> Roger, > > I don't think this message is related to your trouble. I think you can > also avoid these messages by adding 'no scrub' to your pf.conf (I'm > currently not aware of any side effects by adding this). > > Probably Max has some more suggestions on not scrubbing packets. > > You should get a debugger into your kernel (like Max suggested) and > probably also use `pfctl -x loud' or `pfctl -x misc' to get more > messages out of pf. If these messages are popping up again, break the > system into the debugger and look for the messages (using 'scroll > lock' to scroll back some pages), ps and a backtrace. > > HTH > > Volker
I found the following in Dmesg just a while ago ("BAD STATE" Line). Look simalier to what is loop on the screen when the sytem locks up. Could Pf be mixing or confusing states? pf_normalize_ip: reass frag 21897 @ 0-1480 pf_normalize_ip: reass frag 21897 @ 1480-2960 pf_normalize_ip: reass frag 21897 @ 2960-4440 pf_normalize_ip: reass frag 21897 @ 4440-5920 pf_normalize_ip: reass frag 21897 @ 5920-5940 pf_reassemble: 5940 < 5940? pf_reassemble: complete: 0xc413be00(5960) pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700 [lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172 high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172 len=0 ackskew=0 pkts=1:1 dir=in,fwd pf: State failure on: | pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700 [lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172 high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172 len=0 ackskew=0 pkts=1:2 dir=in,fwd pf: State failure on: | pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700 [lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172 high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172 len=0 ackskew=0 pkts=1:3 dir=in,fwd pf: State failure on: | pf_normalize_ip: reass frag 22153 @ 0-1480 pf_normalize_ip: reass frag 22153 @ 1480-2960 pf_normalize_ip: reass frag 22153 @ 2960-4440 pf_normalize_ip: reass frag 22153 @ 4440-5920 pf_normalize_ip: reass frag 22153 @ 5920-5940 pf_reassemble: 5940 < 5940? pf_reassemble: complete: 0xc43c1800(5960) pf_normalize_ip: reass frag 22409 @ 0-1480 pf_normalize_ip: reass frag 22409 @ 1480-2960 pf_normalize_ip: reass frag 22409 @ 2960-4440 pf_normalize_ip: reass frag 22409 @ 4440-5920 pf_normalize_ip: reass frag 22409 @ 5920-5940 pf_reassemble: 5940 < 5940? pf_reassemble: complete: 0xc4409c00(5960) pf_normalize_ip: reass frag 22665 @ 0-1480 pf_normalize_ip: reass frag 22665 @ 1480-2960 pf_normalize_ip: reass frag 22665 @ 2960-4440 pf_normalize_ip: reass frag 22665 @ 4440-5920 pf_normalize_ip: reass frag 22665 @ 5920-5940 pf_reassemble: 5940 < 5940? pf_reassemble: complete: 0xc4335a00(5960) _______________________________________________ freebsd-pf@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-pf To unsubscribe, send any mail to "[EMAIL PROTECTED]"