No buffer space available

[Leandro Malaquias]

Hello everyone,

This is my problem, my firewall is losing to many packets, below you will
see the result of a simple ping.

- RESULT of ping

=======

[root at xxxx]# ping 192.168.0.1
PING 192.168.0.1 (192.168.0.1): 56 data bytes
ping: sendto: No buffer space available
64 bytes from 192.168.0.1: icmp_seq=1 ttl=30 time=33.868 ms
64 bytes from 192.168.0.1: icmp_seq=2 ttl=30 time=33.573 ms
64 bytes from 192.168.0.1: icmp_seq=3 ttl=30 time=3.880 ms
64 bytes from 192.168.0.1: icmp_seq=4 ttl=30 time=54.057 ms
ping: sendto: No buffer space available
64 bytes from 192.168.0.1: icmp_seq=6 ttl=30 time=78.320 ms
ping: sendto: No buffer space available
64 bytes from 192.168.0.1: icmp_seq=8 ttl=30 time=47.838 ms
64 bytes from 192.168.0.1: icmp_seq=9 ttl=30 time=47.046 ms
64 bytes from 192.168.0.1: icmp_seq=10 ttl=30 time=2.992 ms
64 bytes from 192.168.0.1: icmp_seq=11 ttl=30 time=65.535 ms
64 bytes from 192.168.0.1: icmp_seq=12 ttl=30 time=90.268 ms
^C
--- 192.168.0.1 ping statistics ---
13 packets transmitted, 10 packets received, 23% packet loss

========= EOF


- RESULT of netstat -m

==========

[root at xxxx /usr/ports/net/mtr]# netstat -m
968/1342/2310 mbufs in use (current/cache/total)
932/1358/2290/25600 mbuf clusters in use (current/cache/total/max)
656/752 mbuf+clusters out of packet secondary zone in use (current/cache)
0/0/0/0 4k (page size) jumbo clusters in use (current/cache/total/max)
0/0/0/0 9k jumbo clusters in use (current/cache/total/max)
0/0/0/0 16k jumbo clusters in use (current/cache/total/max)
2106K/3051K/5157K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0/8/6656 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
0 requests for I/O initiated by sendfile
0 calls to protocol drain routines

=========== EOF

I have raised the value of: kern.ipc.nmbclusters and kern.ipc.nmbufs, but I
haven't tested it yet cause I have to reboot my firewall, does anyone have
any other ideas?

-- 
Leandro Malaquias

Linux are for those who hate Windows
BSD are for those who love Unix
# echo
'[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq'|dc