OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: Darkopnsense on September 26, 2020, 08:37:10 am

Title: Sensei impacts the graphical traffic widget
Post by: Darkopnsense on September 26, 2020, 08:37:10 am

hello mb,

Since upgrading to version 20.7 I have the OUT traffic graph widget.

When you stop sensei, the traffic graph widget works.

I have of course checked my statements on my different configurations.

Situation still valid in version 20.7.3

Regards,

French mother tongue.

Title: Re: Sensei impacts the graphical traffic widget
Post by: athurdent on September 26, 2020, 06:36:33 pm

Seems to be related to Netmap. Zabbix Client is not getting any useful data from LAN (Sensei with Netmap) and WAN1 (Suricata in IPS mode) here, too.

Title: Re: Sensei impacts the graphical traffic widget
Post by: mb on September 30, 2020, 12:18:21 am

Does setting net.bpf.zerocopy_enable to 1 help?

From: https://docs.opnsense.org/troubleshooting/network.html

Quote

Use zero-copy for bpf(4) for faster processing, when not set (the default) packets will not be seen by bpf, which influences the traffic graphs for example.

Title: Re: Sensei impacts the graphical traffic widget
Post by: athurdent on September 30, 2020, 06:04:30 am

Just set

Code: [Select]

# sysctl net.bpf.zerocopy_enable=1
net.bpf.zerocopy_enable: 0 -> 1but LAN (igb0) with Sensei in Netmap mode is still flatlining, Zabbix is not picking up traffic either.

Title: Re: Sensei impacts the graphical traffic widget
Post by: mb on September 30, 2020, 06:07:26 pm

A reboot might be necessary to apply the setting before any services are started. Better to put in Misc -> Tunables so that this survives reboots.

Title: Re: Sensei impacts the graphical traffic widget
Post by: athurdent on September 30, 2020, 06:54:15 pm

Quote from: mb on September 30, 2020, 06:07:26 pm

A reboot might be necessary to apply the setting before any services are started. Better to put in Misc -> Tunables so that this survives reboots.

Thanks, and sorry I failed to mention that. I had already tried that, too. No luck, as soon as Sensei starts, the igb interface flatlines.

Title: Re: Sensei impacts the graphical traffic widget
Post by: mb on October 01, 2020, 07:50:59 pm

Hi @athurdent,

Thanks for the additional update.

This looks like netmap comes into the scene way earlier than iflib getting a chance to tap the packet for bpf(4) processing.

We'll look into that.

Title: Re: Sensei impacts the graphical traffic widget
Post by: athurdent on October 02, 2020, 10:10:58 am

@mb Great, thank you!  :)