OPNsense Forum

Archive => 20.7 Legacy Series => Topic started by: wuffers on August 02, 2020, 03:36:43 am

Title: vnstat stops tracking with IPS on
Post by: wuffers on August 02, 2020, 03:36:43 am

I was actually having this issue in 20.1 (20.1.7), but it seemed to be only the TX like so, that I found from 18.7:
https://forum.opnsense.org/index.php?topic=10911.0

I upgraded to 20.7 and with a "vnstat -l" I don't see any packets moving with IPS on (both RX and TX). As soon as I disable IPS I see things moving properly. Is this an issue with all the changes to netmap? My WAN interface shows up as em0, and it is running as a passthrough PCI NIC in a Proxmox VM.

Title: Re: vnstat stops tracking with IPS on
Post by: mimugmail on August 03, 2020, 10:12:13 am

I guess so, yes  :(

Title: Re: vnstat stops tracking with IPS on
Post by: mimugmail on August 03, 2020, 09:35:18 pm

Can you try this one?

https://github.com/opnsense/docs/issues/278

Title: Re: vnstat stops tracking with IPS on
Post by: wuffers on August 04, 2020, 12:24:50 am

Added tunable net.bpf.zerocopy_enable set to 1 did not help. "vnstat -l" went from tracking RX and TX packets pre-IPS enabled to no tracking after enabling IPS, then back to tracking after disabling IPS again.

Not sure if this helps (em0 output from pciconf -lv):

Code: [Select]

em0@pci0:0:16:0:     class=0x020000 card=0x20748086 chip=0x15be8086 rev=0x30 hdr=0x00
     vendor     = 'Intel Corporation'
     device     = 'Ethernet Connection (6) I219-V'
     class      = network
     subclass   = ethernet


Title: Re: vnstat stops tracking with IPS on
Post by: FullyBorked on August 04, 2020, 12:31:33 am

Yea, same here adding net.bpf.zerocopy_enable=1 didn't work for me either.  The option wasn't there by default as it seemed to be implied on github, not sure that matters though. 

Title: Re: vnstat stops tracking with IPS on
Post by: mimugmail on August 04, 2020, 06:01:04 am

Did you try to reboot after setting it?

Title: Re: vnstat stops tracking with IPS on
Post by: FullyBorked on August 04, 2020, 07:27:10 pm

Quote from: mimugmail on August 04, 2020, 06:01:04 am

Did you try to reboot after setting it?

I didn't, link on github just said to restart IPS.  I'll try a reboot if I can find some time to have some downtime.

Title: Re: vnstat stops tracking with IPS on
Post by: wuffers on August 04, 2020, 07:56:29 pm

Quote from: mimugmail on August 04, 2020, 06:01:04 am

Did you try to reboot after setting it?

I did after the initial attempt without reboot didn't work. So I did two sequences of enable/disable IPS after setting that tunable. And as FullyBorked stated, that tunable was not already present so I had to add it.

Title: Re: vnstat stops tracking with IPS on
Post by: FullyBorked on August 04, 2020, 10:59:49 pm

Quote from: mimugmail on August 04, 2020, 06:01:04 am

Did you try to reboot after setting it?

Still doesn't work even after a reboot.