Re: NATD, or another one I haven't seen before

2002-01-21 Thread Barry Irwin

I dont think this is neccesarily a new source code related bug.  During the
CodeRed / CodeRedII sagas of last year I had a number of NATD's lock up
On a range of boxes from 4.3 right to 4.0, they exhibited a massive growth
in memory usage 30MB+ and CPU time.  Packets were getting handled, but ere
taking forever, I was getting ping times on the order of 400 seconds.

This also occured on network segments in 4 different continents.  Again a
pile of arp traffic was seen on the external side of the firewalls.  My
initial response was that state table swere filling up because of all the
incomplete connections, but tests with synfloods by muself were unable to
duplicate the problem.

Barry


--
Barry Irwin [EMAIL PROTECTED]  +27214875150
Systems Administrator: Networks And Security
Itouch Labs http://www.itouchlabs.com   South Africa

On Mon 2002-01-21 (11:48), Robert D. Hughes wrote:
> 
> CVSUP from 1/16, running natd with command /sbin/natd -config /etc/natd.conf -n dc0. 
>Config file is:
> 
> log_denied
> log_facility security
> use_sockets
> same_ports 
> unregistered_only
> redirect_port tcp x.x.x.x:80 x.x.x.x:80
> redirect_port tcp x.x.x.x:443 x.x.x.x:443
> redirect_port tcp x.x.x.x:8880 x.x.x.x:8880
> redirect_port tcp x.x.x.x:2953 x.x.x.x:2953
> redirect_port tcp x.x.x.x:2954 x.x.x.x:2954
> dynamic
> punch_fw 1:1000
> 
> I'm going to try removing the log options and see if it improves. but since this is 
>a new issue with the recent cvs build, I did want to send out a query.
> 
> What I'm seeing is natd going to well over 90% cpu on this box, which has never 
>happened before to the best of my knowledge. What tcpdump is showing my is very large 
>amounts of arp traffic on the external interface from a large part of the 12.237/16 
>network (yeah, I know, lame provider). Has anyone else been running into similar 
>issues?
> 
> "Great spirits have always encountered violent opposition from mediocre minds." -- 
>Albert Einstein 
> 
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-stable" in the body of the message
> 
> 


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message



Re: Problex with Matrox G450 and XFree86 4.3.0 on 4.8-STABLE

2003-06-09 Thread Barry Irwin
Hi All

Just to confirm that I now have the Matrox G450 Dual head up and running,
just with no DRI on the second head, no real loss.  As was pointed out part
of the problem was some sillyness on my part, loading the agp.ko module, and
having it compiled into kernel.  Once that was fixed, XF86Config needed some
small tweeks, and then all started working.

Barry


-- 
Barry Irwin [EMAIL PROTECTED]Tel:
+27214875178
Systems Administrator: Networks And Security
iTouch Technology
iTouch TAS  http://www.itouchlabs.com Mobile: +27824457210


- Original Message - 
From: "Vladislav V. Zhuk" <[EMAIL PROTECTED]>
To: "Eric Anholt" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, May 22, 2003 10:45 AM
Subject: Re: Problex with Matrox G450 and XFree86 4.3.0 on 4.8-STABLE


> On Sun, May 11, 2003 at 12:27:48AM -0700, Eric Anholt wrote:
>
> [ ... ]
>
> > > Markers: (--) probed, (**) from config file, (==) default setting,
> > >  (++) from command line, (!!) notice, (II) informational,
> > >  (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
> > > (==) Log file: "/var/log/XFree86.0.log", Time: Thu May  8 14:36:26
2003
> > > (==) Using config file: "/etc/X11/XF86Config"
> > > (EE) MGA: Failed to load module "mga_hal" (module does not exist, 0)
> > > (EE) MGA: Failed to load module "mga_hal" (module does not exist, 0)
> > > (EE) MGA(1): Not initializing the DRI on the second head
> > >
> > > I cant find any reference to the mga_hal module.  I know that
Previously I
> > > needed to build the X Server with GXX_MATROX enable to use the matrox
> > > supplied HAL driver.
> >
> > The hal module is not needed for the DRI, generally.  I don't completely
> > understand how the DRI works with multihead Matrox.  I think you're
> > supposed to be able to do accelerated DRI on both heads with the mga_hal
> > module with one of the driver options, but I have never tested it.
>
> how to add mga_hal module to XFree 4.3 ?
> On the www.matrox.com I found driver only for linux and XFree 4.21 and
below.
> Is this binary library (.../4.2.1/drivers/src/HALlib/mgaHALlib.a) from
Matrox
> good for XFree 4.3 under FreeBSD 4.8S ??
>
> PS: I have G400.
> agp and mga kernel modules loaded without problem.
> I have only one problem:
> (EE) MGA: Failed to load module "mga_hal" (module does not exist, 0)
>
> Thanx for help.
>
> --
> Vladislav V. Zhuk (06267)3-60-03  [EMAIL PROTECTED]  2:465/[EMAIL PROTECTED]
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
>
>


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Problex with Matrox G450 and XFree86 4.3.0 on 4.8-STABLE

2003-06-09 Thread Barry Irwin
Basically to have two desktops.  The Card I have ahs two VGA outputs, rather
than the VGA and TV out combo that some have.  Really its a nice to have,
usually I keep web browsers and the like on one head, and xterms on the
other.

Barry


-- 
Barry Irwin [EMAIL PROTECTED]Tel:
+27214875178
Systems Administrator: Networks And Security
iTouch Technology
iTouch TAS  http://www.itouchlabs.com Mobile: +27824457210


- Original Message - 
From: "Adam" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, June 09, 2003 5:22 PM
Subject: Re: Problex with Matrox G450 and XFree86 4.3.0 on 4.8-STABLE


> On Mon, 2003-06-09 at 11:05, Barry Irwin wrote:
> > Just to confirm that I now have the Matrox G450 Dual head up and
running,
> > just with no DRI on the second head, no real loss.  As was pointed out
part
> > of the problem was some sillyness on my part, loading the agp.ko module,
and
> > having it compiled into kernel.  Once that was fixed, XF86Config needed
some
> > small tweeks, and then all started working.
>
> What are you using the second head for? I've been wanting to set mine up
to play movies on my TV from the 2nd head, but never got it working (after
several attempts).
>
>
> -- 
> Adam <[EMAIL PROTECTED]>
>
> ___
> [EMAIL PROTECTED] mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-stable
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"
>
>
>


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "[EMAIL PROTECTED]"