I am running pfsense 1.2.3 as a full install on a Dell 1U server. I
am having some issues with interface errors on the WAN input. I have
reviewed the switch logs that the interface is connected to and have
not seen any errors reported by the switch port the interface is
connected to. There are no other interface errors being reported by
pfsense.
Interface: em1: <Intel(R) PRO/1000 Network Connection 6.9.6>
I have so far been unable to pinpoint a cause but in looking at some
netstat output I am wondering if it is related to the checksum
offload:
tcp:
58464 packets sent
52808 data packets (40981123 bytes)
95 data packets (46066 bytes) retransmitted
1 data packet unnecessarily retransmitted
0 resends initiated by MTU discovery
5187 ack-only packets (0 delayed)
0 URG only packets
0 window probe packets
0 window update packets
374 control packets
51329 packets received
43890 acks (for 40885962 bytes)
490 duplicate acks
0 acks for unsent data
4742 packets (2021442 bytes) received in-sequence
3 completely duplicate packets (80 bytes)
0 old duplicate packets
0 packets with some dup. data (0 bytes duped)
0 out-of-order packets (0 bytes)
0 packets (0 bytes) of data after window
0 window probes
7 window update packets
129 packets received after close
496095 discarded for bad checksums
0 discarded for bad header offset fields
0 discarded because packet too short
0 discarded due to memory problems
0 connection requests
442 connection accepts
0 bad connection attempts
0 listen queue overflows
46 ignored RSTs in the windows
442 connections established (including accepts)
66775 connections closed (including 63 drops)
409 connections updated cached RTT on close
415 connections updated cached RTT variance on close
149 connections updated cached ssthresh on close
0 embryonic connections dropped
43889 segments updated rtt (of 40162 attempts)
78 retransmit timeouts
6 connections dropped by rexmit timeout
0 persist timeouts
0 connections dropped by persist timeout
0 Connections (fin_wait_2) dropped because of timeout
0 keepalive timeouts
0 keepalive probes sent
0 connections dropped by keepalive
20951 correct ACK header predictions
3909 correct data packet header predictions
444 syncache entries added
0 retransmitted
0 dupsyn
0 dropped
442 completed
0 bucket overflow
0 cache overflow
2 reset
0 stale
0 aborted
0 badack
0 unreach
0 zone failures
444 cookies sent
0 cookies received
3 SACK recovery episodes
17 segment rexmits in SACK recovery episodes
21728 byte rexmits in SACK recovery episodes
159 SACK options (SACK blocks) received
0 SACK options (SACK blocks) sent
0 SACK scoreboard overflow
udp:
82790 datagrams received
0 with incomplete header
0 with bad data length field
4562 with bad checksum
139 with no checksum
4641 dropped due to no socket
10891 broadcast/multicast datagrams undelivered
0 dropped due to full socket buffers
0 not for hashed pcb
62696 delivered
1018981 datagrams output
0 times multicast source filter matched
ip:
321022989 total packets received
0 bad header checksums
0 with size smaller than minimum
0 with data size < data length
0 with ip length > max ip packet size
0 with header length < data size
0 with data length < header length
0 with bad options
0 with incorrect version number
0 fragments received
0 fragments dropped (dup or out of space)
0 fragments dropped after timeout
0 packets reassembled ok
165773 packets for this host
7604 packets for unknown/unsupported protocol
276210672 packets forwarded (276209496 packets fast forwarded)
1722 packets not forwardable
84 packets received for unknown multicast group
0 redirects sent
1136369 packets sent from this host
0 packets sent with fabricated ip header
1 output packet dropped due to no bufs, etc.
7 output packets discarded due to no route
237 output datagrams fragmented
474 fragments created
0 datagrams that can't be fragmented
0 tunneling packets that can't find gif
5 datagrams with bad address in header
Any ideas as to the cause of the errors or better yet recommendations
for possible solutions?
Thanks.
Jason
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
Commercial support available - https://portal.pfsense.org
