Re: src address issue

2010-10-13 Thread Dmitriy Zamuraev
you  use  default  route  from  R.E.A.L  IP, configure static route to
network/host 10.11.19.1 via you 10.11.8.X gate.

> Why with configured ip addresses
> fastvpn# ifconfig sis0
> sis0: flags=8843 metric 0 mtu 1500
> options=82008
> ether 00:0b:6a:a6:0c:f0
> inet 10.11.8.18 netmask 0xff00 broadcast 10.11.8.255
> inet6 fe80::20b:6aff:fea6:cf0%sis0 prefixlen 64 scopeid 0x1
> inet R.E.A.L netmask 0xfffc broadcast XX.XX.XX.XX
> nd6 options=29
> media: Ethernet autoselect (100baseTX )
> status: active

> on other machine I got:
> kes# tcpdump -n -i rl0 port 1812
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on rl0, link-type EN10MB (Ethernet), capture size 96 bytes
> 22:12:02.309034 IP R.E.A.L.19280 > 10.11.19.1.1812: RADIUS, Access Request 
> (1), id: 0x38 length: 271
> ^C

> How to stick mpd5 on fastvpn to send ip from 10.11.8.18 and not from R.E.A.L?

> PS. This seem not mpd problem, this is kernel issue, I think.

___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: help tune

2010-10-13 Thread Dmitriy Zamuraev
> Help me pls, to tune those drops.
Clear _ALL_ tuning, use kernel-config-option
maxusers 512

NOTE:  kern.maxusers  in  /boot/loader.conf  may not been used on some
releases, but in newer releases must to be.


> I do this tuning:
> /etc/sysctl.conf
> hw.pci.enable_msix=1
> hw.pci.enable_msi=1
> kern.ipc.nmbclusters=262144
> kern.ipc.shmall=65536
> kern.ipc.shmmax=268435456
> kern.ipc.somaxconn=4096
> kern.ipc.semmap=512
> kern.maxfiles=204800
> kern.maxfilesperproc=20
> kern.ipc.maxsockets=262144
> kern.coredump=1
> net.graph.maxdgram=128000
> net.graph.recvspace=128000
> ddb.panic=5

> /boot/loader.conf
> kern.ipc.nmbclusters=262144
> kern.ipc.maxsockets=262144
> net.graph.maxalloc=2048
> kern.maxusers=1024
> kern.ipc.maxpipekva=268435456
> kern.maxfiles=204800
> net.graph.maxdata=2048
> kern.maxfilesperproc=20
> kern.ipc.maxsockbuf=524288

___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: [panic] Kernel corruption of pppoe lists

2009-09-04 Thread Dmitriy Zamuraev

I have same problem, and we are not alone.
See http://www.freebsd.org/cgi/query-pr.cgi?pr=137881
(PR: kern/137881)
You may append to this PR.

- Original Message - 
From: "Mel Flynn" 

To: 
Cc: 
Sent: Friday, September 04, 2009 3:39 PM
Subject: [panic] Kernel corruption of pppoe lists



Description:
I realize the kernel is a bit old, but it also very hard to reproduce. 
Kernel
was up 56 days and this crash happened shortly after a very long connect 
time,
hangup by ISP and some renegotiation issues. I can provide the ppp.log of 
the

incident if needed.

What bothers me is the contents of the session list element, preceding the 
element
cannot be accessed. Clearly, there is random kernel memory present there, 
judging

from ether_dhost and ether_shost.

#7  0xc06cd0a0 in pppoe_findsession (privp=0xc4258000, wh=Variable "wh" is 
not available.

)
   at /data/RELENG_7/src/sys/netgraph/ng_pppoe.c:567
#8  0xc06ce1a0 in ng_pppoe_rcvdata_ether (hook=0xc41b6380, 
item=0xc4256120)

   at /data/RELENG_7/src/sys/netgraph/ng_pppoe.c:1612


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: pf & tcpdump

2009-11-13 Thread Dmitriy Zamuraev
Is there a way to have tcpdump only showing packed that have pass the 
filtering rules, so to check that firewall rules were correctly written 
and not letting unwanted packets in.



use pflog(4) device
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


bsnmpd HighCounters on if_lagg

2009-11-16 Thread Dmitriy Zamuraev
I have BRAS based on FreeBSD 7.2 and mpd 5.3 and three NIC's grouped into 
if_lagg with LACP,
I need to monitor bandwidth with bsnmpd and cacti, by default lagg interface 
baud rate is 10Mbitps,
so bsnmpd can't collect Counter64 on this interface.

I'm modify if_lagg.c file:
function lagg_link_state():
u_long new_baudrate;
SLIST_FORAECH(lp, &sc_ports, lp_entries)
if (lp->lp_link_state == LINK_STATE_UP)
new_baudrate += lp->lp_ifp->if_baudrate;
sc->sc_ifp->if_baudrate = new_baudrate;

So, bsnmpd shows ifHighSpeed and ifHC(In|Out)Octets. I'm happy.

Also i have if_vlan interfaces over the if_lagg, and vlan interfaces have baud 
rate 10Mbitps too.
I don't need Counter64 functionality on vlan interfaces, but i think develop 
this functionality is difficult.

Please, tell me who needs this functionality.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: ng_patch node

2010-01-11 Thread Dmitriy Zamuraev

Hi,
I've written netgraph node able to modify arbitrary (8|16|32)-bit
unsigned integer in passing packets. Node applies one of =,+,-,&,| and
^ operations to number at given offset.


Thank you.
I think about more functionality...
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: Sending packets at Kernel level

2010-08-30 Thread Dmitriy Zamuraev
Maybe ng_source(4) can help you.

> I need to know how to send packet from the kernel level. Can someone please
> point me to any documentation?

___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: how to use freebsd8 dial the adsl for shuffering?

2010-09-10 Thread Dmitriy Zamuraev
> set device PPPoE:fx0

is this correct ? maybe fxp0

___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"


Re: em driver input errors

2009-08-20 Thread Dmitriy Zamuraev

Hello Alex,


SCHED_ULE, HZ=1000:

I use this too


> From the output of "netstat -nI em0 -w 5":
maybe mistake, did you meen "netstat -w5 em0" ?
Nope, exactly as in my mail, "netstat -nI em0 -w 5".  It does take 5 
seconds to produce meaningful output.

hmm, just comments:
-nShow network addresses and ports as numbers.
-lShows listen sockets
-nl with -w is wrong parameters.


I have PPPoE concenrator based on S3000AHV motherboard with
Core2Quad 6600 and four (to load all cores in CPU) Intel
PCI-E x1 and PCI-E x4 NIC's
My load:
...
Pretty impressive figures.  And "netstat -ni" shows 0 errors on all cards?

Not exactly zero, but for uptime 155 days it seems to be ok.
bras1 [/usr/home/dm]# netstat -i|grep em
em01500   00:15:17:71:f8:52 2457503820 20175 2096211799 
0 0
em11500   00:15:17:71:f8:52 1084492221 11188 909418060 0 
0
em21500   00:15:17:71:f8:52 4212941427 29566 3500442287 
0 0
em31500   00:15:17:71:f8:52 2143321197 0 1878792786 
0 0
This counters was made by UDP flood, when dummynet can't process all packets 
and
swi:net loads one core up to 100%. Yes, the dummynet on this machine, its 
bad idea but it's
working stable. (After this incident the switches now control the flood 
attack)
NOTE: the MAC is equal because i use if_lagg(4) for this interfaces for load 
all cores in CPU


I think it depends by motherbord, what full hardware specification are 
you using? with chips names
The machine is a Dell PowerEdge 2850.  According to its specs, the chipset 
is Intel E7520.

Two 64-bit Xeon processors at 3.20GHz, 4 GB RAM.

For you bandwidth this server must work fine.
Check the UDP/ICMP or other flood on em0 when errors appear.
What kind of device at the end of em0 copper cable?
If this a manageable switch, and supports tools - try to investigate what 
happens when errors appear.


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"