[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

strange packet loss

We're running an OpenBSD 3.1 pf firewall between our network and our
ISP. Lately we've had trouble with packet loss - it occurs at random
intervals, but almost always lasts around 18 seconds (+-1 sec). In
between, everything looks fine. The drops wreak havoc with ssh sessions
We've got a direct cat5 patch to our ISP at the datacenter going into
the firewall. I can watch the packet loss by running a ping from the
firewall to the router on the other end of the cable.
We're pushing about 15Mbits of traffic over this connection. We've got
245 filter rules, and every pass rule is stateful.
If we disable pf, the packet loss seems to go away, although we haven't
been able to run very extensive tests with it wide open.
We have a standby firewall that I upgraded to the latest 3.3 snapshot
(March 12?) and loaded the same ruleset on - and had the same packet
Has anyone ever seen this problem before? I doubt that it's strictly a pf
problem, since it's been rewritten so much since 3.1.
Here's my dmesg in case anyone sees anything. I did see that the USB
controller shares an interrupt with the network cards, but we're not
using USB and vmstat -i shows that it sends no interrupts.
OpenBSD 3.1 (GENERIC) #59: Sat Apr 13 15:28:52 MDT 2002
cpu0: Intel Celeron (Mendocino) ("GenuineIntel" 686-class, 128KB L2 cache) 498 MHz
real mem  = 266711040 (260460K)
avail mem = 241504256 (235844K)
using 3281 buffers containing 13438976 bytes (13124K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 02/10/00, BIOS32 rev. 0 @ 0xfda74
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev. 2.1 @ 0xf0000/0x10000
pcibios0: PCI IRQ Routing Table rev. 1.0 @ 0xf31d0/192 (10 entries)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371FB PCI-ISA" rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0x8000 0xc8000/0x1000 0xc9000/0x1800
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82810E" rev 0x03: rng active, 9Kb/sec
vga1 at pci0 dev 1 function 0 "Intel 82810E Graphics" rev 0x03
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
ppb0 at pci0 dev 30 function 0 "Intel 82801AA Hub-to-PCI" rev 0x02
pci1 at ppb0 bus 1
fxp0 at pci1 dev 1 function 0 "Intel 82557" rev 0x08: irq 9, address 00:d0:b7:79:f0:b7
inphy0 at fxp0 phy 1: i82555 10/100 media interface, rev. 4
eap0 at pci1 dev 7 function 0 "Ensoniq AudioPCI97" rev 0x06: irq 11
ac97: codec id 0x43525914 (Cirrus Logic CS4297A rev 4)
ac97: codec features headphone, 20 bit DAC, 18 bit ADC, Crystal Semi 3D
audio0 at eap0
fxp1 at pci1 dev 11 function 0 "Intel 82557" rev 0x08: irq 9, address 00:d0:b7:85:b7:60
inphy1 at fxp1 phy 1: i82555 10/100 media interface, rev. 4
pcib0 at pci0 dev 31 function 0 "Intel 82801AA LPC" rev 0x02
pciide0 at pci0 dev 31 function 1 "Intel 82801AA IDE" rev 0x02: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <QUANTUM FIREBALLP LM20.5>
wd0: 16-sector PIO, LBA, 19595MB, 16383 cyl, 16 head, 63 sec, 40132503 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
atapiscsi0 at pciide0 channel 1 drive 0
scsibus0 at atapiscsi0: 2 targets
cd0 at scsibus0 targ 0 lun 0: <MATSHITA, CD-ROM CR-175, 5DCJ> SCSI0 5/cdrom removable
cd0(pciide0:1:0): using PIO mode 4, DMA mode 2
uhci0 at pci0 dev 31 function 2 "Intel 82801AA USB" rev 0x02: irq 9
usb0 at uhci0: USB revision 1.0
uhub0 at usb0
uhub0: vendor 0x0000 UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
"Intel 82801AA SMBus" rev 0x02 at pci0 dev 31 function 3 not configured
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
midi0 at pcppi0: <PC speaker>
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask c240 netmask c240 ttymask c2c2
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302