Wan inbound stalls
-
Great suggestions guys, of them I like Derelict's tcpdump loop. I'll have to give it a try. I did find that the latest managed switch firmware now supports a mirror port and will soon support a packet header only mirror, so it remains an option.
But before I go this route, I had a recent discovery I thought I had ruled out but appears relevent. I've kept an eye for drop patterns and see now that, although random, it hits on 15 minute increments such as 4:22pm, 4:37pm, 5:07, 6:07, etc. Although nothing in the log corresponds. However in CRON is only one 0,15,30,45 and that's /etc/rc.filter_configure_sync . I changed the interval to */60 and now the drops don't occur more than once every 60 minutes. So what is this for and does it have to be on such frequent intervals? Perhaps a better question is how might it cause the drop so I can modify or remove the root cause?