005-04-13 Thread Petri Helenius
Claudio Jeker wrote: On Wed, Apr 13, 2005 at 05:14:52PM +0200, Lars Erik Gullerud wrote: On Thu, 7 Apr 2005, Dag-Erling Smørgrav wrote: Charles Swiger <[EMAIL PROTECTED]> writes: It's dead, I think: Cisco's lawyers started making predatory noises about their "intellectual property".

Re: FreeVRRPd project status

2005-04-13 Thread Petri Helenius
Claudio Jeker wrote: On Wed, Apr 13, 2005 at 09:22:48PM +0300, Petri Helenius wrote: Claudio Jeker wrote: Did this recently change since looking at /etc/protocols it does not seem to be the case for most of them anyway? Most new protocols come from either some company, DARPA

ipv6 host part

2005-04-28 Thread Petri Helenius
Is there a way to configure multiple IPv6 address aliases without knowing the prefix in advance and just specifying the lower 64 bits on the ifconfig_ lines on rc.conf? Pete ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/list

Re: ipv6 host part

2005-04-28 Thread Petri Helenius
JINMEI Tatuya / çæéå wrote: On Thu, 28 Apr 2005 14:20:07 +0300, Petri Helenius <[EMAIL PROTECTED]> said: Is there a way to configure multiple IPv6 address aliases without knowing the prefix in advance and just specifying the lower 64 bits on the ifconfig_ lines on r

Re: Netgraph question

2005-06-14 Thread Petri Helenius
Aziz Kezzou wrote: Hi all, I worked a bit with netgraph nodes and I find them very amazing and powerfull... Since my netgraph experience is still quite limited ( they are out of the scope of my project actually) I would like to know if the following claim is true, I need to be sure because it is

Re: Routes not deleted after link down

2005-06-19 Thread Petri Helenius
Mike Tancsa wrote: I like this idea as well, but you need to control how the routes would come back after the interface comes back up ? This seems more of the province of a routing daemon like quagga as opposed to a kernel feature no ? The connected interface should try to transmit packet

Re: 1000BaseSX 1000BaseLX confusion?

2005-08-08 Thread Petri Helenius
Steve Shorter wrote: Howdy! I was wondering how come the listed media types supported by sk(4) and em(4) is only 1000BaseSX. Even for single mode 1000BaseLX NICs such as sk 9841 and Intel PWLA8490LX, ifconfig show the media type as 1000BaseSX. Though the NIC appears to operate in single

libthr and 64

2005-08-11 Thread Petri Helenius
Does libthr work on amd64 in RELENG_6? Pete ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Re: em(4) receive part wedging randomly at moderate load

2005-09-26 Thread Petri Helenius
Benjamin Rosenblum wrote: the em driver in itself is extremly buggy. many people, myself included, are hitting some major problems with this driver that are causeing some serious issues. i cant transfer any large files to my server because the em driver panics and drops the connection for 15

Re: Which em(4) chips work/don't work? [Was: RE: dummynet, em driver, device polling issues :-((]

2005-10-04 Thread Petri Helenius
Darren Pilgrim wrote: I'd be interested in finding out the specific chips with which people are (not) having success. As em(4) supports an entire family of products, rather than a single chip, it may be that some chips have quirks or other gotchas the driver needs to address. It certainly woul

Re: programatically list all local IP addresses ?

2002-07-18 Thread Petri Helenius
Erik Trulsson wrote: > > Just be aware that getifaddrs(3) (which does seem to be a quite useful > function) is not very portable. > It appears to be available on recent releases of all the *BSDs, but it > does not seem to exist on Solaris or Linux. > What would be the portable alternative to get

socket receive space

2002-09-17 Thread Petri Helenius
What is the (preferred) way to figure out how much data is waiting on the receive buffer on a socket? I'm running largish >1M receive buffers and would like to log a warning message if the buffers ever get used near-full. Pete To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe

socket buffers

2002-09-18 Thread Petri Helenius
I played around adjusting udp socket buffers for a while and noticed that if the input buffer is set to a value, packets start getting dropped when npkt*MTU > SO_RCVBUF so if a socket receives 100 byte packets over an ethernet interface of 1500 byte MTU and receive buffer of 100k the packets star

pcap & bpf

2002-09-21 Thread Petri Helenius
(I'm sending a copy here since I'm running this on FreeBSD and got no reply so far from the tcpdump folks) Function pcap_open_live in pcap-bpf.c contains the code snippet below. To me, this does not make too much sense, because: - if v is too big to be accommodated (either by configuration or

Re: pcap & bpf

2002-09-21 Thread Petri Helenius
> 32k is already a bump up from the default of 4k, which at the time that > was set (and hard coded) probably seemed "good enough". Obviously as > interfaces have gotten faster, that number has become out of date. Yes > they SHOULD make it pcap-user tunable, the comment even says so, but until >

SO_TIMESTAMP

2002-09-27 Thread Petri Helenius
Is there a reason why SO_TIMESTAMP does not work with TCP sockets but only with RAW and UDP ? Pete To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: SO_TIMESTAMP

2002-09-27 Thread Petri Helenius
> > Is there a reason why SO_TIMESTAMP does not work with TCP sockets > > but only with RAW and UDP ? > > Because it doesn't really make sense? But it would. It would let me know how long it took the process to get to the data I´m currently reading from the socket. (and notify operator to buy mor

ENOBUFS

2002-10-15 Thread Petri Helenius
My processes writing to SOCK_DGRAM sockets are getting ENOBUFS while netstat -s counter under the heading of "ip" is incrementing: 7565828 output packets dropped due to no bufs, etc. but netstat -m shows: > netstat -m 579/1440/131072 mbufs in use (current/peak/max): 578 mbufs all

Re: ENOBUFS

2002-10-15 Thread Petri Helenius
> > What rate are you sending these packets at? A standard interface queue > length is 50 packets, you get ENOBUFS when it's full. > This might explain the phenomenan. (packets are going out bursty, with average hovering at ~500Mbps:ish) I recomplied kernel with IFQ_MAXLEN of 5000 but there seems

Re: ENOBUFS

2002-10-15 Thread Petri Helenius
> > Probably means that your outgoing interface queue is filling up. > ENOBUFS is the only way the kernel has to tell you ``slow down!''. > How much should I be able to send to two em interfaces on one 66/64 PCI ? Pete To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-

Re: ENOBUFS

2002-10-15 Thread Petri Helenius
> > how large are the packets and how fast is the box ? Packets go out at an average size of 1024 bytes. The box is dual P4 Xeon 2400/400 so I think it should qualify as "fast" ? I disabled hyperthreading to figure out if it was causing problems. I seem to be able to send packets at a rate in the

Re: ENOBUFS

2002-10-15 Thread Petri Helenius
> The 900Mbps are similar to what I see here on similar hardware. What kind of receive performance do you observe? I haven´t got that far yet. > > For your two-interface setup, are the 600Mbps aggregate send rate on > both interfaces, or do you see 600Mbps per interface? In the latter 600Mbps pe

Re: ENOBUFS

2002-10-18 Thread Petri Helenius
- From: "Jim McGrath" <[EMAIL PROTECTED]> To: "Luigi Rizzo" <[EMAIL PROTECTED]>; "Petri Helenius" <[EMAIL PROTECTED]> Cc: "Lars Eggert" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, October 18, 2002 7:49 AM Subject: RE: ENOBU

Re: ENOBUFS

2002-10-18 Thread Petri Helenius
> > just reading the source code, yes, it appears that the card has > support for delayed rx/tx interrupts -- see RIDV and TIDV definitions > and usage in sys/dev/em/* . I don't know in what units are the values > (28 and 128, respectively), but it does appear that tx interrupts are > delayed a bit

Re: ENOBUFS

2002-10-18 Thread Petri Helenius
work would be useful here. That would lead to incorrect timestamps on the packets, though? Pete > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:owner-freebsd-net@;FreeBSD.ORG]On Behalf Of Luigi Rizzo > > Sent: Friday, October 18, 2002 12:56 A

Re: high interrupts by network interfaces

2005-12-11 Thread Petri Helenius
Brian Candler wrote: On Sun, Dec 11, 2005 at 03:26:50AM -0800, kamal kc wrote: i modified the bridge.c file and added a routine to compress/decompress ip packet. i put my code in bdg_forward(). And ran the pc in bridge mode. The modified kernel is deployed in network where the datarate is

Re: Changes in the network interface queueing handoff model

2006-07-31 Thread Petri Helenius
Robert Watson wrote: I tend to agree, but implemented full queueing support for if_em to make sure I understood to complexity implications of completely removing queueing from the ifnet side dispatch. I guess an interesting question for us is how we decide what the right threshold is to imp

Re: Optimizing a high-latency connection

2006-08-25 Thread Petri Helenius
Increase sendspace an recvspace depending which way your data is going: net.inet.tcp.sendspace: 57344 net.inet.tcp.recvspace: 256000 TCP window scaling is enabled by default nowadays if I remember correctly. Pete Morgan wrote: Hi. I'm trying som file transfers across the globe. The RTT is a

Re: ENOBUFS

2002-10-18 Thread Petri Helenius
> In special cases, the error induced by having interrupts blocked > causes errors which are much larger than polling alone. Which conditions block interrupts for longer than, say, a millisecond? Disk errors / wakeups? Anything occurring in "normal" conditions? Pete To Unsubscribe: send mail

Re: post-ifconfig delay causes ntpdate failure?

2002-10-25 Thread Petri Helenius
Are you sure that this is not caused by spanning tree delay on the ethernet switch you are probably connected to? Pete - Original Message - From: "Romain Kang" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 25, 2002 10:00 PM Subject: post-ifconfig delay causes ntpdate

Re: post-ifconfig delay causes ntpdate failure?

2002-10-25 Thread Petri Helenius
> Whatever the cause, is there some method better than the ping loop > to determine if IP is actually getting out? > Look at the lights on the switch or the card. Or put an analyzer on the wire. We use fxp´s extensively and have never seen this. Pete To Unsubscribe: send mail to [EMAIL PROTECT

Re: ENOBUFS

2002-10-17 Thread Petri Helenius
> > Less :-) Let me tell you tomorrow, don't have the numbers here right now. I seem to get about 5-6 packets on an interrupt. Is this tunable? At 50kpps the card generates 10k interrupts a second. Sending generates way less. This is about 300Mbps so with the average packet size of 750 there shoul

Re: ng_fec hash mechanism versus cisco etherchannel

2002-10-31 Thread Petri Helenius
It does not matter if you send using the other link as long as you send all packets for the same stream over the same link to avoid reordering. So yes, it does interoperate. Pete Don Bowman wrote: Examining the source code to ng_fec, in ng_fec_output(), it uses the IP address to form the hash

Re: ng_fec hash mechanism versus cisco etherchannel

2002-10-31 Thread Petri Helenius
The forwarding table points to the channel, not a specific interface on the channel. This also allows adding and dropping links on the fly. Pete Don Bowman wrote: From: Petri Helenius [mailto:pete@;he.iki.fi] It does not matter if you send using the other link as long as you send all

bpf

2002-11-03 Thread Petri Helenius
I believe the select operation on bpf is not functioning as supposed to. I´m calling select with 100ms timeout. The bpf interface is listening to an interface with constant packet rate, so it´s certain that multiple packets have been received during the select call. However the fd for the bpf devi

mbufs exchausted

2002-11-04 Thread Petri Helenius
Looking at the numbers, the messages about mbufs being exhausted do not make sense. Is this a known bug? Pete All mbuf clusters exhausted, please see tuning(7). All mbufs exhausted, please see tuning(7). All mbufs exhausted, please see tuning(7). > netstat -m 4296/4352/65536 mbufs in use (curren

Re: bpf

2002-11-06 Thread Petri Helenius
ate mode on your bpf fd, > if you want a return before the buffer is full. > Immediate mode practically causes the reader to be waken up for every packet, ending up with huge number of small reads which is highly ineffective. Pete > On Mon, Nov 04, 2002 at 12:12:26AM +0200, Petri Helenius

Re:

2002-11-08 Thread Petri Helenius
ng_ether can be used to capture packets below the ip layer and not pass them along to upper layers. Additionally you can write outbound packets to the node. Pete - Original Message - From: "shubha mr" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, November 08, 2002 3:21 PM

Re: bpf

2002-11-12 Thread Petri Helenius
> How about to call ioctl(fd, BIOCSRTIMEOUT, &timeval) ? > I think select(2) sets the fd for the bpf if the bpf buffer is full, > or if the bpf buffer is not empty after timed out. > This worked for me, thanks. I must have missed it on the documentation for some reason. Pete To Unsubscribe: sen

em0 under CURRENT

2002-11-13 Thread Petri Helenius
Just for the sake of it, I tried if the performance of em would be different under -CURRENT and it is. Initially when I had: optionsINVARIANTS #Enable calls of extra sanity checking optionsINVARIANT_SUPPORT #Extra sanity checks of internal structures, required

panic: kmem_map too small

2002-11-19 Thread Petri Helenius
I seem to get kmem_map too small panics when using large buffers with bpf. Is there a tunable I should be increasing? Pete To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

Re: panic: kmem_map too small

2002-11-20 Thread Petri Helenius
David Schultz wrote: Thus spake Petri Helenius <[EMAIL PROTECTED]>: I seem to get kmem_map too small panics when using large buffers with bpf. Is there a tunable I should be increasing? Yes, increase KVA_PAGES in your kernel config. I put in KVA_PAGES=1024 with following resu

Re: panic: kmem_map too small

2002-11-20 Thread Petri Helenius
> > Read LINT (or NOTES) carefully. You can't set KVA_PAGES to 1024, > because then your kernel would take up the entire 4 GB virtual > address space. Since the kernel must fit into 4 GB alongside > every user process, that leaves you no room for programs. Try a > more reasonable value like 512

Re: panic: kmem_map too small

2002-11-20 Thread Petri Helenius
> > With about 150M in use and KVA_PAGES undefined in config (default), > > both 4.7-STABLE and 5.0-CURRENT panic (1G installed memory). > > Yes, the default is 256, IIRC. That corresponds to 1 GB of KVA, > and you have only 1 GB of physical memory to back it. I take it > this is a very busy mach

Re: broken IFF_ALLMULTI handling in many drivers

2002-11-22 Thread Petri Helenius
I think the same applies for promiscuous mode, if the interface undergoes configuration changes while it's in promiscuous mode and the hardware gets reinitialized it "forgets" about being in that mode. This happens at least with em. Pete Luigi Rizzo wrote: [Bcc to re@ because it would be good t

Re: panic: kmem_map too small

2002-11-21 Thread Petri Helenius
David Schultz wrote: Most kernel memory is not pageable, so swap probably won't help you. Your `kmem_map too small' error message should report to you the size of the attempted allocation and the size of kmem_map. If the map really isn't full, I'm not sure why you would get this panic, unless yo

libpcap

2002-12-13 Thread Petri Helenius
Suggestions what would it take to make libpcap included in the FreeBSD distribution stop tweaking BPF buffer size by default? tcpdump.org people have been nonresponsive about changing it there, so I would suggest it should be patched in FreeBSD to allow applications to control buffer size. Pe

Re: libpcap

2002-12-13 Thread Petri Helenius
Richard A Steenbergen wrote: On Fri, Dec 13, 2002 at 12:25:42PM +0200, Petri Helenius wrote: Suggestions what would it take to make libpcap included in the FreeBSD distribution stop tweaking BPF buffer size by default? tcpdump.org people have been nonresponsive about changing it there, so I

Re: libpcap

2002-12-13 Thread Petri Helenius
Guy Helmer wrote: I use "sysctl debug.dbf_bufsize=131072" on my appliances to increase the BPF buffer size to something more reasonable without having to directly modify libpcap. Hope you're not disappointed to find out that modifying that parameter has no effect when using applications

connect and EINTR

2003-01-17 Thread Petri Helenius
This is 4.7-STABLE built on 15 Jan. I have a nonblocking socket where connect is called. Due to timers also running in the same process, that eventually returns EINTR. However it seems that the socket is connected regardless since calling connect again will return EISCONN. This seems to be the "

Re: support of iso networking

2003-02-19 Thread Petri Helenius
> On the other hand the NetBSD folks don't see it as dead weight > and systems that may need to talk with core routers that use > IS-IS end up on other platforms. > > Perhaps this is why Arbor uses NetBSD. > It should be noted that hardly anything qualifies as "dead weight" on operating system t

5.0 network code

2003-03-04 Thread Petri Helenius
Any ideas if netgraph code is accounted for the "swiN: net" kernel process or to the interrupt virtual process? Also ideas what is the usual bottleneck in SMP Xeon system are appreciated, 600Mbps internet traffic seems to generate about 60% (on one of the CPUs) . This is on -CURRENT. The numbe

Re: Removal of netns - politically correct version

2003-03-05 Thread Petri Helenius
> > i have yet to see a cisco ios image supporting ipv6 that was usable > in production environment. and i have tried hard. This is getting OT but on the subject of repelling users, they´re probably trying hard to repel their users to the vendor J boxen. > > but i will admit to not having seen ap

Re: mbuf cache

2003-03-04 Thread Petri Helenius
> > Any comments on the high cpu consumption of mb_free? Or any other places > > where I should look to improve performance? > > What do you mean "high cpu consumption?" The common case of mb_free() > is this: According to profiling mb_free takes 18.9% of all time consumed in kernel and is al

mbuf cache

2003-03-04 Thread Petri Helenius
I did some profiling on -CURRENT from a few days back, and I think I haven´t figured the new tunables out or the code is not doing what it´s supposed to or I´m asking more than it is supposed to do but it seems that mb_free is being quite wasteful... Any pointers to how the new high/low watermark

Re: mbuf cache

2003-03-04 Thread Petri Helenius
> > Yes, it's normal. The commit log clearly states that the new > watermarks do nothing for now. I have a patch that changes that but I > haven't committed it yet because I left for vacation last Sunday and I > only returned early this Monday. Since then, I've been too busy to > cle

Re: Removal of netns - politically correct version

2003-03-05 Thread Petri Helenius
M. Warner Losh wrote: ISA support is not obsolete. All new PCs still have ISA busses. They might not have ISA Expansion Bus Slots, but they all[*] still connect their serial ports, parallel ports, and mouse/keyboard ports via ISA. Not to mention i8254 which gets to be major pain if ACPI would

Re: gratuitous ARP with em interface.

2003-05-29 Thread Petri Helenius
I haven't looked that deep into why, but em is quite slow on coming up compared to fxp for example. Probably something to do with hardware re-initialization. Pete Ruslan Ermilov wrote: On Wed, May 28, 2003 at 07:57:07PM -0400, [EMAIL PROTECTED] wrote: Hi all, Is there a known issue with al

Re: Collision on NIC

2003-05-30 Thread Petri Helenius
> > Well, I don't see the problem. > > My math says that that's .03% collision rate, which is so deep in the > noise as to be practically zero. What do you _think_ it should be? > Even Mr. Inventor of the ethernet himself regrets calling them collisions because that term has a bad ring people u

Re: Collision on NIC

2003-05-31 Thread Petri Helenius
>Changing both sides to full-duplex removes to collisions. >However: Changing only one side _always_ results in packet-loss! It´s only when both sides transmit at once. Which is not always. It happens almost always though. Pete ___ [EMAIL PROTECTED] m

ipfw and hostnames

2003-06-01 Thread Petri Helenius
How do I compile/load ipfw kld so that it has "default to accept" which seems to be required to allow hostnames to be used in firewall configuration loaded at boot time. Even starting the firewall config with 65000 allow all from any to any does not seem to allow hostname resolution to work when

Re: ipfw and hostnames

2003-06-02 Thread Petri Helenius
> > You are strongly advised to use IP addresses instead of hostnames in firewall > rulesets, to avoid DNS spoofing attacks subverting your firewall. Ideally, your > firewall should function without depending on any external network resources. > I know that, I control the domains and additiona

Re: ipfw and hostnames

2003-06-02 Thread Petri Helenius
> > If your firewall needs to perform *any* DNS queries, what happens if the DNS > server(s) are down or unreachable when the firewall tries to restart? Does it > fail in a way that you are happy with? > That´s an another defect in ipfw client utility, it stops processing rules if it fails to look

Re: 5.1-BETA em

2003-06-07 Thread Petri Helenius
There... http://www.freebsd.org/cgi/query-pr.cgi?pr=i386/52835 Pete - Original Message - From: "Robert Watson" <[EMAIL PROTECTED]> To: "Petri Helenius" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, M

intel 10GbE

2003-06-09 Thread Petri Helenius
Is there planned support for the 82597EX (10 GbE) chipset and if there is a plan, is that incremental development on the em driver or completely separate piece of code? At least the linux driver seems to be separate, although the chip semantics seem very similar of the later 8254X (1 GbE) chips.

Re: Link failure detection algorithm for one2many netgraph node.

2003-06-11 Thread Petri Helenius
Are you aware of the work done in various forums to address this? For one of the more recent presentations look at http://www.nanog.org/mtg-0306/ward.html Pete - Original Message - From: "Evgeny Dolgopiat" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "Rogier R. Mulhuijzen" <[EMAIL

Re: IP over DVB

2003-06-24 Thread Petri Helenius
Most common acronym would be Digital Video Broadcasting, a set of standards defining audio, video, text, teletext, data, etc. encoding, modulation, encapsulation, etc. over Satellite, Cable or Terrestial medium. Only reason why I have a linux-box is to run DVB-S stuff. Not sure what it would take

Re: IP over DVB

2003-06-24 Thread Petri Helenius
r is designed according to the OST specification so applications like vdr, dvbstream, etc. would work out of the box. Pete > Eugene Vedistchev > > Petri Helenius wrote: > > Most common acronym would be Digital Video Broadcasting, > > a set of standards defining audio,

Re: ipprecedence

2003-07-06 Thread Petri Helenius
Eugene Grosbein wrote: Luigi Rizzo wrote: How could the scheduler decide when to drain the queue ? It should move packets from zero-bw WFQ pipe the interface FIFO as soon as possible but should consider weights (100 packets from one queue then 1 from another and so on). That would no

Re: unicast octets statistics

2003-07-09 Thread Petri Helenius
Charlie & wrote: On Wednesday 09 July 2003 08:09, Gleb Smirnoff wrote: On Wed, Jul 09, 2003 at 01:18:06PM +0800, Eugene Grosbein wrote: E> Does FreeBSD 4.8-STABLE keep per-interface summary for received E> unicast octets? More precisely, I need to know number of unicast E> octets received by my

Re: Question about bridging code

2003-07-09 Thread Petri Helenius
> > how come no-one knows about netgraph.. the framework designed to do > exactly this? :-) > It's only been in use for 6 years.. > We do this and a lot more with netgraph and love the architechture, thanks goes for the people who did the architechture. So this qualifies as "somebody knows" :)

Re: 10Ge drivers?

2003-07-22 Thread Petri Helenius
> > Is anyone working on a driver for the Intel 10Ge card (I think they're > the only one actually shipping...)? I was looking to give one a try on > something other than linux :) > Since intel provided the 1Ge driver, I would suspect them to come up with the 10Ge one. The 10Ge part does not se

Re: Trouble with 5.1-RELEASE and Broadcom BCM5704C

2003-08-11 Thread Petri Helenius
I´ve seen lost interrupts with 5.1 with em driver and the ata driver seems to suffer from this also when doing detach/attach. Getting a old kernel module from 5.0 and recompiling it for 5.1 does not help with the issue so I suspect a more generic issue with interrupts. Pete - Original Mess

Re: bpf, ipfw and before-and-after

2003-08-14 Thread Petri Helenius
> > This would add additional delays to the code path for both ingress > and egress. In a world where gigabit ethernet is becoming the norm, > every nanosecond counts. I don't think the benefits of your proposal > would justify the performance loss. At the very least, I'd want the > extra calls

ipfw parsing bug

2003-08-28 Thread Petri Helenius
ipfw seems to have developed a bug lately on 5-CURRENT; # ipfw add 2042 allow tcp from 0.0.0.0/0 to me 42 02042 allow tcp from me to me dst-port 42 It used to work that 0.0.0.0/0 was "any" instead of "me". Last I checked the notation is also widely used in netwo

  1   2   >