You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
opensense-docs/source/manual/reporting_traffic.rst

31 lines
1.4 KiB
ReStructuredText

===================
Reporting Traffic
===================
Under :menuselection:`Reporting --> Traffic` you will find a traffic monitor which show the current amount of
data flowing through your firewall, measured in bps (bits per second).
.. image:: images/reporting_traffic_sample.png
:width: 100%
The top area of the screen shows an overview of all network adapters for both in- and outgoing traffic.
The graph below shows the top consumers over the same timespan, when you point to a dot it will show you the measured
bandwith for the selected host (the color matches the interface).
.. Note::
4 years ago
When an interface doesn't report traffic and you are certain there should be any, make sure to check if you have any
services enabled that use netmap (zero copy) support on the selected interface (such as IPS and Sensei).
When zero copy is used, packets won't by copied in the kernel in which case bpf can't read from the usual in memory buffer.
:code:`bpf(4)` does support a zerocopy mode, in which case it will map the kernel memory pages directly
(`freebsd/freebsd#310e3f9 <https://github.com/freebsd/freebsd/commit/310e3f93ddb4d35429a892af85c9b1cf4ef64ebe>`__),
To enable, go to :menuselection:`System -> Settings -> Tunables` and add :code:`net.bpf.zerocopy_enable` set to :code:`1`
Since this feature is marked experimental, the standard is not to use zero-copy.