Re: network/performance problem

[Patrick McHardy <kaber@trash.net>]

Ron Peterson wrote:
> On Thu, Mar 11, 2004 at 03:15:59PM -0800, Andrew Morton wrote:
>>The profiles tell a story:
>>
>>c0217fb0 wait_for_packet                               2   0.0063
>>c0256660 arpt_do_table                                 2   0.0019
>>c0265ca0 __generic_copy_to_user                        2   0.0278
>>c0106bd0 system_call                                   3   0.0536
>>c0107e8c handle_IRQ_event                              3   0.0326
>>c014bf10 statm_pgd_range                               3   0.0077
>>c0120ed4 do_wp_page                                    5   0.0101
>>c024c0d4 ip_conntrack_expect_related                  47   0.0368
>>c0105250 default_idle                               2817  70.4250
>>c024bae0 init_conntrack                             3053   3.7232
>>00000000 total                                      5962   0.0041
>>
>>It appears that netfilter has gone berzerk and is taking your machine out.
>>
>>Are you really sure that nothing is sitting there injecting new rules all
>>the time?
> 
> 
> You mean a script calling 'iptables' to dynamically add rules?  Nothing
> like that at all.  I dumped the current rules below.
> 
> Are you looking at the init_conntrack numbers?  While they seem, in the
> long run, to be getting larger, they're not increasing monotonically.
> My ping latencies, and the CPU percentage consumed by ksoftirqd_CPU0
> just go up and and up (albeit slowly).
> 

The size-128 slab keeps growing over time, I suspect something is
registering lots of expectations. init_conntrack has to walk the
entire list for each new connection. Which helpers are you using ?
Please also post the content of /proc/net/ip_conntrack and your
config.

Regards
Patrick