[pfSense Support] 81.4 load balance + carp
second part. Now backup is completly frozer, here top: last pid: 737; load averages: 0.97, 0.43, 0.17up 0+00:02:51 11:30:33 25 processes: 5 running, 20 sleeping CPU states: 0.3% user, 0.3% nice, 10.2% system, 77.2% interrupt, 11.9% idle Mem: 13M Active, 7404K Inact, 10M Wired, 24K Cache, 9200K Buf, 87M Free Swap: PID USERNAME THR PRI NICE SIZERES STATETIME WCPU COMMAND 668 root1 8 10 10856K 9588K ppwait 0:04 0.00% php 663 root1 760 2264K 1516K RUN 0:01 0.00% top 540 root1 760 1292K 868K select 0:01 0.00% syslogd 657 root1 80 1580K 1228K wait 0:00 0.00% login 662 root1 200 2616K 2000K pause0:00 0.00% tcsh 297 root1 -580 3656K 1748K bpf 0:00 0.00% tcpdump 543 root1 760 3480K 1960K RUN 0:00 0.00% mini_httpd 554 root1 80 1620K 1120K wait 0:00 0.00% sh 641 root1 80 1300K 984K nanslp 0:00 0.00% cron 299 root1 -80 1188K 688K piperd 0:00 0.00% logger 658 root1 80 1624K 1092K wait 0:00 0.00% sh 659 root1 80 1632K 1160K wait 0:00 0.00% sh 298 _pflogd 1 -580 1536K 1180K bpf 0:00 0.00% pflogd 669 root1 -80 3484K 2012K piperd 0:00 0.00% mini_httpd 295 root1 40 1472K 1136K sbwait 0:00 0.00% pflogd 667 root1 80 1168K 480K nanslp 0:00 0.00% sleep 656 root1 80 228K 124K nanslp 0:00 0.00% check_reload_st 547 nobody 1 1320 1320K 940K select 0:00 0.00% dnsmasq no answer from serial console. It answers to ping. Here the last message arrived at syslog server: Aug 31 11:29:40 192.168.9.32 kernel: webgui doesn't answer. nothing else regards, Rodolfo - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] 81.4 load balance + carp
Hmmm, that's a seriously high interrupt load. How much traffic goes through this box? What type of NICs and CPU do the boxes have? --BillOn 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: second part.Now backup is completly frozer,here top:last pid: 737;load averages:0.97,0.43,0.17up 0+00:02:5111:30:3325 processes:5 running, 20 sleepingCPU states:0.3% user,0.3% nice, 10.2% system, 77.2% interrupt, 11.9%idleMem: 13M Active, 7404K Inact, 10M Wired, 24K Cache, 9200K Buf, 87M Free Swap: PID USERNAMETHR PRI NICE SIZERES STATETIME WCPU COMMAND 668 root1 8 10 10856K9588K ppwait 0:040.00% php 663 root17602264K1516K RUN0:010.00% top 540 root17601292K 868K select 0:010.00% syslogd 657 root1 801580K1228K wait 0:000.00% login 662 root12002616K2000K pause0:000.00% tcsh 297 root1 -5803656K1748K bpf0:000.00% tcpdump 543 root17603480K1960K RUN0:000.00% mini_httpd 554 root1 801620K1120K wait 0:000.00% sh 641 root1 801300K 984K nanslp 0:000.00% cron 299 root1-801188K 688K piperd 0:000.00% logger 658 root1 801624K1092K wait 0:000.00% sh 659 root1 801632K1160K wait 0:000.00% sh 298 _pflogd 1 -5801536K1180K bpf0:000.00% pflogd 669 root1-803484K2012K piperd 0:000.00% mini_httpd 295 root1 401472K1136K sbwait 0:000.00% pflogd 667 root1 801168K 480K nanslp 0:000.00% sleep 656 root1 80 228K 124K nanslp 0:000.00%check_reload_st 547 nobody1 13201320K 940K select 0:000.00% dnsmasqno answer from serial console.It answers to ping.Here the last message arrived at syslog server:Aug 31 11:29:40 192.168.9.32 kernel: webgui doesn't answer.nothing elseregards, Rodolfo-To unsubscribe, e-mail: [EMAIL PROTECTED]For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] 81.4 load balance + carp
On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Bill Marquette ha scritto: standard soekris 4801 + 2 lan traffic? in that moment zero and it happens only with carp+load balance with two boards When you say load balancing do you mean arp balancing? Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] 81.4 load balance + carp
There was a bug in previous versions that would send the machine into a interrupt storm due to a route bug. Your on a later version than this so I really dont know what to say here. Scott On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: sorry, I meant outbound load balancing regards Rodolfo On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Bill Marquette ha scritto: standard soekris 4801 + 2 lan traffic? in that moment zero and it happens only with carp+load balance with two boards When you say load balancing do you mean arp balancing? Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] 81.4 load balance + carp
Scott Ullrich ha scritto: In my opinion the bug is still here. The light (that indicate traffics) of the NIC (wan1 and wan2), are still. And after I halt the secondary, and the webgui of primary is usuable, the traffic of the interfaces (1 and 2) is more than 100 Megabytes regards Rodolfo There was a bug in previous versions that would send the machine into a interrupt storm due to a route bug. Your on a later version than this so I really dont know what to say here. Scott On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: sorry, I meant outbound load balancing regards Rodolfo On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Bill Marquette ha scritto: standard soekris 4801 + 2 lan traffic? in that moment zero and it happens only with carp+load balance with two boards When you say load balancing do you mean arp balancing? Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: [pfSense Support] 81.4 load balance + carp
Rodolfo Vardelli ha scritto: not really solved, it seems that every broadcast pass to other interface: 18:35:30.405454 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.405726 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.406936 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.407276 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.408002 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.408290 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.409343 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.409616 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.410814 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.411143 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.411475 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.411740 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.412543 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.412807 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.413761 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.414023 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.415281 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.415571 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.416398 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.416653 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.417578 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.417854 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST 18:35:30.418409 IP 192.168.9.227.netbios-ns 192.168.9.255.netbios-ns: NBT UDP PACKET(137): QUERY; R^CREQUEST; BROADCAST 34 packets captured 5473 packets received by filter 4597 packets dropped by kernel adding 137 too regards, Rodolfo Scott Ullrich ha scritto: I solved putting a blocking rule in lan to stop port 138. No more interrupt storm as you can see from top: last pid: 2266; load averages: 0.15, 0.05, 0.04up 0+00:29:37 18:33:12 22 processes: 1 running, 21 sleeping CPU states: 0.0% user, 0.8% nice, 3.1% system, 0.4% interrupt, 95.7% idle Mem: 13M Active, 7492K Inact, 10M Wired, 24K Cache, 9824K Buf, 86M Free Swap: regards, Rodolfo Any chance of doing a tcpdump and see if a packet appears to be stuck in a loop? Scott On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: In my opinion the bug is still here. The light (that indicate traffics) of the NIC (wan1 and wan2), are still. And after I halt the secondary, and the webgui of primary is usuable, the traffic of the interfaces (1 and 2) is more than 100 Megabytes regards Rodolfo There was a bug in previous versions that would send the machine into a interrupt storm due to a route bug. Your on a later version than this so I really dont know what to say here. Scott On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: sorry, I meant outbound load balancing regards Rodolfo On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Bill Marquette ha scritto: standard soekris 4801 + 2 lan traffic? in that moment zero and it happens only with carp+load balance with two boards When you say load balancing do you mean arp balancing? Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional
Re: [pfSense Support] 81.4 load balance + carp
Perhaps block this rule on the LAN interface before the ALL all? On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: What was generating the traffic? it was a normal broadcast to port 137-138 in network 9.0 that for some strange reason pass to other network. regards, Rodolfo On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: I solved putting a blocking rule in lan to stop port 138. No more interrupt storm as you can see from top: last pid: 2266; load averages: 0.15, 0.05, 0.04up 0+00:29:37 18:33:12 22 processes: 1 running, 21 sleeping CPU states: 0.0% user, 0.8% nice, 3.1% system, 0.4% interrupt, 95.7% idle Mem: 13M Active, 7492K Inact, 10M Wired, 24K Cache, 9824K Buf, 86M Free Swap: regards, Rodolfo Any chance of doing a tcpdump and see if a packet appears to be stuck in a loop? Scott On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: In my opinion the bug is still here. The light (that indicate traffics) of the NIC (wan1 and wan2), are still. And after I halt the secondary, and the webgui of primary is usuable, the traffic of the interfaces (1 and 2) is more than 100 Megabytes regards Rodolfo There was a bug in previous versions that would send the machine into a interrupt storm due to a route bug. Your on a later version than this so I really dont know what to say here. Scott On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Scott Ullrich ha scritto: sorry, I meant outbound load balancing regards Rodolfo On 8/31/05, Rodolfo Vardelli [EMAIL PROTECTED] wrote: Bill Marquette ha scritto: standard soekris 4801 + 2 lan traffic? in that moment zero and it happens only with carp+load balance with two boards When you say load balancing do you mean arp balancing? Scott - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
