Re: [EXTERNAL] Re: Troubleshooting pf congestion

2020-09-16 Thread Scott Reese


> On 2020-09-14, Scott Reese  wrote:
>> Greetings:
>>
>> - Original Message -
>>> From: "Uwe Werler" 
>>> To: "misc" , "Scott Reese" , "misc"
>>> 
>>> Sent: Monday, September 14, 2020 12:47:31 PM
>>> Subject: [EXTERNAL]  Re: Troubleshooting pf congestion
>>
>>> Without seeing a rule set what should one say?
>>> 
>>
>>>>
>>>>If anyone could spare a couple of sentences or a share a link to a page
>>>>detailing what
>>>>state causes the system to consider itself contested, I would
>>>>appreciate it.
>>
>> Thanks for your reply. The question that I can't find a good answer for is,
>> "What is pf congestion?". I would like to solve the actual problem myself, 
>> I'm
>> just looking
>> for some information about what it means for pf to be congested.
> 
> When enqueueing packets to an interface fails (queue is full), a
> global congestion marker variable in the kernel is set to the current
> timestamp.
> 
> When PF tests an inbound packet against rules (i.e. when it has a packet
> that doesn't match an existing state) it checks if that congestion timestamp
> is recent. If it is, the packet is dropped and the PF stats congestion
> counter is incremented.
> 
> Look around if_congested/if_congestion in /sys/net and the mq_ functions
> in /sys/kern/uipc_mbuf.c - the functions described in mq_init(9) as "If the
> queue is full then XX will be dropped" trigger congestion.
> 
> You might get some suggestions if you post a description of your
> configuration (at least which interface types - physical or virtual -
> are in use, what they're connected to, what if any VPNs it's running,
> and it may help to see the ruleset).
> 
> Output from these might help too:
> 
> netstat -m
> systat mbuf | cat
> vmstat -i
> vmstat -m

Greetings Stuart:

Thank you for your reply. It was very helpful and pointed me in the right
direction. The 1000+ windows workstations behind that firewall had been
converted from 7 to 10. Most aren't allowed to access the internet, and the
new OS is much more aggressive about trying to phone home. All of those 
dropped packets had to traverse all of the rules before being dropped, and 
that was the root cause of the issue. It didn't look like too much traffic
because it was just SYN packets, but it was a lot of SYN packets.

Again, thanks for your help.

-Scott



Re: [EXTERNAL] Re: Troubleshooting pf congestion

2020-09-15 Thread Stuart Henderson
On 2020-09-14, Scott Reese  wrote:
> Greetings:
>
> - Original Message -
>> From: "Uwe Werler" 
>> To: "misc" , "Scott Reese" , "misc" 
>> 
>> Sent: Monday, September 14, 2020 12:47:31 PM
>> Subject: [EXTERNAL]  Re: Troubleshooting pf congestion
>
>> Without seeing a rule set what should one say?
>> 
>
>>>
>>>If anyone could spare a couple of sentences or a share a link to a page
>>>detailing what
>>>state causes the system to consider itself contested, I would
>>>appreciate it.
>
> Thanks for your reply. The question that I can't find a good answer for is, 
> "What is pf congestion?". I would like to solve the actual problem myself, 
> I'm just looking
> for some information about what it means for pf to be congested.

When enqueueing packets to an interface fails (queue is full), a
global congestion marker variable in the kernel is set to the current
timestamp.

When PF tests an inbound packet against rules (i.e. when it has a packet
that doesn't match an existing state) it checks if that congestion timestamp
is recent. If it is, the packet is dropped and the PF stats congestion
counter is incremented.

Look around if_congested/if_congestion in /sys/net and the mq_ functions
in /sys/kern/uipc_mbuf.c - the functions described in mq_init(9) as "If the
queue is full then XX will be dropped" trigger congestion.

You might get some suggestions if you post a description of your
configuration (at least which interface types - physical or virtual -
are in use, what they're connected to, what if any VPNs it's running,
and it may help to see the ruleset).

Output from these might help too:

netstat -m
systat mbuf | cat
vmstat -i
vmstat -m




Re: Troubleshooting pf congestion

2020-09-14 Thread Uwe Werler
Without seeing a rule set what should one say? 

Am 14. September 2020 15:19:46 GMT+00:00 schrieb Scott Reese 
:
>Greetings:
>
>I am troubleshooting an issue: users complaining about network
>performance. The firewall
>is an OpenBSD 6.7 system with patches applied. I've traced the issue
>and I'm seeing the
>congestion counter incrementing on system. The problems that we're
>seeing fit with what
>I have been able to find about congestion - when the firewall is
>congested it continues
>passing packets that match existing state entries but it will not
>create any new state
>entries until the congestion clears.
>
>I'm having trouble troubleshooting it beyond that point because I have
>not been able to
>find any additional information about what the congestion counter is
>counting. There is
>the information in the pfctl man page: "congestion: network interface
>queue congested",
>but beyond that I can't really find any information about exactly what
>network interface
>queue is congested.
>
>I'm not seeing packets being dropped, either on the switch side or
>firewall side that
>correspond with the congestion counter going up. The average on the
>congestion counter
>stays around 10/s, but what it's really doing is going up by 100-300/s
>for short periods
>and then not moving for longer periods.
>
>If anyone could spare a couple of sentences or a share a link to a page
>detailing what
>state causes the system to consider itself contested, I would
>appreciate it.
>
>Thanks for your time.
>
>-Scott
>
>
>System dmesg:
>
>OpenBSD 6.7 (GENERIC.MP) #6: Thu Sep  3 14:08:18 MDT 2020
>r...@syspatch-67-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
>real mem = 8386699264 (7998MB)
>avail mem = 8119902208 (7743MB)
>mpath0 at root
>scsibus0 at mpath0: 256 targets
>mainbus0 at root
>bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x7fb76000 (62 entries)
>bios0: vendor American Megatrends Inc. version "2.2" date 05/23/2018
>bios0: Supermicro X11SSL-F
>acpi0 at bios0: ACPI 5.0
>acpi0: sleep states S0 S4 S5
>acpi0: tables DSDT FACP APIC FPDT FIDT SPMI MCFG HPET LPIT SSDT SSDT
>SSDT DBGP DBG2 SSDT SSDT UEFI SSDT DMAR EINJ ERST BERT HEST
>acpi0: wakeup devices PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4)
>PEGP(S4) RP09(S4) PXSX(S4) RP10(S4) PXSX(S4) RP11(S4) PXSX(S4) RP12(S4)
>PXSX(S4) RP13(S4) PXSX(S4) [...]
>acpitimer0 at acpi0: 3579545 Hz, 24 bits
>acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
>cpu0 at mainbus0: apid 0 (boot processor)
>cpu0: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3901.62 MHz, 06-9e-09
>cpu0:
>FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
>cpu0: 256KB 64b/line 8-way L2 cache
>cpu0: smt 0, core 0, package 0
>mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
>cpu0: apic clock running at 24MHz
>cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1, IBE
>cpu1 at mainbus0: apid 2 (application processor)
>cpu1: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
>cpu1:
>FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
>cpu1: 256KB 64b/line 8-way L2 cache
>cpu1: smt 0, core 1, package 0
>cpu2 at mainbus0: apid 4 (application processor)
>cpu2: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
>cpu2:
>FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
>cpu2: 256KB 64b/line 8-way L2 cache
>cpu2: smt 0, core 2, package 0
>cpu3 at mainbus0: apid 6 (application processor)
>cpu3: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
>cpu3:

Re: Troubleshooting pf congestion

2020-09-14 Thread Otto Moerbeek
On Mon, Sep 14, 2020 at 11:19:46AM -0400, Scott Reese wrote:

> Greetings:
> 
> I am troubleshooting an issue: users complaining about network performance. 
> The firewall
> is an OpenBSD 6.7 system with patches applied. I've traced the issue and I'm 
> seeing the
> congestion counter incrementing on system. The problems that we're seeing fit 
> with what
> I have been able to find about congestion - when the firewall is congested it 
> continues
> passing packets that match existing state entries but it will not create any 
> new state
> entries until the congestion clears.
> 
> I'm having trouble troubleshooting it beyond that point because I have not 
> been able to
> find any additional information about what the congestion counter is 
> counting. There is
> the information in the pfctl man page: "congestion: network interface queue 
> congested",
> but beyond that I can't really find any information about exactly what 
> network interface
> queue is congested.
> 
> I'm not seeing packets being dropped, either on the switch side or firewall 
> side that
> correspond with the congestion counter going up. The average on the 
> congestion counter
> stays around 10/s, but what it's really doing is going up by 100-300/s for 
> short periods
> and then not moving for longer periods.
> 
> If anyone could spare a couple of sentences or a share a link to a page 
> detailing what
> state causes the system to consider itself contested, I would appreciate it.
> 
> Thanks for your time.
> 
> -Scott

openbsd-archive.7691.n7.nabble.com/PF-congestion-question-td156490.html

Description and potential remedy are stil true, afaik.

-Otto

> 
> 
> System dmesg:
> 
> OpenBSD 6.7 (GENERIC.MP) #6: Thu Sep  3 14:08:18 MDT 2020
> 
> r...@syspatch-67-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
> real mem = 8386699264 (7998MB)
> avail mem = 8119902208 (7743MB)
> mpath0 at root
> scsibus0 at mpath0: 256 targets
> mainbus0 at root
> bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x7fb76000 (62 entries)
> bios0: vendor American Megatrends Inc. version "2.2" date 05/23/2018
> bios0: Supermicro X11SSL-F
> acpi0 at bios0: ACPI 5.0
> acpi0: sleep states S0 S4 S5
> acpi0: tables DSDT FACP APIC FPDT FIDT SPMI MCFG HPET LPIT SSDT SSDT SSDT 
> DBGP DBG2 SSDT SSDT UEFI SSDT DMAR EINJ ERST BERT HEST
> acpi0: wakeup devices PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4) PEGP(S4) 
> RP09(S4) PXSX(S4) RP10(S4) PXSX(S4) RP11(S4) PXSX(S4) RP12(S4) PXSX(S4) 
> RP13(S4) PXSX(S4) [...]
> acpitimer0 at acpi0: 3579545 Hz, 24 bits
> acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
> cpu0 at mainbus0: apid 0 (boot processor)
> cpu0: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3901.62 MHz, 06-9e-09
> cpu0: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
> cpu0: 256KB 64b/line 8-way L2 cache
> cpu0: smt 0, core 0, package 0
> mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
> cpu0: apic clock running at 24MHz
> cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1, IBE
> cpu1 at mainbus0: apid 2 (application processor)
> cpu1: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
> cpu1: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
> cpu1: 256KB 64b/line 8-way L2 cache
> cpu1: smt 0, core 1, package 0
> cpu2 at mainbus0: apid 4 (application processor)
> cpu2: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
> cpu2: 
> FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
> cpu2: 256KB 64b/line 8-way L2 cache
> cpu2: smt 0, core 2, package 0
> cpu3 at mainbus0: apid 6 (application processor)
> cpu3: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
> cpu3: 

Re: [EXTERNAL] Re: Troubleshooting pf congestion

2020-09-14 Thread Scott Reese
Greetings:

- Original Message -
> From: "Uwe Werler" 
> To: "misc" , "Scott Reese" , "misc" 
> 
> Sent: Monday, September 14, 2020 12:47:31 PM
> Subject: [EXTERNAL]  Re: Troubleshooting pf congestion

> Without seeing a rule set what should one say?
> 

>>
>>If anyone could spare a couple of sentences or a share a link to a page
>>detailing what
>>state causes the system to consider itself contested, I would
>>appreciate it.

Thanks for your reply. The question that I can't find a good answer for is, 
"What is pf congestion?". I would like to solve the actual problem myself, I'm 
just looking
for some information about what it means for pf to be congested.

-Scott



Troubleshooting pf congestion

2020-09-14 Thread Scott Reese
Greetings:

I am troubleshooting an issue: users complaining about network performance. The 
firewall
is an OpenBSD 6.7 system with patches applied. I've traced the issue and I'm 
seeing the
congestion counter incrementing on system. The problems that we're seeing fit 
with what
I have been able to find about congestion - when the firewall is congested it 
continues
passing packets that match existing state entries but it will not create any 
new state
entries until the congestion clears.

I'm having trouble troubleshooting it beyond that point because I have not been 
able to
find any additional information about what the congestion counter is counting. 
There is
the information in the pfctl man page: "congestion: network interface queue 
congested",
but beyond that I can't really find any information about exactly what network 
interface
queue is congested.

I'm not seeing packets being dropped, either on the switch side or firewall 
side that
correspond with the congestion counter going up. The average on the congestion 
counter
stays around 10/s, but what it's really doing is going up by 100-300/s for 
short periods
and then not moving for longer periods.

If anyone could spare a couple of sentences or a share a link to a page 
detailing what
state causes the system to consider itself contested, I would appreciate it.

Thanks for your time.

-Scott


System dmesg:

OpenBSD 6.7 (GENERIC.MP) #6: Thu Sep  3 14:08:18 MDT 2020

r...@syspatch-67-amd64.openbsd.org:/usr/src/sys/arch/amd64/compile/GENERIC.MP
real mem = 8386699264 (7998MB)
avail mem = 8119902208 (7743MB)
mpath0 at root
scsibus0 at mpath0: 256 targets
mainbus0 at root
bios0 at mainbus0: SMBIOS rev. 3.0 @ 0x7fb76000 (62 entries)
bios0: vendor American Megatrends Inc. version "2.2" date 05/23/2018
bios0: Supermicro X11SSL-F
acpi0 at bios0: ACPI 5.0
acpi0: sleep states S0 S4 S5
acpi0: tables DSDT FACP APIC FPDT FIDT SPMI MCFG HPET LPIT SSDT SSDT SSDT DBGP 
DBG2 SSDT SSDT UEFI SSDT DMAR EINJ ERST BERT HEST
acpi0: wakeup devices PEG0(S4) PEGP(S4) PEG1(S4) PEGP(S4) PEG2(S4) PEGP(S4) 
RP09(S4) PXSX(S4) RP10(S4) PXSX(S4) RP11(S4) PXSX(S4) RP12(S4) PXSX(S4) 
RP13(S4) PXSX(S4) [...]
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpimadt0 at acpi0 addr 0xfee0: PC-AT compat
cpu0 at mainbus0: apid 0 (boot processor)
cpu0: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3901.62 MHz, 06-9e-09
cpu0: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu0: 256KB 64b/line 8-way L2 cache
cpu0: smt 0, core 0, package 0
mtrr: Pentium Pro MTRR support, 10 var ranges, 88 fixed ranges
cpu0: apic clock running at 24MHz
cpu0: mwait min=64, max=64, C-substates=0.2.1.2.4.1, IBE
cpu1 at mainbus0: apid 2 (application processor)
cpu1: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
cpu1: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu1: 256KB 64b/line 8-way L2 cache
cpu1: smt 0, core 1, package 0
cpu2 at mainbus0: apid 4 (application processor)
cpu2: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
cpu2: 
FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CFLUSH,DS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE,SSE3,PCLMUL,DTES64,MWAIT,DS-CPL,VMX,SMX,EST,TM2,SSSE3,SDBG,FMA3,CX16,xTPR,PDCM,PCID,SSE4.1,SSE4.2,x2APIC,MOVBE,POPCNT,DEADLINE,AES,XSAVE,AVX,F16C,RDRAND,NXE,PAGE1GB,RDTSCP,LONG,LAHF,ABM,3DNOWP,PERF,ITSC,FSGSBASE,TSC_ADJUST,SGX,BMI1,HLE,AVX2,SMEP,BMI2,ERMS,INVPCID,RTM,MPX,RDSEED,ADX,SMAP,CLFLUSHOPT,PT,IBRS,IBPB,STIBP,L1DF,SSBD,SENSOR,ARAT,XSAVEOPT,XSAVEC,XGETBV1,XSAVES,MELTDOWN
cpu2: 256KB 64b/line 8-way L2 cache
cpu2: smt 0, core 2, package 0
cpu3 at mainbus0: apid 6 (application processor)
cpu3: Intel(R) Xeon(R) CPU E3-1280 v6 @ 3.90GHz, 3900.01 MHz, 06-9e-09
cpu3: