W dniu 13 marca 2013 17:04 użytkownik Tomasz Chiliński <tomasz.chilinski@chilan.com> napisał:

Gratuluję wyboru sieciówki Broadcom :P

tu akurat w delu wielkiego wyboru nie miałem :/

Lepiej zrobić ethtool -S eth0.
Może coś więcej ciekawe pokaże - jakie typy błędów.

#v+
marcin@john ~ $ sudo ethtool -S eth0
NIC statistics:
     rx_bytes: 58005926010809
     rx_error_bytes: 0
     tx_bytes: 18667787068096
     tx_error_bytes: 0
     rx_ucast_packets: 56839575326
     rx_mcast_packets: 2332968
     rx_bcast_packets: 2962157
     tx_ucast_packets: 44935029155
     tx_mcast_packets: 2170338
     tx_bcast_packets: 9797
     tx_mac_errors: 0
     tx_carrier_errors: 0
     rx_crc_errors: 1
     rx_align_errors: 0
     tx_single_collisions: 0
     tx_multi_collisions: 0
     tx_deferred: 0
     tx_excess_collisions: 0
     tx_late_collisions: 0
     tx_total_collisions: 0
     rx_fragments: 0
     rx_jabbers: 0
     rx_undersize_packets: 0
     rx_oversize_packets: 0
     rx_64_byte_packets: 367041689
     rx_65_to_127_byte_packets: 1225421409
     rx_128_to_255_byte_packets: 2592733732
     rx_256_to_511_byte_packets: 1329502955
     rx_512_to_1023_byte_packets: 1499934579
     rx_1024_to_1522_byte_packets: 2585595831
     rx_1523_to_9022_byte_packets: 0
     tx_64_byte_packets: 4447905834
     tx_65_to_127_byte_packets: 4143193460
     tx_128_to_255_byte_packets: 2085872403
     tx_256_to_511_byte_packets: 862181329
     tx_512_to_1023_byte_packets: 1787247660
     tx_1024_to_1522_byte_packets: 1546037532
     tx_1523_to_9022_byte_packets: 0
     rx_xon_frames: 0
     rx_xoff_frames: 0
     tx_xon_frames: 0
     tx_xoff_frames: 0
     rx_mac_ctrl_frames: 0
     rx_filtered_packets: 1811098
     rx_ftq_discards: 0
     rx_discards: 0
     rx_fw_discards: 60564057
#v-

od momentu zmian ta wartość (rx_fw_discards: 60564057) wydaje mi się nie zmieniona.
ifconfig terz pokazuje 605745581 i tu rośnie :/

Można obniżyć liczbę składowanych wpisów w nf_conntrack przez zmniejszenie
czasu życia wpisów określających nawiązane połączenia TCP.

jeśli chodzi o wpisy w nf_conntrack to mam tak:
#v+
net.netfilter.nf_conntrack_generic_timeout = 600
net.netfilter.nf_conntrack_tcp_timeout_syn_sent = 120
net.netfilter.nf_conntrack_tcp_timeout_syn_recv = 60
net.netfilter.nf_conntrack_tcp_timeout_established = 7200
net.netfilter.nf_conntrack_tcp_timeout_fin_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close_wait = 60
net.netfilter.nf_conntrack_tcp_timeout_last_ack = 30
net.netfilter.nf_conntrack_tcp_timeout_time_wait = 120
net.netfilter.nf_conntrack_tcp_timeout_close = 10
net.netfilter.nf_conntrack_tcp_timeout_max_retrans = 300
net.netfilter.nf_conntrack_tcp_timeout_unacknowledged = 300
net.netfilter.nf_conntrack_tcp_loose = 1
net.netfilter.nf_conntrack_tcp_be_liberal = 0
net.netfilter.nf_conntrack_tcp_max_retrans = 3
net.netfilter.nf_conntrack_udp_timeout = 30
net.netfilter.nf_conntrack_udp_timeout_stream = 180
net.netfilter.nf_conntrack_icmp_timeout = 30
net.netfilter.nf_conntrack_icmpv6_timeout = 30
net.netfilter.nf_conntrack_frag6_timeout = 60
net.netfilter.nf_conntrack_frag6_low_thresh = 196608
net.netfilter.nf_conntrack_frag6_high_thresh = 262144
net.netfilter.nf_conntrack_acct = 0
net.netfilter.nf_conntrack_timestamp = 0
net.netfilter.nf_conntrack_events = 1
net.netfilter.nf_conntrack_events_retry_timeout = 15
net.netfilter.nf_conntrack_max = 262144
net.netfilter.nf_conntrack_count = 123059
net.netfilter.nf_conntrack_buckets = 16384
net.netfilter.nf_conntrack_checksum = 1
net.netfilter.nf_conntrack_log_invalid = 0
net.netfilter.nf_conntrack_expect_max = 256
net.nf_conntrack_max = 262144
#v+

Dzięki za zainteresowanie.