Jeff, Did you look at the syslog? If you find a lot of ipfilter related log, pfil could be the culprit.
I downloaded pfil 2.1.11 to use with ipf 4.1.13, and encountered performance problem similar to yours. Later I found the Makefile came with pfil set the DEBUG flag by default, which caused overwhelming log messages under heavy traffic. PFILDEBUG=-DPFILDEBUG You can try to remove -DPFILDEBUG and recompile and reload pfil driver. Andrew On Thu, 2006-10-05 at 09:12 -0400, Jeff A. Earickson wrote: > Hi, > > Does anybody else run ipfilter on a system that does network > based backups, like Netbackup or Legato? Have you ever tested > your backup performance with and without ipfilter? > > We run Netbackup 6.0 MP3 on two systems (with two robots), a > V490 (4 cpus) with an ADIC i2000, and a V210 (2 cpus) with an > ADIC i500. Both robots are hooked to their hosts via fibre. > Both hosts run Solaris 10 with ipf 4.1.13. > > I've noticed that shutting off ipfilter on the host makes a big > difference (30% or more) in terms of robot thruput, as measured > by iostat and Netbackup statistics. As a result, I have to > keep ipfilter disabled on these two hosts. > > Anybody else seen this? > > Jeff Earickson > Colby College
