The state tables should be fine. They're currently in the 30k range, set
to alert in nagios at 250k.
I've attached truss snippets and log snippets from a failed connection.
truss was obtained via truss -f -p $pid -o outfile, and grepping down
via the failued pid as logged in syslog.
On 12/04/2017 02:47 PM, Kristof Provost wrote:
>
> On 4 Dec 2017, at 19:57, John Jasen wrote:
>
> Depending on circumstances, we see a lot or a very few of the
> following
> messages:
> "pf connection lookup failed (no rdr?)"
>
> That means the state lookup (using ioctl(DIOCNATLOOK)) failed.
> There seem to be a couple of possible reasons why that might happen.
> One of which is that there’s no state at all. Can you check how many
> states you’ve got (and what the limits are)?
>
> It might also be worth checking what errno is when the ioctl failed.
> truss can help, or you can patch tftp-proxy:
>
> |diff --git a/contrib/pf/tftp-proxy/filter.c
> b/contrib/pf/tftp-proxy/filter.c index e5a769a62a5..1802ac2c4d9 100644
> --- a/contrib/pf/tftp-proxy/filter.c +++
> b/contrib/pf/tftp-proxy/filter.c @@ -363,7 +363,10 @@
> server_lookup4(struct sockaddr_in *client, struct sockaddr_in *proxy,
> pnl.dport = proxy->sin_port; if (ioctl(dev, DIOCNATLOOK, &pnl) == -1)
> + { + printf("DIOCTNATLOOK errno %d\n", errno); return (-1); + }
> memset(server, 0, sizeof(struct sockaddr_in)); server->sin_len =
> sizeof(struct sockaddr_in); |
>
> Regards,
> Kristof
>
25013: <new process>
23643: fork() = 25013 (0x61b5)
25013: sigprocmask(SIG_SETMASK,{ },{ SIGHUP|SIGALRM|SIGCHLD }) = 0 (0x0)
25013: fstat(3,{ mode=-rw------- ,inode=819908,size=5,blksize=32768 }) = 0 (0x0)
25013: close(3) = 0 (0x0)
25013: sigaction(SIGALRM,{ SIG_DFL SA_RESTART ss_t },0x0) = 0 (0x0)
25013: sigaction(SIGCHLD,{ SIG_DFL SA_RESTART ss_t },0x0) = 0 (0x0)
25013: sigaction(SIGHUP,{ SIG_DFL SA_RESTART ss_t },0x0) = 0 (0x0)
25013: fcntl(5,F_SETFD,0) = 0 (0x0)
25013: dup2(0x5,0x0) = 0 (0x0)
25013: close(5) = 0 (0x0)
25013: dup2(0x0,0x1) = 1 (0x1)
25013: dup2(0x0,0x2) = 2 (0x2)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: geteuid() = 0 (0x0)
25013: open("/etc/spwd.db",O_RDONLY|O_CLOEXEC,00) = 3 (0x3)
25013: fstat(3,{ mode=-rw------- ,inode=2487988,size=40960,blksize=32768 }) = 0
(0x0)
25013: read(3,"\0\^F\^Ua\0\0\0\^B\0\0\^D\M-R\0"...,260) = 260 (0x104)
25013: pread(0x3,0x801666000,0x1000,0x6000) = 4096 (0x1000)
25013: pread(0x3,0x801665000,0x1000,0x4000) = 4096 (0x1000)
25013: close(3) = 0 (0x0)
25013: lstat("/etc/login.conf",{ mode=-rw-r--r--
,inode=2489226,size=6790,blksize=32768 }) = 0 (0x0)
25013: open("/etc/login.conf.db",O_RDONLY|O_CLOEXEC,00) = 3 (0x3)
25013: fstat(3,{ mode=-rw-r--r-- ,inode=2488078,size=16384,blksize=32768 }) = 0
(0x0)
25013: read(3,"\0\^F\^Ua\0\0\0\^B\0\0\^D\M-R\0"...,260) = 260 (0x104)
25013: pread(0x3,0x801665000,0x1000,0x1000) = 4096 (0x1000)
25013: close(3) = 0 (0x0)
25013: setsid() = 25013 (0x61b5)
25013: setpriority(0x0,0x0,0x0) = 0 (0x0)
25013: setgid(0x0) = 0 (0x0)
25013: __sysctl(0x7fffffffdd48,0x2,0x7fffffffdd2c,0x7fffffffdd30,0x0,0x0) = 0
(0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: open("/etc/group",O_RDONLY|O_CLOEXEC,0666) = 3 (0x3)
25013: lseek(3,0x0,SEEK_CUR) = 0 (0x0)
25013: fstat(3,{ mode=-rw-r--r-- ,inode=2489214,size=530,blksize=32768 }) = 0
(0x0)
25013: read(3,"# $FreeBSD: releng/11.1/etc/grou"...,32768) = 530 (0x212)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: lseek(3,0x0,SEEK_CUR) = 530 (0x212)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: read(3,0x801626a00,32768) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: close(3) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: setgroups(0x2,0x801693000) = 0 (0x0)
25013: setlogin(0x801624000) = 0 (0x0)
25013: sigaction(SIGSYS,{ SIG_IGN 0x0 ss_t },{ SIG_DFL 0x0 ss_t }) = 0 (0x0)
25013: setloginclass(0x801634100) = 0 (0x0)
25013: sigaction(SIGSYS,{ SIG_DFL 0x0 ss_t },0x0) = 0 (0x0)
25013: umask(0x12) = 18 (0x12)
25013: getrlimit(RLIMIT_CPU,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setrlimit(RLIMIT_CPU,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_FSIZE,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setrlimit(RLIMIT_FSIZE,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_DATA,{ cur=34359738368,max=34359738368 }) = 0 (0x0)
25013: setrlimit(RLIMIT_DATA,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_STACK,{ cur=536870912,max=536870912 }) = 0 (0x0)
25013: setrlimit(RLIMIT_STACK,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_RSS,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setrlimit(RLIMIT_RSS,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_MEMLOCK,{ cur=134217728,max=134217728 }) = 0 (0x0)
25013: setrlimit(RLIMIT_MEMLOCK,{ cur=134217728,max=134217728 }) = 0 (0x0)
25013: getrlimit(RLIMIT_NPROC,{ cur=34275,max=34275 }) = 0 (0x0)
25013: setrlimit(RLIMIT_NPROC,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_NOFILE,{ cur=941454,max=941454 }) = 0 (0x0)
25013: setrlimit(RLIMIT_NOFILE,{
cur=9223372036854775807,max=9223372036854775807 }) = 0 (0x0)
25013: getrlimit(RLIMIT_CORE,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setrlimit(RLIMIT_CORE,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_SBSIZE,{
cur=9223372036854775807,max=9223372036854775807 }) = 0 (0x0)
25013: setrlimit(RLIMIT_SBSIZE,{
cur=9223372036854775807,max=9223372036854775807 }) = 0 (0x0)
25013: getrlimit(RLIMIT_VMEM,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setrlimit(RLIMIT_VMEM,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_NPTS,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setrlimit(RLIMIT_NPTS,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_SWAP,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setrlimit(RLIMIT_SWAP,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: getrlimit(RLIMIT_KQUEUES,{
cur=9223372036854775807,max=9223372036854775807 }) = 0 (0x0)
25013: setrlimit(RLIMIT_KQUEUES,{
cur=9223372036854775807,max=9223372036854775807 }) = 0 (0x0)
25013: getrlimit(RLIMIT_UMTXP,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setrlimit(RLIMIT_UMTXP,{ cur=9223372036854775807,max=9223372036854775807
}) = 0 (0x0)
25013: setuid(0x0) = 0 (0x0)
25013: getuid() = 0 (0x0)
25013: geteuid() = 0 (0x0)
25013: getegid() = 0 (0x0)
25013: setegid(0x0) = 0 (0x0)
25013: seteuid(0x0) = 0 (0x0)
25013: lstat("/root/.login_conf",0x7fffffffd8d0) ERR#2 'No such file or
directory'
25013: lstat("/etc/login.conf",{ mode=-rw-r--r--
,inode=2489226,size=6790,blksize=32768 }) = 0 (0x0)
25013: open("/root/.login_conf.db",O_RDONLY|O_CLOEXEC,00) ERR#2 'No such file
or directory'
25013: open("/root/.login_conf",O_RDONLY|O_CLOEXEC,00) ERR#2 'No such file or
directory'
25013: open("/etc/login.conf.db",O_RDONLY|O_CLOEXEC,00) = 3 (0x3)
25013: fstat(3,{ mode=-rw-r--r-- ,inode=2488078,size=16384,blksize=32768 }) = 0
(0x0)
25013: read(3,"\0\^F\^Ua\0\0\0\^B\0\0\^D\M-R\0"...,260) = 260 (0x104)
25013: pread(0x3,0x801665000,0x1000,0x1000) = 4096 (0x1000)
25013: close(3) = 0 (0x0)
25013: seteuid(0x0) = 0 (0x0)
25013: setegid(0x0) = 0 (0x0)
25013: umask(0x12) = 18 (0x12)
25013: sigaction(SIGPIPE,{ SIG_DFL SA_RESTART ss_t },0x0) = 0 (0x0)
25013: execve("/usr/libexec/tftp-proxy",0x801674060,0x8016180a0) = 0 (0x0)
25013: mmap(0x0,32768,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) =
34366173184 (0x800623000)
25013: issetugid() = 0 (0x0)
25013: lstat("/etc",{ mode=drwxr-xr-x ,inode=2487936,size=2560,blksize=32768 })
= 0 (0x0)
25013: lstat("/etc/libmap.conf",{ mode=-rw-r--r--
,inode=2489223,size=109,blksize=32768 }) = 0 (0x0)
25013: openat(AT_FDCWD,"/etc/libmap.conf",O_RDONLY|O_CLOEXEC,00) = 3 (0x3)
25013: fstat(3,{ mode=-rw-r--r-- ,inode=2489223,size=109,blksize=32768 }) = 0
(0x0)
25013: mmap(0x0,109,PROT_READ,MAP_PRIVATE,3,0x0) = 34366205952 (0x80062b000)
25013: close(3) = 0 (0x0)
25013: lstat("/usr",{ mode=drwxr-xr-x ,inode=1364352,size=512,blksize=32768 })
= 0 (0x0)
25013: lstat("/usr/local",{ mode=drwxr-xr-x
,inode=1364368,size=512,blksize=32768 }) = 0 (0x0)
25013: lstat("/usr/local/etc",{ mode=drwxr-xr-x
,inode=2015781,size=1024,blksize=32768 }) = 0 (0x0)
25013: lstat("/usr/local/etc/libmap.d",0x7fffffffc7e8) ERR#2 'No such file or
directory'
25013: munmap(0x80062b000,109) = 0 (0x0)
25013: openat(AT_FDCWD,"/var/run/ld-elf.so.hints",O_RDONLY|O_CLOEXEC,00) = 3
(0x3)
25013: read(3,"Ehnt\^A\0\0\0\M^@\0\0\0k\0\0\0\0"...,128) = 128 (0x80)
25013: fstat(3,{ mode=-r--r--r-- ,inode=804914,size=235,blksize=32768 }) = 0
(0x0)
25013: lseek(3,0x80,SEEK_SET) = 128 (0x80)
25013: read(3,"/lib:/usr/lib:/usr/lib/compat:/u"...,107) = 107 (0x6b)
25013: close(3) = 0 (0x0)
25013: access("/lib/libc.so.7",F_OK) = 0 (0x0)
25013: openat(AT_FDCWD,"/lib/libc.so.7",O_RDONLY|O_CLOEXEC|O_VERIFY,00) = 3
(0x3)
25013: fstat(3,{ mode=-r--r--r-- ,inode=2599140,size=1761320,blksize=32768 }) =
0 (0x0)
25013: mmap(0x0,4096,PROT_READ,MAP_PRIVATE|MAP_PREFAULT_READ,3,0x0) =
34366205952 (0x80062b000)
25013: mmap(0x0,3899392,PROT_NONE,MAP_PRIVATE|MAP_ANON|MAP_NOCORE,-1,0x0) =
34368274432 (0x800824000)
25013:
mmap(0x800824000,1646592,PROT_READ|PROT_EXEC,MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ,3,0x0)
= 34368274432 (0x800824000)
25013:
mmap(0x800bb6000,49152,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ,3,0x192000)
= 34372018176 (0x800bb6000)
25013:
mmap(0x800bc2000,106496,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_FIXED|MAP_ANON,-1,0x0)
= 34372067328 (0x800bc2000)
25013: munmap(0x80062b000,4096) = 0 (0x0)
25013: close(3) = 0 (0x0)
25013: munmap(0x80062a000,4096) = 0 (0x0)
25013: mmap(0x0,102400,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) =
34366201856 (0x80062a000)
25013: sysarch(AMD64_SET_FSBASE,0x7fffffffe1a8) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: readlink("/etc/malloc.conf",0x7fffffffd8a0,1024) ERR#2 'No such file or
directory'
25013: issetugid() = 0 (0x0)
25013:
__sysctl(0x7fffffffd740,0x2,0x7fffffffd790,0x7fffffffd788,0x800985c93,0xd) = 0
(0x0)
25013: __sysctl(0x7fffffffd790,0x2,0x7fffffffd854,0x7fffffffd848,0x0,0x0) = 0
(0x0)
25013: mmap(0x0,2097152,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) =
34372173824 (0x800bdc000)
25013: munmap(0x800bdc000,2097152) = 0 (0x0)
25013: mmap(0x0,4190208,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) =
34372173824 (0x800bdc000)
25013: munmap(0x800bdc000,147456) = 0 (0x0)
25013: munmap(0x800e00000,1945600) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: socket(PF_LOCAL,SOCK_DGRAM|SOCK_CLOEXEC,0) = 3 (0x3)
25013: connect(3,{ AF_UNIX "/var/run/logpriv" },106) = 0 (0x0)
25013: openat(AT_FDCWD,"/dev/pf",O_RDWR,00) = 4 (0x4)
25013: ioctl(4,0xc1a04415 { IORW 0x44('D'), 21, 416 },0x7fffffffe478) = 0 (0x0)
25013: mmap(0x0,2097152,PROT_READ|PROT_WRITE,MAP_PRIVATE|MAP_ANON,-1,0x0) =
34374418432 (0x800e00000)
25013: access("/etc/localtime",R_OK) ERR#2 'No such file or
directory'
25013: issetugid() = 0 (0x0)
25013: open("/usr/share/zoneinfo/UTC",O_RDONLY,00) = 5 (0x5)
25013: fstat(5,{ mode=-r--r--r-- ,inode=1479692,size=118,blksize=32768 }) = 0
(0x0)
25013: read(5,"TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0"...,41448) = 118 (0x76)
25013: close(5) = 0 (0x0)
25013: issetugid() = 0 (0x0)
25013: open("/usr/share/zoneinfo/posixrules",O_RDONLY,06423226000) = 5 (0x5)
25013: fstat(5,{ mode=-r--r--r-- ,inode=1479694,size=3519,blksize=32768 }) = 0
(0x0)
25013: read(5,"TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0"...,41448) = 3519 (0xdbf)
25013: close(5) = 0 (0x0)
25013: stat("/etc/nsswitch.conf",{ mode=-rw-r--r--
,inode=2489257,size=338,blksize=32768 }) = 0 (0x0)
25013: open("/etc/nsswitch.conf",O_RDONLY|O_CLOEXEC,0666) = 5 (0x5)
25013: ioctl(5,TIOCGETA,0x7fffffffe290) ERR#25 'Inappropriate ioctl
for device'
25013: fstat(5,{ mode=-rw-r--r-- ,inode=2489257,size=338,blksize=32768 }) = 0
(0x0)
25013: read(5,"#\n# nsswitch.conf(5) - name ser"...,32768) = 338 (0x152)
25013: read(5,0x800e3df80,32768) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: access("/lib/nss_compat.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/nss_compat.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/compat/nss_compat.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/local/lib/nss_compat.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/local/lib/compat/pkg/nss_compat.so.1",F_OK) ERR#2 'No such
file or directory'
25013: access("/usr/local/lib/perl5/5.24/mach/CORE/nss_compat.so.1",F_OK) ERR#2
'No such file or directory'
25013: access("/lib/casper/nss_compat.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/lib/nss_compat.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/nss_compat.so.1",F_OK) ERR#2 'No such file or
directory'
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: access("/lib/nss_nis.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/nss_nis.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/compat/nss_nis.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/local/lib/nss_nis.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/local/lib/compat/pkg/nss_nis.so.1",F_OK) ERR#2 'No such
file or directory'
25013: access("/usr/local/lib/perl5/5.24/mach/CORE/nss_nis.so.1",F_OK) ERR#2
'No such file or directory'
25013: access("/lib/casper/nss_nis.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/lib/nss_nis.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/nss_nis.so.1",F_OK) ERR#2 'No such file or
directory'
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: access("/lib/nss_files.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/nss_files.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/compat/nss_files.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/local/lib/nss_files.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/local/lib/compat/pkg/nss_files.so.1",F_OK) ERR#2 'No such
file or directory'
25013: access("/usr/local/lib/perl5/5.24/mach/CORE/nss_files.so.1",F_OK) ERR#2
'No such file or directory'
25013: access("/lib/casper/nss_files.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/lib/nss_files.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/nss_files.so.1",F_OK) ERR#2 'No such file or
directory'
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: access("/lib/nss_dns.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/nss_dns.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/compat/nss_dns.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/local/lib/nss_dns.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/local/lib/compat/pkg/nss_dns.so.1",F_OK) ERR#2 'No such
file or directory'
25013: access("/usr/local/lib/perl5/5.24/mach/CORE/nss_dns.so.1",F_OK) ERR#2
'No such file or directory'
25013: access("/lib/casper/nss_dns.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/lib/nss_dns.so.1",F_OK) ERR#2 'No such file or
directory'
25013: access("/usr/lib/nss_dns.so.1",F_OK) ERR#2 'No such file or
directory'
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: ioctl(5,TIOCGETA,0x7fffffffe260) ERR#25 'Inappropriate ioctl
for device'
25013: close(5) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: geteuid() = 0 (0x0)
25013: open("/etc/spwd.db",O_RDONLY|O_CLOEXEC,00) = 5 (0x5)
25013: fstat(5,{ mode=-rw------- ,inode=2487988,size=40960,blksize=32768 }) = 0
(0x0)
25013: read(5,"\0\^F\^Ua\0\0\0\^B\0\0\^D\M-R\0"...,260) = 260 (0x104)
25013: pread(0x5,0x800e5b000,0x1000,0x6000) = 4096 (0x1000)
25013: pread(0x5,0x800e5c000,0x1000,0x4000) = 4096 (0x1000)
25013: pread(0x5,0x800e5d000,0x1000,0x5000) = 4096 (0x1000)
25013: pread(0x5,0x800e5e000,0x1000,0x7000) = 4096 (0x1000)
25013: pread(0x5,0x800e5f000,0x1000,0x8000) = 4096 (0x1000)
25013: pread(0x5,0x800e60000,0x1000,0x1000) = 4096 (0x1000)
25013: pread(0x5,0x800e61000,0x1000,0x2000) = 4096 (0x1000)
25013: pread(0x5,0x800e62000,0x1000,0x3000) = 4096 (0x1000)
25013: close(5) = 0 (0x0)
25013: chroot("/var/empty") = 0 (0x0)
25013: chdir("/") = 0 (0x0)
25013: setgroups(0x1,0x800bc9384) = 0 (0x0)
25013: setresgid(0x3e,0x3e,0x3e) = 0 (0x0)
25013: setresuid(0x3e,0x3e,0x3e) = 0 (0x0)
25013: ioctl(0,FIONBIO,0x7fffffffe6bc) = 0 (0x0)
25013: setsockopt(0,IPPROTO_IP,IP_RECVDSTADDR,0x7fffffffe6bc,4) = 0 (0x0)
25013: getsockname(0,{ AF_INET 0.0.0.0:6969 },0x7fffffffe66c) = 0 (0x0)
25013: recvfrom(0,"\0\^Abios/pxelinux.cfg/44454c4c-"...,516,MSG_PEEK,{ AF_INET
169.154.148.88:49158 },0x7fffffffe66c) = 84 (0x54)
25013: recvmsg(0,0x7fffffffe680,0) = 84 (0x54)
25013: close(0) = 0 (0x0)
25013: close(1) = 0 (0x0)
25013: socket(PF_INET,SOCK_DGRAM,0) = 0 (0x0)
25013: bind(0,{ AF_INET 127.0.0.1:0 },16) = 0 (0x0)
25013: connect(0,{ AF_INET 169.154.148.88:49158 },16) = 0 (0x0)
25013: getsockname(0,{ AF_INET 127.0.0.1:35734 },0x7fffffffe66c) = 0 (0x0)
25013: ioctl(4,0xc04c4417 { IORW 0x44('D'), 23, 76 },0x7fffffffe5b0) ERR#2 'No
such file or directory'
25013: getpid() = 25013 (0x61b5)
25013: sendto(3,"<27>Dec 6 20:02:11 tftp-proxy[2"...,76,0,NULL,0) = 76 (0x4c)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: sigprocmask(SIG_BLOCK,{
SIGHUP|SIGINT|SIGQUIT|SIGKILL|SIGPIPE|SIGALRM|SIGTERM|SIGURG|SIGSTOP|SIGTSTP|SIGCONT|SIGCHLD|SIGTTIN|SIGTTOU|SIGIO|SIGXCPU|SIGXFSZ|SIGVTALRM|SIGPROF|SIGWINCH|SIGINFO|SIGUSR1|SIGUSR2
},{ }) = 0 (0x0)
25013: sigprocmask(SIG_SETMASK,{ },0x0) = 0 (0x0)
25013: exit(0x1)
25013: process exit, rval = 1
23643: wait4(-1,{ EXITED,val=1 },WNOHANG,0x0) = 25013 (0x61b5)
Dec 6 20:02:11 gw tftp-proxy[25013]: pf connection lookup failed (no rdr?)
Dec 6 20:02:11 gw inetd[23643]: /usr/libexec/tftp-proxy[25013]: exited, status
1
_______________________________________________
freebsd-pf@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"
