I didn't remember the kernel which I selected. May be this can be helpful: # uname -a FreeBSD hostname 7.2-RELEASE-p5 FreeBSD 7.2-RELEASE-p5 #0: Sun Dec 6 23:20:31 EST 2009 sullr...@freebsd_7.2_pfsense_1.2.3_snaps.pfsense.org:/usr/obj.pfSense/usr/pfSensesrc/src/sys/pfSense_SMP.7 i386 #
Here is the output of commands # vmstat -i interrupt total rate irq14: ata0 69 0 irq20: uhci3+ 40438 1 irq22: uhci1 1 0 irq23: uhci0 ehci0 1 0 cpu0: timer 49491587 1991 irq256: em0 47345 1 irq257: em1 151470 6 cpu2: timer 49491241 1991 cpu1: timer 49491241 1991 cpu3: timer 49491241 1991 cpu5: timer 49491241 1991 cpu4: timer 49491241 1991 cpu7: timer 49491241 1991 cpu6: timer 49491241 1991 Total 396169598 15945 # I still don't understand why it doesn't passes traffic after 60 mbps Cihan SAĞLAMÖZ On Thu, Jun 3, 2010 at 11:32 PM, Ryan <[email protected]> wrote: > Send the message a dozen more times. Maybe someone will respond. Ok I > guess by you repition that you set the states to 2500000 and it seems you > still are being limmited to 60mbps. When you installed it, what kernal did > you select? > > > > ------------------------------ > *From:* Cihan Saglamoz [mailto:[email protected]] > *Sent:* Thursday, June 03, 2010 3:16 PM > *To:* [email protected] > *Subject:* Re: [pfSense Support] PfSense and hardware > > I set it to 2500000 > > In 60 mbits/s I see it about 1400000 > > > Cihan SAĞLAMÖZ > > > > On Thu, Jun 3, 2010 at 9:49 PM, Chris Buechler <[email protected]>wrote: > >> On Thu, Jun 3, 2010 at 2:41 PM, Cihan Saglamoz <[email protected]> >> wrote: >> > Hi, >> > >> > Is pfsense supports quad core cpus? >> > >> > >> > I have a pfsense running on a box with quad core cpu and 3 gb memory. It >> has >> > a server mainboard and Gbit intel NIC over it. >> > >> > I am using it as a SYN Proxy after 60 mbits/s attack it is not possible >> to >> > connect to firewall and servers behind the firewall. >> > >> >> You're probably exhausting your state table, increase its limit under >> System>Advanced. >> >> >> > On shell I see that tcpdump and syslog uses cpu very much. And I see >> only >> > one cpu on "top" command. Is there another way for checking it? >> > >> > Which feature uses tcpdump? Can I close it? >> >> logging, don't kill it. >> >> >> > Do you know some ways for >> > tuning pfsense to handle more than 60 mbits? >> > >> >> Increase the state table is probably all you need to do. >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> >> Commercial support available - https://portal.pfsense.org >> >> > > > __________ Information from ESET NOD32 Antivirus, version of virus > signature database 5170 (20100603) __________ > > The message was checked by ESET NOD32 Antivirus. > > http://www.eset.com >
