Hi Ian, Thanks for the reply. We are glad to know we are not the only one seeing the pause. We have exactly 10 or so pause a day in every couple hours, even though UDP seems to hang as well. Snoop shows DNS queries are not coming back. The pause is occurring intermittently like what you described and we have a hard time identify it as well.
We are runing Solaris 10 U3 125100-05 kernel. All related patches are applied. We are thinking about replacing the whole Sun box, just in case it is a hardware issue. The reason we think it might be ipf or kernel related because we put a temporarily linux iptables firewall on the same link and we don't see any pause from that firewall. That's say, we like ipfilter, we hope we could to get it resolve and continue to use ipfilter, without any pause ;) Thanks, -- Sum > > We're seeing periodic pauses (10 or so a day) which cause TCP connections to > hang. It seems to be related to TCP connections sending large packets, > as using 'less' on large files seems to be affected periodically. > > We're running sol10/x86-amd64 u2 (06/06) with Feb 28 2007 (approx) recommended > patch set on Sun Fire X2100M2's. > > Our servers that are affected are located in London, communicating > with servers in Australia and USA via IPsec. We also run the same > OS/ipf/pfil in Australia without IPsec or long haul involvement, > and haven't noticed the problem, but then we don't do as much > with this server. > > We were originally running pfil_2.1.11-ip_fil4.1.16 with a > few patches from the mailing list and the problem was quite significant, > but 10 days ago we upgraded to a fairly vanilla pfil_2.1.12-ip_fil4.1.19 > and the problem has diminished noticably, but is still present. > (say 5 times a day now) > I note a change in pfil using timeout to send packets that may > be related to this improvement. > > I'm not 100% sure the problem is caused by ipfil/pfil but, since > it occurs so intermittently its hard to identify. > I might try switching back to vanilla Sun supplied ipf/pfil to see if that > helps any. > > Ian D >
