Re: Kernel panic on FreeBSD 9.0-beta2

2011-09-28 Thread Adrian Chadd
.. so now there's a patch: * is there a PR for this? * if there is, can we get this patch and the discussion about this bug placed in the PR? :) That way it doesn't get lost. No, I lie. It doesn't get "too lost". :-) Adrian ___ freebsd-net@freebsd.or

Re: Kernel panic on FreeBSD 9.0-beta2

2011-09-28 Thread dave jones
2011/9/29 Mikolaj Golub : > > On Mon, 26 Sep 2011 16:12:55 +0200 K. Macy wrote: > >  KM> Sorry, didn't look at the images (limited bw), I've seen something >  KM> like this before in timewait. This "can't happen" with UDP so will be >  KM> interested in learning more about the bug. > > The panic ca

Re: Kernel panic on FreeBSD 9.0-beta2

2011-09-28 Thread Mikolaj Golub
On Mon, 26 Sep 2011 16:12:55 +0200 K. Macy wrote: KM> Sorry, didn't look at the images (limited bw), I've seen something KM> like this before in timewait. This "can't happen" with UDP so will be KM> interested in learning more about the bug. The panic can be easily triggered by this: test_

Re: How to protect RIPng or OSPFv3 with IPsec ?

2011-09-28 Thread VANHULLEBUS Yvan
On Wed, Sep 28, 2011 at 11:09:46AM +0200, Olivier Cochard-Labb wrote: > Hi Yvan, > > 2011/9/28 VANHULLEBUS Yvan : > > > >> I'm trying to protect RIPng and OSPFv3 (I'm using Quagga and Bird), > >> but I didn't know how to manage multicast traffic with setkey. > > > > You can't: IPsec has NOT be des

Re: How to protect RIPng or OSPFv3 with IPsec ?

2011-09-28 Thread Olivier Cochard-Labbé
Hi Yvan, 2011/9/28 VANHULLEBUS Yvan : > >> I'm trying to protect RIPng and OSPFv3 (I'm using Quagga and Bird), >> but I didn't know how to manage multicast traffic with setkey. > > You can't: IPsec has NOT be designed to protect multicast traffic > (well, there are actually at least some drafts in

Re: How to protect RIPng or OSPFv3 with IPsec ?

2011-09-28 Thread VANHULLEBUS Yvan
On Tue, Sep 27, 2011 at 10:26:32PM +0200, Olivier Cochard-Labb wrote: > Hi, Hi. > I'm trying to protect RIPng and OSPFv3 (I'm using Quagga and Bird), > but I didn't know how to manage multicast traffic with setkey. You can't: IPsec has NOT be designed to protect multicast traffic (well, there a