Hi,
Intel 10G driver 3.21.2 Now it's clear - IP packet fragmentation is reason, thanks to Alex Regards, Jaroslaw W dniu 2014-07-22 18:40:07 użytkownik Skidmore, Donald C <[email protected]> napisał: > Hi Jaroslaw, > > What driver are you using it wouldn't happen to be DPDK would it? If so I > don't believe and of the developers of that driver monitor this list. > > I ask since the functions you mentioned below don't exist in the ixgbe (linux > driver). > > Thanks, > -Don > > > -----Original Message----- > > From: jk_14 [mailto:[email protected]] > > Sent: Tuesday, July 22, 2014 1:18 AM > > To: [email protected] > > Subject: [E1000-devel] ixgbe, hw filtering, five-tuple issue > > > > > > Hi, > > > > I'm using latest PF_RING software for hardware filtering with Intel 82599 > > based NIC (X520 in fact) > > > > And HW five-tuples filtering - works almost fine. Almost, because it seems I > > have found some problem: > > > > In my example I use only one, full drop rule: > > if(1) { > > memset(&rule, 0, sizeof(rule)), rule.rule_family_type = > > intel_82599_five_tuple_rule; > > rule.rule_id = rule_id++, ft_rule->queue_id = -1; > > rc = pfring_zc_add_hw_rule(zq, &rule); > > if(rc != 0) printf("pfring_zc_add_hw_rule(%d) failed [rc=%d]\n", > > rule.rule_id, rc); > > else printf("pfring_zc_add_hw_rule(%d) succeeded: drop rule\n", > > rule.rule_id); } > > > > And in the result we can see some UDP frames, which shouldn't be present > > here: > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.72.1:4003 > > -> 172.18.227.250:49999] > > [l3_proto=UDP][hash=3067478659][tos=56][tcp_seq_num=0] > > [caplen=1518][len=1518][parsed_header_len=0][eth_offset=0][l3_offset=18 > > ][l4_offset=38][payload_offset=46] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.72.1:0 -> > > 172.18.227.250:0] > > [l3_proto=UDP][hash=3067424657][tos=56][tcp_seq_num=0] > > [caplen=102][len=102][parsed_header_len=0][eth_offset=0][l3_offset=18][l > > 4_offset=38][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.72.1:4003 > > -> 172.18.227.250:49999] > > [l3_proto=UDP][hash=3067478659][tos=56][tcp_seq_num=0] > > [caplen=1518][len=1518][parsed_header_len=0][eth_offset=0][l3_offset=18 > > ][l4_offset=38][payload_offset=46] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.72.1:0 -> > > 172.18.227.250:0] > > [l3_proto=UDP][hash=3067424657][tos=56][tcp_seq_num=0] > > [caplen=102][len=102][parsed_header_len=0][eth_offset=0][l3_offset=18][l > > 4_offset=38][payload_offset=0] > > ^[[A^CLeaving... > > ========================= > > Absolute Stats: 81 pkts (15'633'475 drops) - 37'070 bytes > > ========================= > > > > > > > > So, it seems UDP packets above are able to pass the “drop all” rule only if > > the > > size is equal to 1518 bytes, and then one more (probably next) packet is > > always passed yet, in pair... > > > > I have Jumbo frames up to ~1550 size, and MTU set for 9000 > > - and from my quick tests I see only 1518 bytes size packets are affected, > > but > > packets more than 1518 bytes are not affected. > > > > btw: maybe there is an additional shift added in this case to the next > > packet, > > so one more packet (not Jumbo) is also passing the rule? > > Does it make sense? > > > > One more example yet: > > > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.74.16:4000 -> 10.2.111.137:60147] > > [l3_proto=UDP][hash=348501954][tos=56][tcp_seq_num=0] > > [caplen=1518][len=1518][parsed_header_len=0][eth_offset=0][l3_offset=18 > > ][l4_offset=38][payload_offset=46] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.74.16:0 - > > > 10.2.111.137:0] > > [l3_proto=UDP][hash=348437807][tos=56][tcp_seq_num=0] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=18][l4_ > > offset=38][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.72.17:4000 -> 10.2.111.144:60157] > > [l3_proto=UDP][hash=348501460][tos=56][tcp_seq_num=0] > > [caplen=1518][len=1518][parsed_header_len=0][eth_offset=0][l3_offset=18 > > ][l4_offset=38][payload_offset=46] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.72.17:0 - > > > 10.2.111.144:0] > > [l3_proto=UDP][hash=348437303][tos=56][tcp_seq_num=0] > > [caplen=103][len=103][parsed_header_len=0][eth_offset=0][l3_offset=18][l > > 4_offset=38][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.72.17:4000 -> 10.2.111.144:60157] > > [l3_proto=UDP][hash=348501460][tos=56][tcp_seq_num=0] > > [caplen=1518][len=1518][parsed_header_len=0][eth_offset=0][l3_offset=18 > > ][l4_offset=38][payload_offset=46] > > [70:DD:A1:6B:C2:23 -> 00:22:83:D9:AA:95] [vlan 901] > > [IPv4][10.194.72.17:0 - > > > 10.2.111.144:0] > > [l3_proto=UDP][hash=348437303][tos=56][tcp_seq_num=0] > > [caplen=103][len=103][parsed_header_len=0][eth_offset=0][l3_offset=18][l > > 4_offset=38][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > [70:DD:A1:6B:C2:23 -> 01:80:C2:00:00:02] [eth_type=0x8809] > > [caplen=60][len=60][parsed_header_len=0][eth_offset=0][l3_offset=14][l4_ > > offset=0][payload_offset=0] > > ^CLeaving... > > ========================= > > Absolute Stats: 46 pkts (13'576'144 drops) - 8'785 bytes > > ========================= > > > > > > Regards, > > Jaroslaw > > > ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ E1000-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel® Ethernet, visit http://communities.intel.com/community/wired
