In effort to troubleshoot an increase in LCP keepalive timeouts have gone
ahead & placed the APU’s PPPoE interface in debug mode
At this point it appears that for a approximately 60 seconds this morning no
lcp echo req were received & a LCP keepalive timeout occurred shortly there
after.
In addition have gone ahead & updated PF with the following changes to
facilitate Path MTU Discovery with the intention of improving stability.
# Pass all inbound ICMP echo requests specifically destination unreachable.
icmp_types = "{ echoreq, unreach }"
pass in log quick on egress inet proto icmp all icmp-type $icmp_types keep
state
#Enforces a maximum Maximum Segment Size on outgoing pppoe0 traffic only.
"match out on pppoe0 scrub (max-mss 1440)”
#Do not Normalize DF and Identification packets
“Remove match in all scrub (no-df random-id)”
Based on a review the pf log it appears that very little if no PMTU traffic
was received in the last 24 hours.
Please see below for more info:
Jan 2 04:25:36 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:25:36 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xf7 len=8
b8-aa-92-51>
Jan 2 04:25:36 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:25:50 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:25:51 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0xf8
len=8
01-db-49-90-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:25:51 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:25:51 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xf8 len=8
b8-aa-92-51>
Jan 2 04:25:51 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:26:06 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0xf9
len=8
01-db-49-90-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:26:06 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:26:06 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xf9 len=8
b8-aa-92-51>
Jan 2 04:26:06 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:26:18 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:26:21 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0xfa
len=8
01-db-49-90-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:26:21 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:26:21 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xfa len=8
b8-aa-92-51>
Jan 2 04:26:21 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:26:36 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0xfb
len=8
01-db-49-90-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:26:36 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:26:36 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xfb len=8
b8-aa-92-51>
Jan 2 04:26:36 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:26:46 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:26:51 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0xfc
len=8
01-db-49-90-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:26:51 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:26:51 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xfc len=8
b8-aa-92-51>
Jan 2 04:26:51 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:27:06 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0xfd
len=8
01-db-49-90-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:27:06 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:27:06 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xfd len=8
b8-aa-92-51>
Jan 2 04:27:06 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:27:14 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:27:18 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=72
Jan 2 04:27:18 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=72
Jan 2 04:27:18 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=60
Jan 2 04:27:18 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=253
Jan 2 04:27:18 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=60
Jan 2 04:27:18 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=60
Jan 2 04:27:21 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0xfe
len=8
01-db-49-90-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:27:21 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:27:21 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xfe len=8
b8-aa-92-51>
Jan 2 04:27:21 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:27:36 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0xff
len=8
01-db-49-90-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:27:36 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:27:36 Firewall /bsd: pppoe0: lcp output <echo-reply id=0xff len=8
b8-aa-92-51>
Jan 2 04:27:36 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:27:39 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=134
Jan 2 04:27:39 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=60
Jan 2 04:27:41 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=85
Jan 2 04:27:41 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:27:42 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:28:05 Firewall /bsd: pppoe0: lcp output <echo-req id=0x4a len=8
b8-aa-92-51>
Jan 2 04:28:05 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:28:11 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:28:15 Firewall /bsd: pppoe0: lcp output <echo-req id=0x4b len=8
b8-aa-92-51>
Jan 2 04:28:15 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:28:25 Firewall /bsd: pppoe0: lcp output <echo-req id=0x4c len=8
b8-aa-92-51>
Jan 2 04:28:25 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:28:26 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:28:26 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:28:27 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:28:29 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:28:29 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:28:30 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:28:33 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:28:35 Firewall /bsd: pppoe0: LCP keepalive timeout
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp close(opened)
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp opened->closing
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp output <term-req id=0x4d len=4>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=12
Jan 2 04:28:35 Firewall /bsd: pppoe0: phase terminate
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp down(opened)
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp opened->starting
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp close(starting)
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp starting->initial
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp closing->stopped
Jan 2 04:28:35 Firewall /bsd: pppoe0: timeout
Jan 2 04:28:35 Firewall /bsd: pppoe0: disconnecting
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp down(stopped)
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp stopped->starting
Jan 2 04:28:35 Firewall /bsd: pppoe0: phase establish
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8863) state=1, session=0x0 output ->
ff:ff:ff:ff:ff:ff, len=18
Jan 2 04:28:35 Firewall /bsd: pppoe0: Down event (carrier loss), taking
interface down.<7>pppoe0: lcp close(starting)
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp starting->initial
Jan 2 04:28:35 Firewall /bsd: pppoe0: phase dead
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8863) state=2, session=0x0 output ->
3c:8a:b0:cd:ee:72, len=38
Jan 2 04:28:35 Firewall /bsd: pppoe0: session 0x15d2 connected
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp open(initial)
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp initial->starting
Jan 2 04:28:35 Firewall /bsd: pppoe0: phase establish
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp up(starting)
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp starting->req-sent
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp output <conf-req id=0x4e len=14
05-06-5d-e7-43-de-01-04-05-d4>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=22
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp input(req-sent): <conf-req id=0xd6
len=19
01-04-05-d4-03-05-c2-23-05-05-06-59-6a-91-0f-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp parse opts: mru auth-proto magic
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp parse opt values: mru 1492
auth-proto magic 0x596a910f send conf-ack
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp output <conf-ack id=0xd6 len=19
01-04-05-d4-03-05-c2-23-05-05-06-59-6a-91-0f>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=27
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp req-sent->ack-sent
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp input(ack-sent): <conf-ack id=0x4e
len=14
05-06-5d-e7-43-de-01-04-05-d4-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp ack-sent->opened
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp tlu
Jan 2 04:28:35 Firewall /bsd: pppoe0: up
Jan 2 04:28:35 Firewall /bsd: pppoe0: phase authenticate
Jan 2 04:28:35 Firewall /bsd: pppoe0: chap input <challenge
id=##########################################################################
######################################>
Jan 2 04:28:35 Firewall /bsd: pppoe0: chap output
<############################################################################
##############################################>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=52
Jan 2 04:28:35 Firewall /bsd: pppoe0: chap success
Jan 2 04:28:35 Firewall /bsd: pppoe0: phase network
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp open(initial)
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp initial->starting
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipv6cp open(closed)
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipv6cp closed->req-sent
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipv6cp output <conf-req id=0x4f len=14
01-0a-02-0d-b9-ff-fe-3b-db-30>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=22
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp up(starting)
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp starting->req-sent
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp output <conf-req id=0x50 len=10
03-06-00-00-00-00>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=18
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp input(opened): <proto-rej id=0xd7
len=20
80-57-01-4f-00-0e-01-0a-02-0d-b9-ff-fe-3b-db-30-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp: RXJ+ (proto-rej) for proto 0x8057
(ipv6cp/req-sent)
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipv6cp close(req-sent)
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipv6cp output <term-req id=0x51 len=4>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=12
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipv6cp req-sent->closing
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp input(req-sent): <conf-nak id=0x50
len=10
03-06-ae-14-08-41-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp nak opts: address [wantaddr
174.20.8.65] [agree]
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp output <conf-req id=0x52 len=10
03-06-ae-14-08-41>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=18
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp input(req-sent): <conf-req id=0x1f
len=10
03-06-cf-6d-02-0f-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp parse opts: address
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp parse opt values: address
207.109.2.15 [ack] send conf-ack
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp output <conf-ack id=0x1f len=10
03-06-cf-6d-02-0f>
Jan 2 04:28:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=18
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp req-sent->ack-sent
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp input(opened): <proto-rej id=0xd8
len=10
80-57-05-51-00-04-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:35 Firewall /bsd: pppoe0: lcp: RXJ+ (proto-rej) for proto 0x8057
(ipv6cp/closing)
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp input(ack-sent): <conf-ack id=0x52
len=10
03-06-ae-14-08-41-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp ack-sent->opened
Jan 2 04:28:35 Firewall /bsd: pppoe0: ipcp tlu
Jan 2 04:28:36 Firewall /bsd: pppoe0: ipv6cp TO(closing) rst_counter = 2
Jan 2 04:28:36 Firewall /bsd: pppoe0: ipv6cp output <term-req id=0x53 len=4>
Jan 2 04:28:36 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=12
Jan 2 04:28:36 Firewall /bsd: pppoe0: lcp input(opened): <proto-rej id=0xd9
len=10
80-57-05-53-00-04-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:36 Firewall /bsd: pppoe0: lcp: RXJ+ (proto-rej) for proto 0x8057
(ipv6cp/closing)
Jan 2 04:28:36 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:28:39 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:28:39 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:28:41 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:28:45 Firewall /bsd: pppoe0: ipv6cp TO(closing) rst_counter = 1
Jan 2 04:28:45 Firewall /bsd: pppoe0: ipv6cp output <term-req id=0x54 len=4>
Jan 2 04:28:45 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=12
Jan 2 04:28:45 Firewall /bsd: pppoe0: lcp input(opened): <proto-rej id=0xda
len=10
80-57-05-54-00-04-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:45 Firewall /bsd: pppoe0: lcp: RXJ+ (proto-rej) for proto 0x8057
(ipv6cp/closing)
Jan 2 04:28:50 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0x0
len=8
59-6a-91-0f-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:28:50 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:28:50 Firewall /bsd: pppoe0: lcp output <echo-reply id=0x0 len=8
5d-e7-43-de>
Jan 2 04:28:50 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:28:51 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:28:55 Firewall /bsd: pppoe0: ipv6cp TO(closing) rst_counter = 0
Jan 2 04:28:55 Firewall /bsd: pppoe0: ipv6cp closing->closed
Jan 2 04:28:57 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:28:57 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:29:05 Firewall /bsd: pppoe0: lcp output <echo-req id=0x55 len=8
5d-e7-43-de>
Jan 2 04:29:05 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:29:05 Firewall /bsd: pppoe0: lcp input(opened): <echo-reply id=0x55
len=8
59-6a-91-0f-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:29:05 Firewall /bsd: pppoe0: lcp got echo rep
Jan 2 04:29:05 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0x1
len=8
59-6a-91-0f-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:29:05 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:29:05 Firewall /bsd: pppoe0: lcp output <echo-reply id=0x1 len=8
5d-e7-43-de>
Jan 2 04:29:05 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:29:07 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:29:20 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0x2
len=8
59-6a-91-0f-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
Jan 2 04:29:20 Firewall /bsd: pppoe0: got lcp echo req, sending echo rep
Jan 2 04:29:20 Firewall /bsd: pppoe0: lcp output <echo-reply id=0x2 len=8
5d-e7-43-de>
Jan 2 04:29:20 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=16
Jan 2 04:29:21 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:29:28 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:29:33 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=75
Jan 2 04:29:33 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=72
Jan 2 04:29:33 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:29:33 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=565
Jan 2 04:29:33 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:29:33 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:29:34 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=214
Jan 2 04:29:34 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=48
Jan 2 04:29:34 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=60
Jan 2 04:29:34 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=586
Jan 2 04:29:35 Firewall /bsd: pppoe0 (8864) state=3, session=0x15d2 output ->
3c:8a:b0:cd:ee:72, len=92
Jan 2 04:29:35 Firewall /bsd: pppoe0: lcp input(opened): <echo-req id=0x3
len=8
59-6a-91-0f-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
-00-00-00-00-00-00-00-00>
> On Dec 31, 2016, at 2:57 PM, Stuart Henderson <s...@spacehopper.org> wrote:
>
> On 2016-12-15, Tom <bul...@posteo.net> wrote:
>>> Thanks. I was wondering about a bug with LCP echoes I accidentally
>>> introduced that made it into 5.9 (fixed for 6.0).
>> could you please point me to the changes you are talking about here.
>> I started using pppoe in 5.9 and the LCP-echo gave me a hard time. I
>> frequently told my ISP (Deutsche Telekom) to drop the line because I
>> was hitting the MAXALIVECNT value in if_spppsubr.
>
> We sent our own LCP echo requests, but the bug stopped this from working,
> so would have caused timeouts depending on how often user data was seen and
> the ISP's echo req timer. This was the fix:
>
> Index: if_spppsubr.c
> ===================================================================
> RCS file: /cvs/src/sys/net/if_spppsubr.c,v
> retrieving revision 1.150
> retrieving revision 1.151
> diff -u -p -r1.150 -r1.151
> --- if_spppsubr.c 18 Apr 2016 14:38:09 -0000 1.150
> +++ if_spppsubr.c 1 May 2016 14:08:39 -0000 1.151
> @@ -4094,7 +4094,7 @@ sppp_keepalive(void *dummy)
> }
> if (sp->pp_alivecnt < MAXALIVECNT)
> ++sp->pp_alivecnt;
> - else if (sp->pp_phase >= PHASE_AUTHENTICATE) {
> + if (sp->pp_phase >= PHASE_AUTHENTICATE) {
> u_int32_t nmagic = htonl(sp->lcp.magic);
> sp->lcp.echoid = ++sp->pp_seq;
> sppp_cp_send (sp, PPP_LCP, ECHO_REQ,
>
>> as I was in the "lucky" situation that nobody was penetrating me on
>> ports like ssh, telnet or smtp from outside. I made a modification to
>> send 'sp->pp_alivecnt' to syslog anytime it was changed in addition to
>> packet capturing. It turned out that my ISP sends LCP-keepalives in a
>> 45s interval and not every 15s. This means I might eventually get my
>> first LCP-echo from the provider when pppoe is already timing out. I
>> would be glad though if there was a way to address this problem without
>> a custum kernel.
>
> I think 6.0 should fix this for you.
