<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Saved from the Spam bucket. Please remember to subscribe to the mailing list before posting to it.<br><div><br><div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>From: </b></span><span style="font-family:'Helvetica'; font-size:medium;">Roel van Meer <<a href="mailto:roel.vanmeer@bokxing-it.nl">roel.vanmeer@bokxing-it.nl</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>Subject: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><b>cause of dropped packets in interface stats</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>Date: </b></span><span style="font-family:'Helvetica'; font-size:medium;">12 June, 2013 7:45:48 AM EDT<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>To: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><a href="mailto:users@lists.openswan.org">users@lists.openswan.org</a><br></span></div><br><br>Hi list,<br><br>We're running a linux server with OpenSwan 2.6.38, using KLIPS and with about 100 tunnels. All is working well.<br><br>However, the interface statistics of the ipsec0 interface look like this:<br><br>ipsec0 Link encap:Ethernet HWaddr aa:aa:aa:aa:aa:aa<br> inet addr:pu.bli.cip.adr Mask:255.255.255.255<br> UP RUNNING NOARP MTU:1500 Metric:1<br> RX packets:1536163134 errors:0 dropped:3594958 overruns:0 frame:0<br> TX packets:1453236498 errors:0 dropped:2455020 overruns:0 carrier:0<br> collisions:0 txqueuelen:10<br> RX bytes:220749612688 (205.5 GiB) TX bytes:345964228696 (322.2 GiB)<br><br>The dropped packet counters are quite high, which is something I have no explanation for.<br>Could someone explain in which cases a packet would be dropped?<br><br>For transmitted packets, I know one situation, which is if there is a route via ipsec0 and there is currently no tunnel for it. But how about the recieved packets?<br><br>As a related question: could this be indicative of a server overload problem?<br><br>Thanks in advance,<br><br>Roel<br><br><br><br></div></div><br></body></html>