Traffic Graph : IN speed not showing

[interkrome]

Hi everyone,

Need some help here. Seems like a bug. The value of "Bandwidth In" traffic is not showing for LAN interface

OPNsense 17.7.1_2-i386
FreeBSD 11.0-RELEASE-p12
OpenSSL 1.0.2l 25 May 2017

device     = 82546EB Gigabit Ethernet Controller (Copper)
chipset    = Intel(R) PRO/1000 Legacy Network Connection 1.1.0

[Manxmann]

Sorry I cannot help, I wanted to comment that I've just upgraded to 17.7.1 from 17.7 and now my Out traffic graph is showing as zero.

[hutiucip]

Same here, 17.7.3, no OUT traffic shown on LAN interfaces (multiple).

[interkrome]

I bet it's down to the ethernet adapter that we are using

[franco]

Anyone using IPS mode in IDS? Multi-WAN?

The accounting is done in the kernel. These features could prevent the interface counters from being properly filled.


Cheers,
Franco

[mimugmail]

This is "normal" for IPS mode, you also wont see the packets with tcpdump (only one direction). No matter if using multiwan or not, it's the IPS mode (perhaps some dummynet rerouting?)

[hutiucip]

IPS Yes, Multi-WAN No

I'll try to disable IPS, see if something changes, I'll come back with details.

[hutiucip]

True!

As soon as I disable IPS, OUT traffic is correctly displayed in "Traffic Graph".
Is there a solution to fix this?

It would be very nice to have both IPS and complete traffic graph.

Thank you!

[franco]

Michael is right about this, although Suricata uses netmap, not dummynet. It would depend on the individual driver's accounting.

Can you guys share your adapter names as well?

What we are after now is a clue if all drivers misbehave (e.g. including em or igb which have native netmap mode) or maybe just the ones that use the netmap emulation framework...


Cheers,
Franco

[hutiucip]

Can you guys share your adapter names as well?

Mine is "Broadcom NC382i integrated multiport PCI express 1 Gb" on an HP ProLiant DL380 G6 host with VMware vSphere 5 as a virtualization environment. Virtual NIC type is e1000.

[mimugmail]

igb0: <Intel(R) PRO/1000 Network Connection, Version - 2.5.3-k> mem 0xdf300000-0xdf3fffff,0xdf40c000-0xdf40ffff irq 16 at device 0.0 on pci1
igb0: Using MSIX interrupts with 5 vectors

[franco]

That already means all of them...ok

[interkrome]

Hi everyone,

Updated to :

OPNsense 17.7.3-i386
FreeBSD 11.0-RELEASE-p12
OpenSSL 1.0.2l 25 May 2017

.. and hardware to :

device     = 'RTL8169 PCI Gigabit Ethernet Controller'

.. now the graph is showing IN and OUT.

[franco]

Hmm, nothing was updated anywhere near the areas in question.