tech-net archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
npfctl show hangs for a long time
I've a npf ruleset. It's not enormous, according to npfctl show it goes up
to id="74".
However, running npfctl show takes around 3 minutes to run and it runs at
100% CPU:
0.119u 186.256s 3:09.30 98.4% 0+0k 0+0io 0pf+0w
ktrace/kdump shows it hanging at this point:
19226 1 npfctl RET
__fstat50 0
19226 1 npfctl CALL ioctl(3,IOC_NPF_VERSION,0x7f7fff2e42fc)
19226 1 npfctl GIO fd 3 read 4 bytes
"\^V\0\0\0"
19226 1 npfctl RET ioctl 0
19226 1 npfctl CALL ioctl(3,IOC_NPF_SAVE,0x7f7fff2e4290)
19226 1 npfctl GIO fd 3 read 24 bytes
"\0\M-@{\M-w\^?\^?\0\0\M^_'t\0\0\0\0\0\0\0\0\0\0\0\0\0"
19226 1 npfctl RET ioctl 0
I've compared this to another installation with a slightly smaller ruleset
(goes up to id="56") which takes a more reasonable time:
0.019u 1.647s 0:01.66 99.3% 0+0k 0+0io 0pf+0w
Both on NetBSD 9.1/amd64
--
Stephen
Home |
Main Index |
Thread Index |
Old Index