vnstat stops tracking with IPS on

[wuffers]

I was actually having this issue in 20.1 (20.1.7), but it seemed to be only the TX like so, that I found from 18.7:
https://forum.opnsense.org/index.php?topic=10911.0

I upgraded to 20.7 and with a "vnstat -l" I don't see any packets moving with IPS on (both RX and TX). As soon as I disable IPS I see things moving properly. Is this an issue with all the changes to netmap? My WAN interface shows up as em0, and it is running as a passthrough PCI NIC in a Proxmox VM.

[mimugmail]

I guess so, yes  :(

[mimugmail]

Can you try this one?

https://github.com/opnsense/docs/issues/278

[wuffers]

Added tunable net.bpf.zerocopy_enable set to 1 did not help. "vnstat -l" went from tracking RX and TX packets pre-IPS enabled to no tracking after enabling IPS, then back to tracking after disabling IPS again.

Not sure if this helps (em0 output from pciconf -lv):

Code Select Expand


em0@pci0:0:16:0:     class=0x020000 card=0x20748086 chip=0x15be8086 rev=0x30 hdr=0x00
     vendor     = 'Intel Corporation'
     device     = 'Ethernet Connection (6) I219-V'
     class      = network
     subclass   = ethernet


[FullyBorked]

Yea, same here adding net.bpf.zerocopy_enable=1 didn't work for me either.  The option wasn't there by default as it seemed to be implied on github, not sure that matters though. 

[mimugmail]

Did you try to reboot after setting it?

[FullyBorked]

Did you try to reboot after setting it?

I didn't, link on github just said to restart IPS.  I'll try a reboot if I can find some time to have some downtime.

[wuffers]

Did you try to reboot after setting it?

I did after the initial attempt without reboot didn't work. So I did two sequences of enable/disable IPS after setting that tunable. And as FullyBorked stated, that tunable was not already present so I had to add it.

[FullyBorked]

Did you try to reboot after setting it?

Still doesn't work even after a reboot.