Re: NAT Taversal bug in kernel patch ?

2007-01-02 Thread ashoke saha
not new. 6/7 months old. Also, quite sometime back 1 yr looked like there are issues in PFKEY interface in scalibility . if you create more than 300 ipsecpolicy and ipsec SA's PFKEY used to fail as kernel was using one mbuf cluster (2K or 4k dont remmember) for each policy or SA. That way i

RE: [Fwd: Re: bge Ierr rate increase from 5.3R -> 6.1R]

2007-01-02 Thread Bruce Evans
On Tue, 2 Jan 2007, David Christensen wrote: These happen under loads that can't be handled, and generally cause thousands of input errors every second. The hardware records dropped packets separately from other input errors, but unfortunately all types of input errors are counted together in i

RE: [Fwd: Re: bge Ierr rate increase from 5.3R -> 6.1R]

2007-01-02 Thread David Christensen
> These happen under loads that can't be handled, and generally cause > thousands of input errors every second. The hardware records dropped > packets separately from other input errors, but unfortunately > all types > of input errors are counted together in if_ierrors, and I haven't done > more

Re: NAT Taversal bug in kernel patch ?

2007-01-02 Thread VANHULLEBUS Yvan
On Tue, Jan 02, 2007 at 02:59:59AM -0800, ashoke saha wrote: > Hi , Hi. > just joined the mailibng list. I was implementing > NAT traversal based on the patch and my kernel was > panicking because of wrong ipsec config, which it > should not whatever be the config. > > Looks like there is a s

Re: wpi results

2007-01-02 Thread Rene Ladan
Gavin Atkinson schreef: > On Mon, 1 Jan 2007, Rene Ladan wrote: > >> I build the wpi driver (version 20061109) on 7.0 CURRENT (20061229). It >> works fine, but it hangs my laptop after 'a while'. The only thing that >> keeps working is escaping to ddb. The laptop has the 4222 version of >> the

NAT Taversal bug in kernel patch ?

2007-01-02 Thread ashoke saha
Hi , just joined the mailibng list. I was implementing NAT traversal based on the patch and my kernel was panicking because of wrong ipsec config, which it should not whatever be the config. Looks like there is a small issue in the code http://ipsec-tools.sourceforge.net/freebsd6-natt.diff whi