[Zeek] Dropping packets

[Justin Azoff]

On Mon, Feb 17, 2020 at 2:31 PM Joseph Fischetti <
Joseph.Fischetti at marist.edu> wrote:

> Thanks for the response Justin.
>
>
>
> I’ll start with disabling HT on the workers, and will reconfigure the
> workers with 8 threads each.  I’ll also pin the processes.
>
> The myricom configuration you quoted included environment variables:
>
> env_vars=SNF_APP_ID=1,SNF_DATARING_SIZE=16384MB,SNF_DESCRING_SIZE=4096MB
>
> What are those for/where can I find documentation/Should I include any of
> those?
>

It's in the myricom documentation.. searching for those settings should
find you a PDF of it.


> You also said the packets dropped are inclusive for the entire worker, but
> that the packets recvd are per thread:
>
> worker-1-1: 1581949346.194441 recvd=2178149468 dropped=2260820124
> link=15063051356
>
> worker-1-2: 1581949346.194473 recvd=274557259 dropped=2260820124
> link=13159459147
>
> worker-1-3: 1581949346.168558 recvd=1888926901 dropped=2260820124
> link=14773828789
>
> worker-1-4: 1581949346.081130 recvd=2110377092 dropped=2260820124
> link=14995278980
>
> worker-1-5: 1581949346.234478 recvd=1032618510 dropped=2260820124
> link=13917520398
>
>
>
> Those add up to ~7.5B recvd with 2.2B dropped.  That’s 30%, but your
> script said 3.  Am I looking at some numbers wrong?
>

Oh, yes!  I forgot one another detail that is specific to the myricom
nics.  The link and drop counters don't reset when you restart zeek...
possibly this could be worked around in the plugin to snapshot them at
startup and report the differences instead of the absolute numbers the card
reports...

Try running this:

zeekctl stop
zeekctl exec /opt/snf/bin/myri_counters -c -p 0 >/dev/null
zeekctl exec /opt/snf/bin/myri_counters -c -p 1 >/dev/null
zeekctl start

that will clear the counters and give you clean numbers.

-- 
Justin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20200217/9951fe14/attachment.html