Pflow netflows exported twice for each connection?

2011-01-05 Thread Bernd Bornkessel
Hi folks, I plan to move our core routers from FreeBSD to OpenBSD. Currently I use netgraph and ng_netflow on the FreeBSD machines for netflow accounting. As there is a netflow kernel implentation with pflow in OpenBSD, too, I decided to use this. Unfortunately I seems that flows are exported twi

Re: Pflow netflows exported twice for each connection?

2011-01-05 Thread Bernd Bornkessel
> What happens if you limit this to one direction and/or interface? For > example: > > pass out quick on egress proto tcp from 192.168.89.55 to 192.168.92.55 port > 5001 keep state (pflow) > Ok. Now it works, as long as the pflow rule is limited to (direction OR interface) AND no rule matching th

High CPU interrups, low network performace

2011-01-12 Thread Bernd Bornkessel
Hi misc, unfortunately I'm facing a problem with my OBSD routers running 4.8-RELEASE With top I can see very high interrupt cpu states, when forwarding high packet rates. Example: With nuttcp I generated traffic on systems connected to different router interfaces at the same time. It seems that

Re: High CPU interrups, low network performace

2011-01-13 Thread Bernd Bornkessel
> On 2011-01-12, Bernd Bornkessel wrote: > > unfortunately I'm facing a problem with my OBSD routers running > > 4.8-RELEASE > > > > With top I can see very high interrupt cpu states, when forwarding > > high packet rates. > > Is there much di