Re: PF performance question

2005-09-20 Thread Stuart Henderson
On 2005/09/19 14:30:14, Joe . wrote: > I would check to make sure the nic is negotiating properly. It might > be half duplex instead of full or something flakey etc. Check the > output of ifconfig. That would show up in netstat -ni (Vinicius says he looked there). I have just been looking at a ni

Re: PF performance question

2005-09-19 Thread Spruell, Darren-Perot
From: Vinicius Pavanelli Vianna [mailto:[EMAIL PROTECTED] > They say all their ifaces are forced to 100 full duplex, when i try to > autoneg with their switches i always got 100 half duplex, and > the speed > is bad, so i forced all to 100 full duplex so i can get some speed, > don't ask me why th

Re: PF performance question

2005-09-19 Thread j knight
--- Quoting Vinicius Pavanelli Vianna on 2005/09/19 at 22:24 -0300: > They say all their ifaces are forced to 100 full duplex, when i try to > autoneg with their switches i always got 100 half duplex, and the speed > is bad, so i forced all to 100 full duplex so i can get some speed, > don't ask m

Re: PF performance question

2005-09-19 Thread Vinicius Pavanelli Vianna
jared r r spiegel wrote: >On Mon, Sep 19, 2005 at 03:13:33PM -0300, Vinicius Pavanelli Vianna wrote: > > >>I tried to disable pf (pfctl -d) and it continues to loss packets >> >> ><...> > > >>The count on in and out are different because the pf is blocking some >>packets >> >> > > (?

Re: PF performance question

2005-09-19 Thread jared r r spiegel
On Mon, Sep 19, 2005 at 03:13:33PM -0300, Vinicius Pavanelli Vianna wrote: > > I tried to disable pf (pfctl -d) and it continues to loss packets <...> > The count on in and out are different because the pf is blocking some > packets (?) those seem to contradict one another., just a typo? >

Re: PF performance question

2005-09-19 Thread Steven S
'netstat -in' will give you a better indication of duplex mismatches (since it shows errors and collisions.) -Steve S. [EMAIL PROTECTED] wrote: > The ifconfig and brconfig output is as follow:

Re: PF performance question

2005-09-19 Thread Spruell, Darren-Perot
From: Vinicius Pavanelli Vianna [mailto:[EMAIL PROTECTED] > The ifconfig and brconfig output is as follow: > I have setup an IP adress on the networks so i can access the machine > remotely and the rl0 is disabled. > > $ ifconfig -a > em0: > flags=8943 mtu 1500 > address: 00:30:48:72:95:1

Re: PF performance question

2005-09-19 Thread Vinicius Pavanelli Vianna
The ifconfig and brconfig output is as follow: I have setup an IP adress on the networks so i can access the machine remotely and the rl0 is disabled. $ ifconfig -a lo0: flags=8049 mtu 33224 inet 127.0.0.1 netmask 0xff00 inet6 ::1 prefixlen 128 inet6 fe80::1%lo0 prefixl

Re: PF performance question

2005-09-19 Thread Joe .
I would check to make sure the nic is negotiating properly. It might be half duplex instead of full or something flakey etc. Check the output of ifconfig. Joe On 9/19/05, Vinicius Pavanelli Vianna <[EMAIL PROTECTED]> wrote: > Hi, > Thanks for the held Jared, > > I tried to disable pf (pfctl -d)

Re: PF performance question

2005-09-19 Thread Vinicius Pavanelli Vianna
Hi, Thanks for the held Jared, I tried to disable pf (pfctl -d) and it continues to loss packets, i changed the rules to use state on all and raised the limit on it to about 300.000, so i think this is not a problem, and since pfctl -d didn't resolve the packet lost i begin to suspect something on

Re: PF performance question

2005-09-18 Thread jared r r spiegel
On Sun, Sep 18, 2005 at 01:17:04AM -0300, Vinicius Pavanelli Vianna wrote: > Hi, > > I'm using OpenBSD 3.7 with pf and bridge enabled for a transparent > proxy, and I'm having some packet loss somewhere in this bridge, since > netstat -ni doesn't give me any ierrors what about pkts? does the i

PF performance question

2005-09-17 Thread Vinicius Pavanelli Vianna
Hi, I'm using OpenBSD 3.7 with pf and bridge enabled for a transparent proxy, and I'm having some packet loss somewhere in this bridge, since netstat -ni doesn't give me any ierrors i'm beginning to check PF setup, this machine has about 30k packets/s, my question is: how can i see if pf is ok wit