Subject: Re: NetBSD in BSD Router / Firewall Testing
To: Mike Tancsa <mike@sentex.net>
From: Steven M. Bellovin <smb@cs.columbia.edu>
List: tech-net
Date: 12/01/2006 09:55:06
On Fri, 01 Dec 2006 09:31:23 -0500
Mike Tancsa <mike@sentex.net> wrote:
>
> # netstat -q
> arpintrq:
> queue length: 0
> maximum queue length: 50
> packets dropped: 151
I'm not sure this one matters much in the real world -- I suspect it can
only happen when a large number of addresses are polled in a very short
time. (OTOH, it might happen if a scanning worm was working through
the router.)
> ipintrq:
> queue length: 0
> maximum queue length: 256
> packets dropped: 133721212
This is the second report we've seen recently of packet drops in this
queue. We need to understand what's going on, I think.
--Steve Bellovin, http://www.cs.columbia.edu/~smb