Re: Implementation of SCPS

2013-04-26 Thread Vlad Galu
It is definitely interesting. On the other hand, I work for one of the major players in the field, so I am quite subjective. On Mon, Apr 22, 2013 at 12:13 AM, Konrad Witaszczyk < konrad.witaszc...@uj.edu.pl> wrote: > Hi, > > I'm looking for information about an implementation of SCPS in FreeBSD (

Re: ipv6 host inaccessible via route -inteface without ndp pairs

2012-02-25 Thread Vlad Galu
-- Good, fast and cheap: pick any two. On Saturday, February 25, 2012 at 6:13 PM, Mr Dandy wrote: > Hi > > I play with IPv6 on the Hezner hosting. According to > http://wiki.hetzner.de/index.php/Zusaetzliche_IP-Adressen/en information my > rc.conf have (FreeBSD 9.0-RELEASE/amd64): > --- >

Re: ipv6 host inaccessible via route -inteface without ndp pairs

2012-02-25 Thread Vlad Galu
On Saturday, February 25, 2012 at 7:33 PM, Mr Dandy wrote: > On Saturday 25 February 2012 22:47:50 Vlad Galu wrote: > > > Hi > > > > > > > > You might need to add ipv6_default_interface="re0" to /etc/rc.conf. After > > you do that, it will ha

Re: recommended 10g cards

2012-06-08 Thread Vlad Galu
On Friday, June 8, 2012 at 7:54 AM, Daniel Braniss wrote: > Hi > I will be 'experimenting' with 10g in the next few months, so > I need to buy some cards, > After googling for some time, I noticed that there is not realy much real > info, and some of it is a bit dated. > Since these cards are p

Re: request for MFC of em/igb drivers

2010-11-17 Thread Vlad Galu
On Wed, Nov 17, 2010 at 1:54 PM, Eugene Grosbein wrote: > On 17.11.2010 13:04, Chris Peiffer wrote: >> >> Hi, >> >> I've been watching the traffic here over the last few months relating >> to the em and igb Intel ethernet drivers. It seems like there's a big >> consensus that HEAD has some good ne

Re: igb dual-port adapter 1200Mbps limit - what to tune?

2010-12-01 Thread Vlad Galu
On Wed, Dec 1, 2010 at 6:54 PM, Eugene Perevyazko wrote: > On Wed, Nov 10, 2010 at 01:04:28PM +0200, Eugene Perevyazko wrote: >> >> I have a router running RELENG_7 with two dual-port igbs - igb0 and igb1 are >> on >> 82575 on intel s5520ur mb and igb2 and igb3 are on 82576 on ET dual-port >> ca

bge(4) on RELENG_8 mbuf cluster starvation

2011-03-12 Thread Vlad Galu
Hi folks, On a fairly busy recent (r219010) RELENG_8 machine I keep getting -- cut here -- 1096/1454/2550 mbufs in use (current/cache/total) 1035/731/1766/262144 mbuf clusters in use (current/cache/total/max) 1035/202 mbuf+clusters out of packet secondary zone in use (current/cache) 0/117/117/1280

Re: bge(4) on RELENG_8 mbuf cluster starvation

2011-03-12 Thread Vlad Galu
On Sat, Mar 12, 2011 at 10:03 AM, Vlad Galu wrote: > Hi folks, > > On a fairly busy recent (r219010) RELENG_8 machine I keep getting > -- cut here -- > 1096/1454/2550 mbufs in use (current/cache/total) > 1035/731/1766/262144 mbuf clusters in use (current/cache/total/max) > 1

Re: bge(4) on RELENG_8 mbuf cluster starvation

2011-03-12 Thread Vlad Galu
On Sat, Mar 12, 2011 at 8:53 PM, Arnaud Lacombe wrote: > Hi, > > On Sat, Mar 12, 2011 at 4:03 AM, Vlad Galu wrote: > > Hi folks, > > > > On a fairly busy recent (r219010) RELENG_8 machine I keep getting > > -- cut here -- > > 1096/1454/2550 mbufs in use

Re: bge(4) on RELENG_8 mbuf cluster starvation

2011-03-13 Thread Vlad Galu
On Sun, Mar 13, 2011 at 2:16 AM, YongHyeon PYUN wrote: > On Sat, Mar 12, 2011 at 09:17:28PM +0100, Vlad Galu wrote: > > On Sat, Mar 12, 2011 at 8:53 PM, Arnaud Lacombe > wrote: > > > > > Hi, > > > > > > On Sat, Mar 12, 2011 at 4:03 AM, Vlad Galu

Re: bge(4) on RELENG_8 mbuf cluster starvation

2011-03-30 Thread Vlad Galu
On Sun, Mar 13, 2011 at 2:16 AM, YongHyeon PYUN wrote: > On Sat, Mar 12, 2011 at 09:17:28PM +0100, Vlad Galu wrote: > > On Sat, Mar 12, 2011 at 8:53 PM, Arnaud Lacombe > wrote: > > > > > Hi, > > > > > > On Sat, Mar 12, 2011 at 4:03 AM, Vlad Galu

Re: bge(4) on RELENG_8 mbuf cluster starvation

2011-03-30 Thread Vlad Galu
On Wed, Mar 30, 2011 at 7:10 PM, YongHyeon PYUN wrote: > On Wed, Mar 30, 2011 at 05:55:47PM +0200, Vlad Galu wrote: > > On Sun, Mar 13, 2011 at 2:16 AM, YongHyeon PYUN > wrote: > > > > > On Sat, Mar 12, 2011 at 09:17:28PM +0100, Vlad Galu wrote: > > > >

Re: mbuf clusters exhaustion & keglimit

2011-04-04 Thread Vlad Galu
On Mon, Apr 4, 2011 at 8:48 AM, Eugene Grosbein wrote: > Hi! > > I'm running several loaded PPPoE access servers based on FreeBSD > 8.2-STABLE/amd64 > with em and igb network interfaces and 4GB RAM. No memory-intensive tasks > other than routing about 2Gbit/s (1G "in" and a bit less "out"). > > k

Re: Random TCP 3 second delay

2011-05-12 Thread Vlad Galu
2011/5/12 Michael > Hello. > > I'm running nginx in load balancing mode for java application with > around 400 requests/second. For every request, nginx is doing a > HTTP/1.0 connection without keep alive to jetty. Several > times per minute this connection takes 3 seconds complet

Re: bge(4) on RELENG_8 mbuf cluster starvation

2011-05-13 Thread Vlad Galu
On Wed, Mar 30, 2011 at 7:17 PM, Vlad Galu wrote: > > > On Wed, Mar 30, 2011 at 7:10 PM, YongHyeon PYUN wrote: > >> On Wed, Mar 30, 2011 at 05:55:47PM +0200, Vlad Galu wrote: >> > On Sun, Mar 13, 2011 at 2:16 AM, YongHyeon PYUN >> wrote: >> > >&

Re: Introducing netmap: line-rate packet send/receive at 10Gbit/s

2011-06-03 Thread Vlad Galu
On Fri, Jun 3, 2011 at 12:31 AM, Luigi Rizzo wrote: > Hi, > we have recently worked on a project, called netmap, which lets > FreeBSD send/receive packets at line rate even at 10 Gbit/s with > very low CPU overhead: one core at 1.33 GHz does 14.88 Mpps with a > modified ixgbe driver, which gives

Re: FreeBSD 8.2 and MPD5 stability issues

2011-06-25 Thread Vlad Galu
On Sat, Jun 25, 2011 at 11:28 PM, Adrian Minta wrote: > After recompilation with "*default release=cvs tag=RELENG_8" and pooling > disables the system still crashes around 4200 sessions. The server has a > xeon E5520 CPU and 4G of ram. Here is the crash on the screen: > http://img232.imageshack.u

Re: FreeBSD 8.2 and MPD5 stability issues

2011-06-28 Thread Vlad Galu
On Tue, Jun 28, 2011 at 10:44 PM, Bjoern A. Zeeb < bzeeb-li...@lists.zabbadoz.net> wrote: > On Jun 28, 2011, at 8:27 PM, Christian Kratzer wrote: > > > Hi, > > > > On Tue, 28 Jun 2011, Pawel Tyll wrote: > >> Hi Adrian, > >> > >>> Good news ! > >>> Last night I remove FLOWTABLE option and since the

Re: FreeBSD 8.2 and MPD5 stability issues

2011-06-28 Thread Vlad Galu
On Tue, Jun 28, 2011 at 11:53 PM, Bjoern A. Zeeb < bzeeb-li...@lists.zabbadoz.net> wrote: > > > Perhaps it would be best to document what those particular workloads are. > Apparently, systems with small and seldom changing routing tables are good > candidates. However, the distinction is not immed

Re: Repeating kernel panic within dummynet

2011-07-11 Thread Vlad Galu
On Jul 11, 2011, at 1:51 PM, Eugene Grosbein wrote: > 11.07.2011 18:45, Vlad Galu пишет: >> >> On Jul 11, 2011, at 1:42 PM, Eugene Grosbein wrote: >> >>> Hi! >>> >>> My FreeBSD 8.2/amd64 routers use dummynet heavily >>> and keep pa

Re: Repeating kernel panic within dummynet

2011-07-11 Thread Vlad Galu
On Jul 11, 2011, at 1:42 PM, Eugene Grosbein wrote: > Hi! > > My FreeBSD 8.2/amd64 routers use dummynet heavily > and keep panic with the *same* KDB backtrace: > > dummynet: bad switch -256! > > > Fatal trap 12: page fault while in kernel mode > cpuid = 0; apic id = 00 > fault virtual address

FIB separation

2011-07-16 Thread Vlad Galu
Hello, A couple of years ago, Stef Walter proposed a patch[1] that enforced the scope of routing messages. The general consesus was that the best approach would be the OpenBSD way - transporting the FIB number in the message and letting the user applications filter out unwanted messages. Are t

Re: FIB separation

2011-07-16 Thread Vlad Galu
On Jul 16, 2011, at 5:42 PM, Hiroki Sato wrote: > Vlad Galu wrote > in : > > du> Hello, > du> > du> A couple of years ago, Stef Walter proposed a patch[1] that enforced > du> the scope of routing messages. The general consesus was that the best > d

Re: Multiqueue support for bpf

2011-08-16 Thread Vlad Galu
On Aug 16, 2011, at 11:13 AM, Takuya ASADA wrote: > Hi all, > > I implemented multiqueue support for bpf, I'd like to present for review. > This is a Google Summer of Code project, the project goal is to > support multiqueue network interface on BPF, and provide interfaces > for multithreaded pack

Re: Multiqueue support for bpf

2011-08-16 Thread Vlad Galu
On Aug 16, 2011, at 11:50 AM, Vlad Galu wrote: > On Aug 16, 2011, at 11:13 AM, Takuya ASADA wrote: >> Hi all, >> >> I implemented multiqueue support for bpf, I'd like to present for review. >> This is a Google Summer of Code project, the project goal is to >>

Re: Adding Flow Director sysctls to ixgbe(4)

2011-09-08 Thread Vlad Galu
On Sep 8, 2011, at 10:11 AM, Takuya ASADA wrote: > Hi, > > 2011/9/5 Ben Hutchings : >> On Mon, 2011-09-05 at 15:51 +0900, Takuya ASADA wrote: >>> Hi, >>> >>> I implemented Ethernet Flow Director sysctls to ixgbe(4), here's a detail: >>> >>> - Adding removing signature filter >>> On linux version

Re: Adding Flow Director sysctls to ixgbe(4)

2011-09-08 Thread Vlad Galu
On Sep 8, 2011, at 4:35 PM, Ben Hutchings wrote: > On Thu, 2011-09-08 at 10:55 +0200, Vlad Galu wrote: >> On Sep 8, 2011, at 10:11 AM, Takuya ASADA wrote: >>> Hi, >>> >>> 2011/9/5 Ben Hutchings : >>>> On Mon, 2011-09-05 at 15:51 +0900, Takuya ASA

Re: which 10GE cards are supported by FreeBSD ?

2011-09-24 Thread Vlad Galu
On Sep 24, 2011, at 7:31 PM, Luigi Rizzo wrote: > > Hi, > does anyone know know which 10GE cards are supported by FreeBSD, > either natively or using third-party drivers ? I am asking because > i would like to add netmap support to the drivers, see > http://info.iet.unipi.it/~luigi/netmap/ > He

8.0 RC1 "ifa_del_loopback_route: deletion failed"

2009-09-29 Thread Vlad Galu
Hi, I keep getting these messages whenever I restart OpenVPN. My configuration indeed has some static routes that's supposed to clean upon shutdown, but neither of them have a loopback address as a next hop. ___ freebsd-net@freebsd.org mailing list http:/

quagga ignoring RTM_DELETE messages?

2009-10-26 Thread Vlad Galu
Hi list, sorry for the noise here. I'm experiencing a weird issue with the latest Quagga from ports, on a 8.0-RC1. It was configured to redistribute kernel routes to BGP, which it does. However, when a route is deleted, it's still announced to the BGP peer. RTM_DELETE was picked up by "route monit

Re: quagga ignoring RTM_DELETE messages?

2009-10-27 Thread Vlad Galu
On Mon, Oct 26, 2009 at 10:34 PM, Vlad Galu wrote: > Hi list, sorry for the noise here. > > I'm experiencing a weird issue with the latest Quagga from ports, on a > 8.0-RC1. It was configured to redistribute kernel routes to BGP, which > it does. However, when a route is

Re: quagga ignoring RTM_DELETE messages?

2009-10-27 Thread Vlad Galu
On Tue, Oct 27, 2009 at 8:50 PM, Mike Tancsa wrote: > At 02:44 PM 10/27/2009, Vlad Galu wrote: >> >> On Mon, Oct 26, 2009 at 10:34 PM, Vlad Galu wrote: >> > Hi list, sorry for the noise here. >> > >> > I'm experiencing a weird issue with the late

Re: snort on multiple interfaces

2009-10-28 Thread Vlad Galu
On Wed, Oct 28, 2009 at 4:35 PM, Andrea Venturoli wrote: > Some years ago, I checked to see whether I would be able to let a single > snort process listen on more than one NIC. > At the time it was only possible in Linux. > In Linux the packet capture facility is implemented in a different (and

Re: openbgpd + 8.0

2009-11-22 Thread Vlad Galu
On Sun, Nov 22, 2009 at 8:44 PM, Li, Qing wrote: > Just to be a bit more specific, in r196714 /sys/netinet/in.c: [...] Just wanting to let you know the following behavior changes: 1. Some customers of mine used to run 7.x with quagga. Another app was adding static routes with a nexthop of 127.0.

Re: Sudden mbuf demand increase and shortage under the load

2010-07-10 Thread Vlad Galu
On Tue, Feb 16, 2010 at 7:23 PM, Maxim Sobolev wrote: > Miroslav Lachman wrote: >> >> Can it be related to this issue somehow? >> >> http://lists.freebsd.org/pipermail/freebsd-current/2009-August/011013.html >> http://lists.freebsd.org/pipermail/freebsd-current/2009-August/010740.html >> >> It was

Re: net.inet.tcp.slowstart_flightsize in 8-STABLE

2010-08-06 Thread Vlad Galu
On Fri, Aug 6, 2010 at 11:47 AM, Andre Oppermann wrote: > On 06.08.2010 11:00, Charles Logan wrote: >> >> Sorry but this is not a bug. You set bad sysctl flags. > > Care to explain in more detail?  For example which sysctl flag was set > wrong? > >> We won't add it to our database and this is the

Re: bge hangs on recent 7.3-STABLE

2010-09-09 Thread Vlad Galu
2010/9/9 Igor Sysoev : > Hi, > > I have several hosts running FreeBSD/amd64 7.2-STABLE updated on 11.01.2010 > and 25.02.2010. Hosts process about 10K input and 10K output packets/s > without issues. One of them, however, is loaded more than others, so it > processes 20K/20K packets/s. > > Recently

Re: bge hangs on recent 7.3-STABLE

2010-09-13 Thread Vlad Galu
On Mon, Sep 13, 2010 at 9:04 PM, Pyun YongHyeon wrote: > On Mon, Sep 13, 2010 at 06:27:08PM +0400, Igor Sysoev wrote: >> On Thu, Sep 09, 2010 at 02:18:08PM -0700, Pyun YongHyeon wrote: >> >> > On Thu, Sep 09, 2010 at 01:10:50PM -0700, Pyun YongHyeon wrote: >> > > On Thu, Sep 09, 2010 at 02:28:26PM

Re: FreeBSD 7.0: sockets stuck in CLOSED state...

2008-06-25 Thread Vlad GALU
On 6/25/08, Ali Niknam <[EMAIL PROTECTED]> wrote: > Dear All, > > Recently i've been upgrading some of my machines from FreeBSD 6.x amd64 to > FreeBSD 7.0 amd64. > > After upgrading I noticed a weird error/bug. It seems that after several > thousand TCP connections some seem to hang in 'CLOSED' s

Re: FreeBSD 7.0: sockets stuck in CLOSED state...

2008-06-25 Thread Vlad GALU
On 6/25/08, Ali Niknam <[EMAIL PROTECTED]> wrote: > > This looks like an issue we used to have at work, where a streaming > > application suddenly started getting kevents for sockets that had been > > already closed. While that was happening, a netstat output looked just > > like yours. We never

Re: two NIC on 2 core system (scheduling problem)

2008-10-28 Thread Vlad GALU
On Tue, Oct 28, 2008 at 12:42 PM, Ivan Voras <[EMAIL PROTECTED]> wrote: > Bartosz Giza wrote: > >> Another question is why em0 taskq is eating so much cpu ? BGE interface is >> actually one that pushes 2 times more packets than em0 and it uses about >> half cpu comparing to em0. Is that not strange

Re: TARPIT for pf/ipfw

2009-01-16 Thread Vlad GALU
This particular iptables module keeps the incoming connection up and running, but it sends ACKs advertising a window size of 0 bytes, so that the remote end can't send any data until the local process has decided it's ok to do so. Basically it's used to slow down spammers and worms. On Fri, Jan 16

Is there a chance to declare the prototype for setfib() somewhere in a system header?

2009-07-01 Thread Vlad Galu
Right now, to be able to compile with g++ (not gcc), I have to declare it in a "extern <>" scope. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@free

Re: Is there a chance to declare the prototype for setfib() somewhere in a system header?

2009-07-01 Thread Vlad Galu
On Wed, Jul 1, 2009 at 12:57 PM, pluknet wrote: > 2009/7/1 Vlad Galu : >> Right now, to be able to compile with g++ (not gcc), I have to declare >> it in a "extern <>" scope. > > > setfib() is declared in -current only in sys/socket.h (r1.102). >

Re: Is there a chance to declare the prototype for setfib() somewhere in a system header?

2009-07-01 Thread Vlad Galu
On Wed, Jul 1, 2009 at 1:04 PM, Vlad Galu wrote: > On Wed, Jul 1, 2009 at 12:57 PM, pluknet wrote: >> 2009/7/1 Vlad Galu : >>> Right now, to be able to compile with g++ (not gcc), I have to declare >>> it in a "extern <>" scope. >> >> &

Building a kernel with SCTP support

2007-06-24 Thread Vlad GALU
Hi list, I have SCTP, SCTP_DEBUG and SCTP_HIGH_SPEED defined in my kernel configuration file. However, it looks that the SCTP source files aren't even built, so the linking fails with -- cut here -- linking kernel.debug uipc_syscalls.o(.text+0x31a): In function `sctp_generic_recvmsg': ../../../

Re: Building a kernel with SCTP support

2007-06-24 Thread Vlad GALU
On 6/24/07, Kip Macy <[EMAIL PROTECTED]> wrote: > >Do I need to define additional flags in my config file? No, unless sctp_pcb.c was somehow removed from your sys/conf/files you probably need to 'make cleandepend; make depend'. It builds fine for me with those options. I did that, and t

Re: Building a kernel with SCTP support

2007-06-24 Thread Vlad GALU
On 6/25/07, Yann Berthier <[EMAIL PROTECTED]> wrote: On Sun, 24 Jun 2007, at 21:31, Vlad GALU wrote: >Hi list, I have SCTP, SCTP_DEBUG and SCTP_HIGH_SPEED defined in my > kernel configuration file. However, it looks that the SCTP source > files aren't even built, so th

Re: Netgraph node to replace packet contents?

2007-08-26 Thread Vlad GALU
On 8/26/07, Norberto Meijome <[EMAIL PROTECTED]> wrote: > hi all, > is there any already existing Netgraph node that would allow me to replace > bytes in the data part of a packet? I'm talking about generic "foo" for > "BAR" replacement, though different lengths would be good too. > > or maybe

Re: DDoS attacks ... identifying destination ...

2007-09-06 Thread Vlad GALU
On 9/6/07, Marc G. Fournier <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > > Today, I got hit by an attack, but haven't been able to easily determine whom > was being attacked ... > > I run ipaudit to monitor bandwidth usage, so I have 'source / destination' > info

Re: new version of polling for FreeBSD 6.x

2007-09-09 Thread Vlad GALU
On 9/6/07, Fabien THOMAS <[EMAIL PROTECTED]> wrote: > Hi, > > After many years of good services we will stop using FreeBSD 4.x :) > During my performance regression tests under FreeBSD 6.2 i've found > that polling has lower performance than interrupt. > To solve that issue i've rewritten t

nfe(4) and RELENG_6

2007-09-13 Thread Vlad GALU
Hi, I'm sorry if I ask something that's been asked before. Is there any reason not to include nfe(4) in STABLE? It's been working flawlessly ever since I installed the OS at work, and it's quite annoying to have to recompile it everytime I recompile the kernel. Thanks! -- If it's there, and yo

Re: accept filters and zero copy sockets

2007-10-19 Thread Vlad GALU
On 10/19/07, Jonathan Noack <[EMAIL PROTECTED]> wrote: > I'm in the process of upgrading my web/database/nfs/jack-of-all-trades box > from 6.2 to RELENG_7. I figured now would be a good time to clean up my > kernel config files. I have the following in my old kernel config: > > # Statically Link

Re: MPLS implementatrion!

2007-10-29 Thread Vlad GALU
On 10/29/07, Julian Elischer <[EMAIL PROTECTED]> wrote: > Bruce M. Simpson wrote: > > Ermal Luçi wrote: > >> I was wondering why this implementation of MPLS isn't integrated into > >> FreeBSD?! > >> http://www.info.ucl.ac.be/~iannone/Files/MPLS-Complete.zip > >> > > there's a hell of a lot of these

Re: Aggregating many ports into one for tcpdump server.

2007-12-05 Thread Vlad GALU
On 12/5/07, Robert Watson <[EMAIL PROTECTED]> wrote: > > On Tue, 4 Dec 2007, Peter Losher wrote: > > > I am currently working on a tcpdump collector where we have multiple feeds > > coming in (via bge{0-8}). Since tcpdump can only poll one interface per > > process, I was hoping to aggregate the t

Re: Aggregating many ports into one for tcpdump server.

2007-12-05 Thread Vlad GALU
On 12/5/07, Robert Watson <[EMAIL PROTECTED]> wrote: > > On Wed, 5 Dec 2007, Robert Watson wrote: > > > On Wed, 5 Dec 2007, Vlad GALU wrote: > > > >> I would like to try the aforementioned patches too. Can you please point me > >> to a link? > >

LOR in route.c with today's RELENG_7

2007-12-14 Thread Vlad GALU
-- cut here -- lock order reversal: 1st 0x805bcf60 pf task mtx (pf task mtx) @ contrib/pf/net/pf.c:6729 2nd 0xff00031e1cf0 radix node head (radix node head) @ net/route.c:147 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0x2a witness_checkorder() at witness_ch

Re: route-to not working

2008-03-20 Thread Vlad GALU
On 3/20/08, Stefan Lambrev <[EMAIL PROTECTED]> wrote: > Greetings, > > > > Wesley wrote: > > Dear people, > > > > I have 2 links on a box, and I don't want to load balance it but, only to > > reply requests in the same interface that it comes. > > > > I tried to use the route-to, but it not

Re: route-to not working

2008-03-20 Thread Vlad GALU
On 3/20/08, Stefan Lambrev <[EMAIL PROTECTED]> wrote: > > > Vlad GALU wrote: > > On 3/20/08, Stefan Lambrev <[EMAIL PROTECTED]> wrote: > > > >> Greetings, > >> > >> > >> > >> Wesley wrote: > >> >

Re: capturing packets on 250mb link

2008-04-28 Thread Vlad GALU
On 4/28/08, Ganbold <[EMAIL PROTECTED]> wrote: > Hi all, > > What is the best way to capture packets on 250mb link? > What kernel features/modules or tools (less CPU/RAM overhead) should I use? Given your OS version, I'd say that setting the BPF buffer size to around 1MB and setting the moni

Re: capturing packets on 250mb link

2008-04-28 Thread Vlad GALU
On 4/28/08, Ganbold <[EMAIL PROTECTED]> wrote: > Vlad, > > > Vlad GALU wrote: > > > On 4/28/08, Ganbold <[EMAIL PROTECTED]> wrote: > > > > > > > Hi all, > > > > > > What is the best way to capture packets on 250mb link? >

Re: capturing packets on 250mb link

2008-04-28 Thread Vlad GALU
On 4/28/08, Vlad GALU <[EMAIL PROTECTED]> wrote: > On 4/28/08, Ganbold <[EMAIL PROTECTED]> wrote: > > Vlad, > > > > > > Vlad GALU wrote: > > > > > On 4/28/08, Ganbold <[EMAIL PROTECTED]> wrote: > > > > > >

tun(4) issues

2004-06-11 Thread Vlad GALU
Hello. I've been trying to set up a VPN server which should serve a large number of clients. Let's say something between 500 and 1000. I'd like to use the tun interface to do it. Now, what I observed when I tried to create 1000 tun devices, was that their minor numbers started to cycle eve

Fw: Re: A quagga-related issue

2004-06-14 Thread Vlad GALU
Begin forwarded message: Date: Mon, 14 Jun 2004 09:03:19 +0100 From: Bruce M Simpson <[EMAIL PROTECTED]> To: Vlad GALU <[EMAIL PROTECTED]> Subject: Re: A quagga-related issue Hi, Unfortunately I'm not a quagga developer, so you might have better luck getting an answer to

Re: [TEST/REVIEW] Netflow implementation

2004-09-09 Thread Vlad GALU
On Fri, 10 Sep 2004 00:00:52 +0400 Gleb Smirnoff <[EMAIL PROTECTED]> wrote: > On Thu, Sep 09, 2004 at 09:58:59PM +0200, Andre Oppermann wrote: > A> Do you really log all Netflow packets to disk to be able to provide > A> details to the customer? Or do you aggregate the details on the > A> collect

Re: [TEST/REVIEW] Netflow implementation

2004-09-09 Thread Vlad GALU
On Fri, 10 Sep 2004 09:36:19 +0400 Gleb Smirnoff <[EMAIL PROTECTED]> wrote: > On Thu, Sep 09, 2004 at 11:41:26PM +0300, Vlad GALU wrote: > V>This made me raise my eyebrow. I wrote a small tool that we use > V>in > V> production at RDS: http://freshmeat.net/pro

Re: Wierd tunnel+MTU issue

2004-09-20 Thread Vlad GALU
On Mon, 20 Sep 2004 20:44:31 +0200 Aragon Gouveia <[EMAIL PROTECTED]> wrote: It looks like your PMTUD doesn't work. Have you somehow disabled incoming ICMP traffic to the box you've noticed these issues ? > Hi, > > A while ago I setup a vtun tunnel between a FreeBSD 4.10-RELEASE > machin

Re: ALTQ CDNR

2004-10-19 Thread Vlad GALU
On Tue, 19 Oct 2004 10:29:26 +0300, Andrew Degtiariov <[EMAIL PROTECTED]> wrote: > Hello people! > Whether works or not ALTQ CDNR in FreeBSD 5.3? > You don't need that anymore. You can mark packets directly from pf. > -- > Andrew Degtiariov > DA-RIPE >

Re: ALTQ CDNR

2004-10-19 Thread Vlad GALU
On Tue, 19 Oct 2004 10:43:24 +0300, Andrew Degtiariov <[EMAIL PROTECTED]> wrote: > On Tue, Oct 19, 2004 at 10:33:47AM +0300, Vlad GALU wrote: > > On Tue, 19 Oct 2004 10:29:26 +0300, Andrew Degtiariov > > <[EMAIL PROTECTED]> wrote: > > > Hello people! > > &

Fwd: ALTQ and if_vlan

2004-11-16 Thread Vlad GALU
-- Forwarded message -- From: Vlad GALU <[EMAIL PROTECTED]> Date: Fri, 12 Nov 2004 08:10:30 + Subject: ALTQ and if_vlan To: [EMAIL PROTECTED] Hello. Since there wasn't any mailing list dedicated to ALTQ in particular, and Max maintains both PF and ALTQ, I came

Re: Changing packets ttl's

2005-04-27 Thread Vlad GALU
On 4/27/05, GiZmen <[EMAIL PROTECTED]> wrote: > Hi, > > I am searching how to change packet ttl. I am runing a freebsd 5.4 > gateway and i would like to change ttl of any packets that are > going out from my internal interface. My goal is to change ttl to 1 > so the last hop is the next host in my

Re: SIOCGIFMEDIA problems

2005-05-16 Thread Vlad GALU
On 5/16/05, Jeremie Le Hen <[EMAIL PROTECTED]> wrote: > Hi Sebastien, > > On Fri, May 13, 2005 at 07:17:05PM +0200, Sebastien Petit wrote: > > [...] > > as a side note, you may wish to use the kqueue(2) framework to watch > at link stat changes. The main advantage is that it will change the > wa

Re: how to active the received function when the data arrived the socket in kld

2005-06-06 Thread Vlad GALU
On 6/6/05, shiner chen <[EMAIL PROTECTED]> wrote: > Inorder to impliment the dynamic load freeback policy ,I wrote a kld on > the front-end of cluster server for collecting the load of back nodes. > I don't want the acceptive thread to detect the data arrived socket > continuously,because ,which w

Please review & test this

2005-06-09 Thread Vlad GALU
As you may all know, the packet classifier in ALTQ is very slow on large numbers of classes, because it stores them linearly, in an array. I rewrote the way classes are stored, replacing the array with a hash table. I tested [1] on a system with about 8000 classes and noticed a remarkable p

Re: Please review & test this

2005-06-09 Thread Vlad GALU
On 6/10/05, Vlad GALU <[EMAIL PROTECTED]> wrote: > As you may all know, the packet classifier in ALTQ is very > slow on large numbers of classes, because it stores them linearly, in > an array. I rewrote the way classes are stored, replacing the array > with a hash table.

Re: Please review & test this

2005-06-11 Thread Vlad GALU
On 6/10/05, Vlad GALU <[EMAIL PROTECTED]> wrote: > On 6/10/05, Vlad GALU <[EMAIL PROTECTED]> wrote: > > As you may all know, the packet classifier in ALTQ is very > > slow on large numbers of classes, because it stores them linearly, in > > an array. I r

Re: Please review & test this

2005-06-11 Thread Vlad GALU
On 6/11/05, Vlad GALU <[EMAIL PROTECTED]> wrote: > On 6/10/05, Vlad GALU <[EMAIL PROTECTED]> wrote: > > On 6/10/05, Vlad GALU <[EMAIL PROTECTED]> wrote: > > > As you may all know, the packet classifier in ALTQ is very > > > slow on large number

Re: Looking for networking solution.

2005-06-15 Thread Vlad GALU
On 6/15/05, M.Jessa <[EMAIL PROTECTED]> wrote: > Hi guys. > > I am looking for solution I could implement on a link with a huge latency > when ping replies can go up to a few hundred miliseconds, e.g sateliete > links. > What I was thinking about is some kind of virtual interface which could > tra

Re: ipfilter and ipfw order.

2005-06-24 Thread Vlad GALU
On 6/24/05, ming fu <[EMAIL PROTECTED]> wrote: > Hi, > > In the 4.x kernel, ipfilter was hardcoded before ipfw in the ip_input(). > However, in the 5.x kernel, they register themselve to the pfil hook. As > there isn't a priority number during the hook up, looks like who ever > register first get

Re: Looking For Ideas or Suggestions

2005-06-24 Thread Vlad GALU
On 6/25/05, Greg Rowe <[EMAIL PROTECTED]> wrote: > Greetings, > I've been chasing a network interface "freeze" problem on and off for some > time now and it's driving me nuts ! > > The problem occurs on two identical mail servers that sit behind a firewall. > Both systems have two ethernet interf

Re: Looking For Ideas or Suggestions

2005-06-24 Thread Vlad GALU
On 6/25/05, Greg Rowe <[EMAIL PROTECTED]> wrote: > Greetings, > I've been chasing a network interface "freeze" problem on and off for some > time now and it's driving me nuts ! > > The problem occurs on two identical mail servers that sit behind a firewall. > Both systems have two ethernet interf

SS7 stack/implementation on FreeBSD

2005-11-02 Thread Vlad GALU
Do you guys know any $subj ? I've recently moved to another job in telecom, and I'd like to learn how-stuff-works. Right now I'm in the documenting stage, with a lot of information being assimilated through analogies to IP, which I already am accustomed to. I see that the openss7 project uses S

Re: freevrrpd and em

2006-03-01 Thread Vlad GALU
On 3/1/06, Andrea Venturoli <[EMAIL PROTECTED]> wrote: > spe wrote: > > > FreeVRRPd project is halted and not supported anymore. You can take a > > look at carp for doing the same job efficiently. > > Sorry to hear about that :( > > Unfortunately I cannot switch to carp, since one of the two machin

Re: FreeBSD Port of OpenOSPFD

2006-03-08 Thread Vlad GALU
On 3/8/06, Phil Regnauld <[EMAIL PROTECTED]> wrote: > Florent Thoumie (flz) writes: > > > > Since it may take some time before distfiles are propagated to all ftp > > servers, get the distfiles here [2] and put them in > > ${DISTDIR}/openospfd/ > > > > [1] http://people.freebsd.org/~flz/local/openo

requests for mbufs denied

2006-04-24 Thread Vlad GALU
The machine in question is a 6.1-RC. It serves a quite big number of clients (the lowest concurrency figures are around 2000, with peaks up to 9000). The in/out buffers for tcp sockets are 8K each. kern.ipc.nmbclusters is set to 327680. The firewall is pf, with the following limits: 131072 stat

Re: requests for mbufs denied

2006-04-24 Thread Vlad GALU
On 4/24/06, Vlad GALU <[EMAIL PROTECTED]> wrote: > The machine in question is a 6.1-RC. It serves a quite big number > of clients (the lowest concurrency figures are around 2000, with peaks > up to 9000). The in/out buffers for tcp sockets are 8K each. > kern.ipc.nmbcluster

Re: [fbsd] Re: [fbsd] Network performance in a dual CPU system

2006-04-27 Thread Vlad GALU
On 4/27/06, Robert Watson <[EMAIL PROTECTED]> wrote: > > On Thu, 27 Apr 2006, Jeremie Le Hen wrote: > > >> I missed the original thread, but in answer to the question: if you set > >> net.isr.direct=1, then FreeBSD 6.x will run the netisr code in the ithread > >> of the network device driver. This

bpf seeing non-local traffic on lo0

2006-07-05 Thread Vlad GALU
I was debugging a dspam->clamav connection and I saw two packets which didn't belong to the loopback interface. The destination IP was assigned to one of the physical interfaces, and the source IP was somewhere on the internet. I've no idea how to reproduce it. -- If it's there, and you can s

Re: bpf seeing non-local traffic on lo0

2006-07-05 Thread Vlad GALU
On 7/5/06, Vlad GALU <[EMAIL PROTECTED]> wrote: I was debugging a dspam->clamav connection and I saw two packets which didn't belong to the loopback interface. The destination IP was assigned to one of the physical interfaces, and the source IP was somewhere on the internet

Re: Avoiding natd overhead

2006-10-22 Thread Vlad Galu
On 10/22/06, Vladimir Grebenschikov <[EMAIL PROTECTED]> wrote: В сб, 21/10/2006 в 16:08 -0600, Brett Glass пишет: > At 03:54 AM 10/21/2006, Vladimir Grebenschikov wrote: > > > 1. use PF for nat - it does aliasing in kernel space > > True, but it doesn't let me translate the packets and > then con

Re: em forwarding performance (was Proposed 6.2 em RELEASE patch

2006-11-23 Thread Vlad Galu
On 11/23/06, Mike Tancsa <[EMAIL PROTECTED]> wrote: At 08:09 AM 11/22/2006, Jeremie Le Hen wrote: >It would be interesting to know the real performance of Linux as a mere >router if we want a true comparision with FreeBSD performances. Re-tested, this time with a LINUX UP kernel and there is no

Re: em forwarding performance (was Proposed 6.2 em RELEASE patch

2006-11-23 Thread Vlad Galu
On 11/23/06, Mike Tancsa <[EMAIL PROTECTED]> wrote: At 12:43 PM 11/23/2006, Vlad Galu wrote: > Can you please completely remove the iptables support from your >Linux configuration, as well as removing support for any packet filter >in FreeBSD? Also, please enable fast_forwardi

Re: Interface security considerations

2007-01-29 Thread Vlad GALU
On 1/29/07, Victor Loureiro Lima <[EMAIL PROTECTED]> wrote: Hello -net@, A question came into my mind a few days ago while I was coding some application using libpcap on freebsd: - Whats the best way to determine if an application is listening on an interface and sniffing packets that goes thr

Re: bge0: discard frame w/o packet header

2007-02-15 Thread Vlad GALU
On 2/15/07, Kip Macy <[EMAIL PROTECTED]> wrote: > > The "discard frame w/o packet header" message comes from ether_input() > if it gets an mbuf that doesn't have the M_PKTHDR flag set. That > can't happen unless something is very wrong with the system. I'd like > to make it a panic. At least t

Re: SO_ACCEPTCONN equivalent

2007-03-07 Thread Vlad GALU
On 3/7/07, Alexandru Arion <[EMAIL PROTECTED]> wrote: Hi, I'm rather new here, so excuses in advance if the question is out of topic. Is there an equivalent in FreeBSD to the SO_ACCEPTCONN option for getsockopt(), available in Linux? It doesn't actually has to be an option for getsockopt(), jus

Re: SO_ACCEPTCONN equivalent

2007-03-08 Thread Vlad GALU
On 3/8/07, Bruce M. Simpson <[EMAIL PROTECTED]> wrote: Alexandru Arion wrote: > > Thanks for both suggestions. Since I'll support version 5.4 and up, this > leaves me to using the workaround implied by calling accept and checking > the returned value, for now. > Erm. It looks like it's implemente

Re: Redundant link configuration

2003-06-19 Thread Vlad GALU
However I'm worried about the case where a > > high-volume server exits unexpectedly and leaks sockets. > > > > Any ideas of what might be wrong? > > > > > > ___ > > [EMAIL PROTECTED] mailing list >

interface destroy

2003-08-18 Thread Vlad Galu
mean that the ifreq structure passed as argument to the SIOCIFDESTROY is empty? Thanks in advance for any tips. - -- Vlad Galu Network & Systems Administrator Romania Data Systems NOC in Bucharest Phone: +40 21 30 10 850 http://www.rdsne

IP stack peculiarity

2004-01-07 Thread Vlad Galu
Hi guys. I have the following setup: one FreeBSD box with a public IP, routed by a Linux machine which has the default route on another ISP than the one my FreeBSD box's IP belongs to. Shortly said, I have different up/downstream channels. The problem appears when during a TCP conn

Re: Handling 100.000 packets/sec or more

2004-01-14 Thread Vlad Galu
Adrian Penisoara <[EMAIL PROTECTED]> writes: |Hi, | | At one site that I administer we have a gateway server which services |a large SOHO LAN (more than 300 stations) and I'm facing a serious |issue: very often we see strong spoofed floods (variable source IP and |port, variable destination IP, d

  1   2   >