OPNsense Forum

English Forums => General Discussion => Topic started by: vpx on November 20, 2024, 04:02:17 PM

Title: High inblock packet count on passive LAN interfaces
Post by: vpx on November 20, 2024, 04:02:17 PM
Hello everyone,

I just noticed high inblock packet counts on LAN interfaces which just act as parent interfaces for VLAN interfaces.

How can these high packet numbers be explained, are they originating from the attached switch?

130-200m seem to be a lot of packets per second.

I know the underlying real physical interface of a VLAN does not have to be enabled for a VLAN to be working but I had problems with a WiFi controller and enabling the interface solved it.

The LAN interfaces have the configuration type "none". What would fix these high packet counts without disabling the underlying LAN interfaces?

For comparison I'll show the packet counts of a normal active "Static IPv4" LAN interface vs. a passive LAN interface.
Title: Re: High inblock packet count on passive LAN interfaces
Post by: Patrick M. Hausen on November 20, 2024, 04:52:32 PM
Thats 200 millipackets per second or a fifth of a packet or one packet every five seconds.

That's just some multicast, neighbour discovery, keepalive, whatever ... stuff from the switch or any other device on that untagged network.
Title: Re: High inblock packet count on passive LAN interfaces
Post by: vpx23 on November 20, 2024, 06:57:45 PM
Ah, thank you, that makes sense, maybe I should RTFM, I thought 'm' was for mega, i.e. millions.  ;D

That would have been in the realm of a 100 GBit/s NIC.
Title: Re: High inblock packet count on passive LAN interfaces
Post by: Patrick M. Hausen on November 20, 2024, 07:08:25 PM
Mega is M, milli is m.
Title: Re: High inblock packet count on passive LAN interfaces
Post by: stefan00 on November 21, 2024, 01:35:37 PM
To be honest, that has also confused me for a while.

Since the unit is packets/second, wouldn't it be nicer to see for example "0.2" instead of "200m" and just add k or M for the bigger values (>1/s)?