Netgate SG-1000 microFirewall

Author Topic: Reading pftop queue drops (PRIQ)  (Read 184 times)

0 Members and 1 Guest are viewing this topic.

Offline klou

  • Jr. Member
  • **
  • Posts: 36
  • Karma: +5/-0
    • View Profile
Reading pftop queue drops (PRIQ)
« on: December 19, 2017, 12:35:11 pm »
So, I'm using PRIQ to balance outbound traffic between VOIP, VPN, and other services (I recently added a 2nd ACK queue for the lesser queues to hopefully throttle inbound DL's a bit).

As you can see below, I've got some recent drops on the VPN queue - which is relatively high on the list. 

The weird part is that there really isn't any traffic of note on the two higher queues (and they're not prone to massive spikes), so I'm trying to understand why and how these packets could've been dropped.  Does anybody have any suggestions on how this can happen?  The queue limits themselves are at default levels (50).

Code: [Select]
QUEUE                             BW SCH  PRIO     PKTS    BYTES   DROP_P   DROP_B QLEN BORROW SUSPEN     P/S     B/S
qACK                                 priq   15      228    15024        0        0    0                     0       0
qVoIP                                priq    7    13088  1154490        0        0    0                     3     183
qVPN                                 priq    6    94412 64366720        5     5812    0                    16    2299
qOthersHigh                          priq    4    11167   912868        0        0    0                     1      83
qDefault                             priq    3   105607 56230434        0        0    0                   268   30905
qOthersLow                           priq    2     2618   907874        0        0    0                     0       0
qLowACK                              priq    5   273883 15601822        0        0    0                   280   15253

Offline KOM

  • Hero Member
  • *****
  • Posts: 5831
  • Karma: +711/-23
    • View Profile
Re: Reading pftop queue drops (PRIQ)
« Reply #1 on: December 19, 2017, 12:40:47 pm »
A traffic shaper will drop packets to meet its commitments.  5 packets is hardly anything to get worried about.  Those packets were probably dropped due to high voip traffic at that specific moment.

Offline klou

  • Jr. Member
  • **
  • Posts: 36
  • Karma: +5/-0
    • View Profile
Re: Reading pftop queue drops (PRIQ)
« Reply #2 on: December 19, 2017, 12:54:17 pm »
Thanks for the reply.

It just looks weird to me -- because I know that there's very, very little traffic on the VOIP lines at the moment.

Offline Harvy66

  • Hero Member
  • *****
  • Posts: 2360
  • Karma: +220/-12
    • View Profile
Re: Reading pftop queue drops (PRIQ)
« Reply #3 on: December 19, 2017, 02:16:04 pm »
Dropping 1 out of nearly 19,000 packets is worrisome? Dropping packets is normal unless you have a synchronous connection directly connecting only two devices.