Reporting -> Traffic: remove bpf comment, since this seems to have been a side affect and not a related issue. the netmap output was fixed with https://github.com/opnsense/core/issues/4272

while here, also add information about the grid view for https://github.com/opnsense/docs/issues/301
pull/304/head
Ad Schellevis 3 years ago
parent 2934941572
commit 623afdce8a

@ -6,6 +6,9 @@ Under :menuselection:`Reporting --> Traffic` you will find a traffic monitor whi
data flowing through your firewall, measured in bps (bits per second).
Graph
...............................
.. image:: images/reporting_traffic_sample.png
:width: 100%
@ -16,15 +19,15 @@ The graph below shows the top consumers over the same timespan, when you point t
bandwith for the selected host (the color matches the interface).
.. Note::
When an interface doesn't report traffic and you are certain there should be any, make sure to check if you have any
services enabled that use netmap (zero copy) support on the selected interface (such as IPS and Sensei).
When zero copy is used, packets won't by copied in the kernel in which case bpf can't read from the usual in memory buffer.
Top talkers
...............................
Although the graphical overview also shows the most active clients on the network, sometimes it is more convenient
to see the list of addresses and their current activity in a grid type overview.
This is where the "Top talkers" tab comes into play, the information is quite comparable to what a command line tool as
:code:`iftop` would display.
:code:`bpf(4)` does support a zerocopy mode, in which case it will map the kernel memory pages directly
(`freebsd/freebsd#310e3f9 <https://github.com/freebsd/freebsd/commit/310e3f93ddb4d35429a892af85c9b1cf4ef64ebe>`__),
To enable, go to :menuselection:`System -> Settings -> Tunables` and add :code:`net.bpf.zerocopy_enable` set to :code:`1`
When opening this tab you will be presented with the most active addresses, including the amount of traffic
passed when measured and the last time traffic was seen from or to that address.
Since this feature is marked experimental, the standard is not to use zero-copy.
Every time the graph is updated, the grid will also be populated with new information.

Loading…
Cancel
Save