Traffic Graph not showing correctly

[eljeffeg]

Not sure at what version this started to occur, but I have no traffic listed in large "Out" graph. And on the little mini-graphs (per ip), no "In" traffic is listed. "status_graph.php"

Running version 17.7.7, but I know the issue was present in 17.7.5 as well.

[fabianfrz]

@jeffg2k please check if you have IPS enabled. IPS blocks that.

[eljeffeg]

Yes, IPS mode is enabled. But it's always been enabled. Any way to exclude the traffic reporting from the IPS?

[mimugmail]

Would you first try disabling it and check of it works?

[eljeffeg]

Yes, turning off IPS mode corrects the issue. I don't see that as a good solution, but it does fix it.

[mimugmail]

This is not a solution, only better to track down the problem. This one is already known that with IPS enabled packets in one direction are not seen ...

[AdSchellevis]

it could be a driver issue, what network chip are you using?

[mimugmail]

Virtualbox:

em0@pci0:0:3:0: class=0x020000 card=0x001e8086 chip=0x100e8086 rev=0x02 hdr=0x00
    vendor     = 'Intel Corporation'
    device     = '82540EM Gigabit Ethernet Controller'
    class      = network
    subclass   = ethernet

Physical:

igb0@pci0:1:0:0:        class=0x020000 card=0x00018086 chip=0x15218086 rev=0x01 hdr=0x00
    vendor     = 'Intel Corporation'
    device     = 'I350 Gigabit Network Connection'
    class      = network
    subclass   = ethernet

[AdSchellevis]

you have the same issue with both drivers?

[mimugmail]

Yep, two different systems.

https://forum.opnsense.org/index.php?topic=5911.0

[eljeffeg]

How to I list the drivers in opnsense / bsd? Seems dmsg doesn't go back very far, I don't see a /etc/modules.conf or find the info in systemlog, no lspci.

[mimugmail]

pciconf -lv

[eljeffeg]

dmesg.boot has this:

em0: <Intel(R) PRO/1000 Network Connection 7.6.1-k>
em1: <Intel(R) PRO/1000 Network Connection 7.6.1-k>

pciconf -lv:

em0@pci0:0:25:0: class=0x020000 card=0x00008086 chip=0x10bd8086 rev=0x02 hdr=0x00
vendor = 'Intel Corporation'
device = '82566DM-2 Gigabit Network Connection'
class = network
subclass = ethernet

em1@pci0:6:0:0: class=0x020000 card=0x00008086 chip=0x108b8086 rev=0x03 hdr=0x00
vendor = 'Intel Corporation'
device = '82573V Gigabit Ethernet Controller (Copper)'
class = network
subclass = ethernet

[AdSchellevis]

What are your "sort by" and "filter" settings?

[eljeffeg]

I have the defaults, which are Bw In and Local. Changing the "sort by" didn't fix anything, but changing the "filter" to All does fix the "Bandwidth In" on the mini-graphs. The large Out (bps) graph is still 0.

[AdSchellevis]

It's highly likely a kernel issue with netmap, the graphs use two different command's (ifinfo, rate) to gather statistics which both seem to stall.

[mimugmail]

Yep .. there's a bit weirdness in kernel, netmap and suricata ... also like this:
https://forum.opnsense.org/index.php?topic=6190.0

KVM or ESX .. some guys need to set to e1000 but for some only vmxnet3 helps.

[eljeffeg]

Any progress with this? I'm on 18.1.6, but I still see no traffic in the graph on Out (bps) or the Bandwidth In Mini-graphs.

[fichtner]

Same as #1632 - IPS makes "out" direction disappear in PCAP capture mode.

[ghost235]

Sorry for warming this up, but the issue seems to be back on 20.7.4 on vmware 6.5.0 with e1000. IPS is on

[AdSchellevis]

@ghost235 https://github.com/opnsense/core/issues/4272

[ghost235]

thanks i found just after post ;)