BPF problems on FreeBSD 7.0

[Robin Sommer]

On Mon, Jul 14, 2008 at 14:44 +0100, Bruce M. Simpson wrote:

> One place to start might be: netstat -B output in 7.x (I *think* this got 
> MFCed), this will let us see what the drop count is for the Bro process, 
> and what the flags are for the open BPF descriptors in the system.

Thanks for the suggestion. Here's the netstat -B output at the time
it has stalled (after about 6 hours of working normally):

   Pid  Netif   Flags      Recv      Drop     Match Sblen Hblen Command
14557  nxge0 p--s--- 2162189525  32514465  42815457 4194248 4194258 bro

Top shows:

  PID USERNAME  THR PRI NICE   SIZE    RES STATE  C   TIME   WCPU COMMAND
14557 bro        1 -58    0    272M   267M        5  25:53  0.00% bro



A few minutes after starting the process, when Bro was still working
fine, a netstat -B output was:

# netstat -B
  Pid  Netif   Flags      Recv      Drop     Match Sblen Hblen Command
14557  nxge0 p--s---   4779235         0     94967     0     0 bro

Thanks,

Robin

-- 
Robin Sommer * Phone +1 (510) 666-2886 * robin at icir.org 
ICSI/LBNL    * Fax   +1 (510) 666-2956 *   www.icir.org