All of lore.kernel.org
 help / color / mirror / Atom feed
From: Roberto Nibali <ratz@tac.ch>
To: Patrick McHardy <kaber@trash.net>
Cc: Netfilter Developers <netfilter-devel@lists.netfilter.org>,
	Pablo Neira <pablo@eurodev.net>
Subject: Re: [PATCH] update raw patch in POM
Date: Mon, 27 Jun 2005 14:07:44 +0200	[thread overview]
Message-ID: <42BFEC10.20102@tac.ch> (raw)
In-Reply-To: <42BFDBA1.7060002@trash.net>

>>What neighbour needs to be resolved? The neighbour cache is full, only 4
>>addresses are involved, gc threshold is high, so no trashing. Or are we talking
>>different issues?
>  
> It was just a guess, I can't think of anywhere else where packets
> might have been queued for 30s, given that you have no packet
> sockets and probably don't have a long enough device queue that
> it would take 30s.

sem-arbeit:~# ip -s -s neigh show
172.23.2.30 dev eth0 lladdr 00:01:02:6c:23:f8 ref 3 used 0/0/69 nud reachable
172.23.2.31 dev eth0 lladdr 00:30:05:50:50:2b ref 1 used 3/0/224 nud reachable

That's all I have in the cache ;). The routing cache is more populated though:

sem-arbeit:~# ip -s -s route show cache
broadcast 255.255.255.255 from 172.23.10.16 dev lo  src 172.23.120.120
    cache <local,brd,src-direct>  users 1 age 136sec iif eth0
unreachable 172.27.1.10 from 172.27.232.50 dev lo  src 172.23.120.120
    cache  error 101 users 1 used 6 age 34sec iif eth0
local 172.23.120.120 from 172.23.2.31 dev lo  src 172.23.120.120
    cache <local,src-direct>  users 1 age 271sec iif eth0
broadcast 172.23.255.255 from 172.23.1.14 dev lo  src 172.23.120.120
    cache <local,brd,src-direct>  users 1 used 3 age 149sec iif eth0
unreachable 172.30.12.254 from 172.30.12.203 dev lo  src 172.23.120.120
    cache  error 101 users 1 used 29 age 11sec iif eth0
172.23.2.30 from 172.23.120.120 dev eth0
    cache  users 1 used 3 age 97sec mtu 1500 advmss 1460
local 172.23.120.120 from 172.23.134.111 dev lo  src 172.23.120.120
    cache <local,src-direct>  users 1 used 36 age 6sec iif eth0
172.23.2.30 from 172.23.120.120 tos lowdelay dev eth0
    cache  users 5 used 2 age 93sec mtu 1500 advmss 1460
unreachable 172.30.12.154 from 172.30.12.203 dev lo  src 172.23.120.120
    cache  error 101 users 1 used 5 age 182sec iif eth0
local 172.23.120.120 from 172.23.2.31 tos lowdelay dev lo  src 172.23.120.120
    cache <local,src-direct>  users 1 used 47504 age 0sec iif eth0
local 172.23.120.120 from 172.23.2.30 dev lo  src 172.23.120.120
    cache <local,src-direct>  users 1 used 37 age 93sec iif eth0
local 172.23.120.120 from 172.23.2.30 tos lowdelay dev lo  src 172.23.120.120
    cache <local,src-direct>  users 1 used 150 iif eth0
172.23.2.31 from 172.23.120.120 tos lowdelay dev eth0
    cache  users 5 used 3 age 225sec mtu 1500 advmss 1460
broadcast 255.255.255.255 from 172.23.10.19 dev lo  src 172.23.120.120
    cache <local,brd,src-direct>  users 1 used 1 age 100sec iif eth0
broadcast 172.23.255.255 from 172.23.232.138 dev lo  src 172.23.120.120
    cache <local,brd,src-direct>  users 1 used 1 age 32sec iif eth0
sem-arbeit:~#

>>>To confirm that
>>>theory you could play with the values in
>>>/proc/sys/net/ipv4/neigh/default and see if it changes anything.
>>
>>
>>I'll do that. How do you think I should instrument these values? And what does
>>the neighbour stuff have to do with conntrack timeouts?
> 
> 
> Try halving all values and see if it has any effects on the time
> it takes to unload the module.

Nope, I'll upload the new results shortly but the time is unchanged.

> I'm pretty sure the nf_reset + the wait-for-untracked-refs patches
> should take care of the problem, but to be sure it would be good
> to know where the delay came from.

Currently I do not run it with nf_reset patched kernels which is another really
strange thing. Some other timeout which is 30s? But I only see
udp_timeout_stream and icmp_timeout ...

Do you plan to submit the nf_reset and wait-for-untracked-refs patches for
mainline inclusion?

Best regards,
Robert Nibali, ratz
-- 
-------------------------------------------------------------
addr://Rathausgasse 31, CH-5001 Aarau  tel://++41 62 823 9355
http://www.terreactive.com             fax://++41 62 823 9356
-------------------------------------------------------------
terreActive AG                       Wir sichern Ihren Erfolg
-------------------------------------------------------------

  reply	other threads:[~2005-06-27 12:07 UTC|newest]

Thread overview: 48+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2005-06-07 11:06 [PATCH] update raw patch in POM Roberto Nibali
2005-06-07 14:37 ` Roberto Nibali
2005-06-07 22:55   ` Pablo Neira
2005-06-08  8:23     ` Roberto Nibali
2005-06-08 12:37       ` Pablo Neira
2005-06-14 15:27         ` Roberto Nibali
2005-06-20  8:18           ` Roberto Nibali
2005-06-20  9:07             ` Roberto Nibali
2005-06-20 10:41             ` SOLVED (was: Re: [PATCH] update raw patch in POM) Roberto Nibali
2005-06-20 11:01               ` Jozsef Kadlecsik
2005-06-20 11:03                 ` SOLVED Roberto Nibali
2005-06-20 11:04                   ` SOLVED Jozsef Kadlecsik
2005-06-20 10:49             ` [PATCH] update raw patch in POM Jan Engelhardt
2005-06-20 11:03               ` Roberto Nibali
2005-06-21  0:34             ` Thomas Graf
2005-06-21  0:39               ` Thomas Graf
2005-06-21  6:46                 ` Roberto Nibali
2005-06-21  8:59                   ` Pablo Neira
2005-06-21  9:08                     ` Jozsef Kadlecsik
2005-06-21 11:18                   ` Thomas Graf
2005-06-21  0:51               ` Pablo Neira
2005-06-21 11:13                 ` Thomas Graf
2005-06-21 14:00                   ` Patrick McHardy
2005-06-21 14:17                     ` [PATCH] update raw patch in POM [2.4.x] Roberto Nibali
2005-06-21 14:47                       ` Patrick McHardy
2005-06-21 15:15                         ` Roberto Nibali
2005-06-21 15:32                           ` Patrick McHardy
2005-06-22  9:26                             ` Roberto Nibali
2005-06-22  7:04                           ` Jozsef Kadlecsik
2005-06-22  9:10                             ` Roberto Nibali
2005-06-22  9:19                               ` Jozsef Kadlecsik
2005-06-22  9:27                                 ` Roberto Nibali
2005-06-21 21:50                     ` [PATCH] update raw patch in POM Thomas Graf
2005-06-22  0:32                       ` Patrick McHardy
2005-06-22  0:52                         ` Thomas Graf
2005-06-22  3:24                           ` Pablo Neira
2005-06-22  3:55                             ` Patrick McHardy
2005-06-22  5:48                               ` Roberto Nibali
2005-06-22 11:39                               ` Roberto Nibali
2005-06-22 18:38                                 ` Patrick McHardy
2005-06-27  6:36                                   ` Roberto Nibali
2005-06-27 10:57                                     ` Patrick McHardy
2005-06-27 12:07                                       ` Roberto Nibali [this message]
2005-06-27 12:55                                         ` Patrick McHardy
2005-06-27 13:53                                           ` Roberto Nibali
2005-06-27 15:49                                             ` Patrick McHardy
2005-06-28  6:02                                               ` Roberto Nibali
2005-06-27  8:50                                   ` Roberto Nibali

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=42BFEC10.20102@tac.ch \
    --to=ratz@tac.ch \
    --cc=kaber@trash.net \
    --cc=netfilter-devel@lists.netfilter.org \
    --cc=pablo@eurodev.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.