I've been working on implementing Suricata (package 2.1.9.1) on a CARP
dual router setup, and Suricata is set to sync to router2 as well. I have
several issues, the worst of which ends with me unable to connect to router2
via a browser (and of course sync fails).
1) Agonizingly slow
em0@pci0:4:0:0: class=0x02 card=0x15d9 chip=0x10968086 rev=0x01
hdr=0x00
class = network
subclass = ethernet
em1@pci0:4:0:1: class=0x02 card=0x15d9 chip=0x10968086 rev=0x01
hdr=0x00
class = network
subclass = ethernet
We had a switch in b/w Pfsense
Op 11-1-2016 om 14:46 schreef Muhammad Yousuf Khan:
> em0@pci0:4:0:0: class=0x02 card=0x15d9 chip=0x10968086 rev=0x01
> hdr=0x00
> class = network
> subclass = ethernet
> em1@pci0:4:0:1: class=0x02 card=0x15d9 chip=0x10968086 rev=0x01
> hdr=0x00
> class =
First I would switch the interfaces to see if em1 delivers the same low
performance as em0 when used as WAN.
If that doesn't work, try installing new interfaces.
You mentioned earlier that the colo told you to lock the WAN interface at
100Mb/full-duplex. Our ISP was doing the same thing for a
Here you go, yes there are error in the interfaces i can not get more
detail as i can not run the command pkg_add it is saying that command not
found however i know its a server board and it has two bultin LAN. 1 i am
using for WAN and For LAN.
here is CPU details.
Intel(R) Xeon(R) CPU E5440 @
use Intel ethernets. even the cheap ones work as expected.
also ask them to set ports to 10 half 10 full 100 half, reset counters on
each change, you change to the same and see if in any works without errors.
or ask them to set it to auto. also change cables to something real.
its swimming with
Steve Yates wrote on Tue, Dec 15 2015 at 5:04 pm:
> Per that bug report (https://redmine.pfsense.org/issues/4326), it
> sounds like it's only an issue
> if NAT is being used, correct? They work if NAT is not in use?
To follow up I set up a limiter on our data center router, for
Muhammad Yousuf Khan wrote on Mon, Jan 11 2016 at 12:23 am:
> - iperf speed test for LAN, between is 50Mbps up and down
> - but iperf test on WAN showing 10Mbps down and 5Mbps up.
> - however my client is saying that assigned speed from colo is 100Mbps.
"full duplex" means the card
