BPF problems on FreeBSD 7.0

[Julian Elischer]

Robin Sommer wrote:
> On Mon, Jul 14, 2008 at 14:44 +0100, Bruce M. Simpson wrote:
> 
>> One place to start might be: netstat -B output in 7.x (I *think* this got 
>> MFCed), this will let us see what the drop count is for the Bro process, 
>> and what the flags are for the open BPF descriptors in the system.
> 
> Thanks for the suggestion. Here's the netstat -B output at the time
> it has stalled (after about 6 hours of working normally):
> 
>    Pid  Netif   Flags      Recv      Drop     Match Sblen Hblen Command
> 14557  nxge0 p--s--- 2162189525  32514465  42815457 4194248 4194258 br
  the Recv number is JUST past 2^31.

at your rate of receiving packets, it passed that value about
2 minutes before this snapshot was taken..



> 
> Top shows:
> 
>   PID USERNAME  THR PRI NICE   SIZE    RES STATE  C   TIME   WCPU COMMAND
> 14557 bro        1 -58    0    272M   267M        5  25:53  0.00% bro
> 
> 
> 
> A few minutes after starting the process, when Bro was still working
> fine, a netstat -B output was:
> 
> # netstat -B
>   Pid  Netif   Flags      Recv      Drop     Match Sblen Hblen Command
> 14557  nxge0 p--s---   4779235         0     94967     0     0 bro
> 
> Thanks,
> 
> Robin
>