Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Analyze / solve "erros in" on interface and "errors out" on vlan

    Scheduled Pinned Locked Moved General pfSense Questions
    21 Posts 3 Posters 1.7k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @sysadminfromhell
      last edited by

      @sysadminfromhell how many packets have been processed? Unless its a really low number I wouldn't worry about a few errors.

      So looked for which of my interface had the highest number of errors

      In/out packets
          200980945/288683912 (177.97 GiB/303.77 GiB) 
      In/out packets (pass)
          200980945/288683912 (177.97 GiB/303.77 GiB) 
      In/out packets (block)
          50855/15 (8.82 MiB/900 B) 
      In/out errors
          7841/0 
      

      7841 out of 200980945 is like 0.00003901364 % I wouldn't worry about such a thing ;)

      Are the numbers constantly increasing? Is it a high percentage value for total number of packets that interface has seen?

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 1
      • S
        sysadminfromhell @stephenw10
        last edited by sysadminfromhell

        @stephenw10 said in Analyze / solve "erros in" on interface and "errors out" on vlan:

        Hmm, well you can certainly try just disabling hardware checksum offloading and see if that changes anything. You will have to reboot to apply that.

        I disabled it and the errors stop raising.
        So what does it mean in total? The driver / card has issues with that or is my hardware configuration just not "good"?

        @johnpoz said in Analyze / solve "erros in" on interface and "errors out" on vlan:

        @sysadminfromhell how many packets have been processed? Unless its a really low number I wouldn't worry about a few errors.

        So looked for which of my interface had the highest number of errors

        In/out packets
            200980945/288683912 (177.97 GiB/303.77 GiB) 
        In/out packets (pass)
            200980945/288683912 (177.97 GiB/303.77 GiB) 
        In/out packets (block)
            50855/15 (8.82 MiB/900 B) 
        In/out errors
            7841/0 
        

        7841 out of 200980945 is like 0.00003901364 % I wouldn't worry about such a thing ;)

        Are the numbers constantly increasing? Is it a high percentage value for total number of packets that interface has seen?

        So here are the numbers so far, its a small percentage tbh but does it mean that "errors" in a small % is normal?

        70113b47-9fc5-473f-b66f-2af22ffca369-image.png

        Kind regards,

        PS.: for my inner monk is weird to see errors in the combination of the words "aren't to worry about", its just that I know the concept of a firewall and also how to operate one but not in terms of that.

        johnpozJ 1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator @sysadminfromhell
          last edited by

          @sysadminfromhell now and then you will see errors.. What would be the point or reporting them if you never saw them.. Some errors are bound to happen.. Got something throws out a few mangled packets when it looses power maybe, etc. Or just now and then for whatever software reason, etc.

          Unless the number was increasing where you could see it actually changing as you hit refresh, etc.. Not like you come back next week and the number is 2 higher then it was last week, etc.

          169 out of 5 million, is a small tiny fraction, I mean tiny hehe.. I would just chalk that up to yeah now and then your going to see some errors. When we are checking the network for issues, and we come about a interface that has errors on it - we do reset the counters and look to see if numbers are going up in real time, etc.

          Your seeing like 1 error for every like 30k packets.. Not sure I would be concerned ;)

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          S 1 Reply Last reply Reply Quote 0
          • S
            sysadminfromhell @johnpoz
            last edited by

            @johnpoz The funny part is after I enabeld TLO, TSO and the Checksum now (do untick all options) the counter is still zero. I will have a eye on it and see if this works like that. For now the packet count is low (due to restart).

            b957db88-9f0b-41f7-8208-d05410c8cce8-image.png

            The VLAN erros come from I dont know where but this count I normally encounter and never raised above 10.

            1 Reply Last reply Reply Quote 0
            • stephenw10S
              stephenw10 Netgate Administrator
              last edited by

              Yup some errors are not unexpected. Especially if the link gets reconnected.

              S 1 Reply Last reply Reply Quote 1
              • S
                sysadminfromhell @stephenw10
                last edited by

                @stephenw10 Update after about a day:
                ca0d5091-fb35-457c-b509-70d0557d91e6-image.png

                1 Reply Last reply Reply Quote 0
                • stephenw10S
                  stephenw10 Netgate Administrator
                  last edited by

                  Hmm, that's a pretty low percentage. Does it increment slowly?

                  S 1 Reply Last reply Reply Quote 0
                  • S
                    sysadminfromhell @stephenw10
                    last edited by

                    @stephenw10 yes it does. But the errors are always mac checksum errors but now they´re only on one interface, LAN.
                    b116186f-c5df-4707-82ca-136b9bd91617-image.png

                    johnpozJ 1 Reply Last reply Reply Quote 0
                    • stephenw10S
                      stephenw10 Netgate Administrator
                      last edited by

                      Hmm, and that's after disabling hardware checksum offloading?

                      Does it actually show as disabled on the LAN NIC in the ifconfig -v output?

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator @sysadminfromhell
                        last edited by

                        @sysadminfromhell you have in 3355323 packets / 79 is 1 error every like 42k packets..

                        Maybe you just have those errors coming in? Be it you offload the checksum or not..

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        S 1 Reply Last reply Reply Quote 0
                        • S
                          sysadminfromhell @johnpoz
                          last edited by

                          @johnpoz I was going to answer that at @stephenw10 , I still get this errors with offload enabled or disabled. Funny part: its now less then before with LSO ans TSO also enabled. Still rising but I think im not concerned due to the nice side effect that the bufferbloat is also vanished. No problems there anymore with 100% util from my download rate. still stable browsing / gaming at the same time.

                          S 1 Reply Last reply Reply Quote 0
                          • S
                            sysadminfromhell @sysadminfromhell
                            last edited by

                            @sysadminfromhell I just wanted to figure out where to start digging where they come from. On the LAN side they're aren't much devices but some wifi devices which maybe can cause this but will I be able to find out where this errors come from to at least understand whats going on?

                            johnpozJ 1 Reply Last reply Reply Quote 0
                            • johnpozJ
                              johnpoz LAYER 8 Global Moderator @sysadminfromhell
                              last edited by johnpoz

                              @sysadminfromhell can you disable your wifi for a while, to isolate it to wired or wireless devices?

                              Or are there only wifi on this connection? I would turn off wifi to validate it really is a wifi device, and then its matter of figuring out which one or ones..

                              An intelligent man is sometimes forced to be drunk to spend time with his fools
                              If you get confused: Listen to the Music Play
                              Please don't Chat/PM me for help, unless mod related
                              SG-4860 24.11 | Lab VMs 2.8, 24.11

                              S 1 Reply Last reply Reply Quote 0
                              • S
                                sysadminfromhell @johnpoz
                                last edited by

                                @johnpoz Currently I cannot disable the wifi right now but in a few days I can verify if this is the issue. I also reed that some MikroTik switches have some issues creating this problem. I'm going to verify if the switch is the problem aswell.

                                S 1 Reply Last reply Reply Quote 0
                                • S
                                  sysadminfromhell @sysadminfromhell
                                  last edited by sysadminfromhell

                                  @sysadminfromhell so short update here @johnpoz, the switch isnt the issue and I also getting errors on the VMNet now. The number is small but rising hourly.
                                  Due to the new upcoming errors on the other Interface I believe that Wifi isnt the problem because there isnt any Wifi SSID Broadcasting for this Network.
                                  I might have an idea but need to redesign the network a bit so I try that tomorrow and will Update you.
                                  Updated Numbers:
                                  18593cb7-2366-425b-82d2-60659b72361d-image.png

                                  johnpozJ 1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator @sysadminfromhell
                                    last edited by johnpoz

                                    @sysadminfromhell while I personally wouldn't be too concerned with such minor amount of errors - unless there was something actually not working how it should and tracked it down to these sorts of errors.

                                    But I would be interested in what you find, etc. Sometimes such little minor things can be fun to track down, but they can also be huge time sucks - hehehe

                                    I can not tell you the amount of time I spent trying to figure out why plex will send out ssdp every freaking 10 seconds, when all the things are disabled for why it might or could have use for doing such a thing.

                                    Posted over on the plex forums - got back crickets.. Couple of users posted that they noticed it too.. But no solution, in the long run I just ended blocking such traffic at the switch port.. Plex can send them out every 10 seconds, it goes no farther than switch port at the end of its wire... Stupid shit!! hehehe

                                    So yeah would be very interested in what you find.. You never know might run into such a thing sometime down the road and what you find could be the solution there.. So good luck! Hope you track it down..

                                    I recall something sim as well, on some cheap smart switch.. It would mark RxBadPkt, and the counter would constantly go up - even though everything was working fine.. It was just a cosmetic error, any packets marked with tags got marked as RxBadPkt, So native untagged wouldn't trigger the stat, but all tags coming in would.. All the vlans actually worked, etc. but they would just increase that counter.. That was a time suck for sure.. Finally just had to let it go ;)

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    S 1 Reply Last reply Reply Quote 1
                                    • S
                                      sysadminfromhell @johnpoz
                                      last edited by

                                      @johnpoz said in Analyze / solve "erros in" on interface and "errors out" on vlan:

                                      @sysadminfromhell while I personally wouldn't be too concerned with such minor amount of errors - unless there was something actually not working how it should and tracked it down to these sorts of errors.

                                      But I would be interested in what you find, etc. Sometimes such little minor things can be fun to track down, but they can also be huge time sucks - hehehe

                                      I can not tell you the amount of time I spent trying to figure out why plex will send out ssdp every freaking 10 seconds, when all the things are disabled for why it might or could have use for doing such a thing.

                                      Posted over on the plex forums - got back crickets.. Couple of users posted that they noticed it too.. But no solution, in the long run I just ended blocking such traffic at the switch port.. Plex can send them out every 10 seconds, it goes no farther than switch port at the end of its wire... Stupid shit!! hehehe

                                      So yeah would be very interested in what you find.. You never know might run into such a thing sometime down the road and what you find could be the solution there.. So good luck! Hope you track it down..

                                      I recall something sim as well, on some cheap smart switch.. It would mark RxBadPkt, and the counter would constantly go up - even though everything was working fine.. It was just a cosmetic error, any packets marked with tags got marked as RxBadPkt, So native untagged wouldn't trigger the stat, but all tags coming in would.. All the vlans actually worked, etc. but they would just increase that counter.. That was a time suck for sure.. Finally just had to let it go ;)

                                      So i reduced the errors with disabling flow control completly, now we still jave errors but a lot less then before:

                                      Uptime 7 Days 03 Hours 18 Minutes 15 Seconds

                                      4e0aabd5-909a-4b66-8438-342142fbec3e-image.png

                                      So I guess this was one source of the problem even I cannot find all of them this looked at least like a good start even the VLAN Interfaces still have errors out. (a minor few packets)

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.