Re: Processes' FIBs

2012-01-12 Thread Julian Elischer
On 1/12/12 6:04 AM, Oliver Fromme wrote: Bjoern A. Zeeb wrote: > On 11. Jan 2012, at 15:06 , Oliver Fromme wrote: > > I'm currently looking at the source code of ps, but adding > > a field for the FIB isn't as trivial as I thought because > > ps only sees struct kinfo_proc (via sys

Re[2]: SCHED_ULE / NetGraph interaction broken somwhere between r227874 and r229818

2012-01-12 Thread Коньков Евгений
Здравствуйте, Lev. Вы писали 12 января 2012 г., 13:07:15: LS> Hello, Lev. LS> You wrote 12 января 2012 г., 15:00:20: >>> But what mav says makes sense. >> It is it -- stack size. Setting KSTACK_PAGES=6 fixes situation. LS> OOOPS. Not. After another 5 minutes ng_queue again consumes 100% CPU L

Re: Very fresh (two days ago) 10-current becomes completely unresponsive under load

2012-01-12 Thread Adrian Chadd
.. this is why someone needs to put together an automated testing framework to build, run, test and report on this. Then, the warehouse-sized space and cooling needed for a few hundred machines, all doing automated regression testing. That's how "a project" fixes this. :-) The alternative is peop

ICMP attacks against TCP and PMTUD

2012-01-12 Thread Nikolay Denev
Hello, A web server that I administer running Nginx and FreeBSD-7.3-STABLE was recently under a ICMP attack that generated a large amount of outgoing TCP traffic. With some tcpdump and netflow analysis it was evident that the attachers are using ICMP host-unreach need-frag messages to make the we

removing support for SIOCSIF{ADDR,NETMASK,BRDADDR,DSTADDR}

2012-01-12 Thread Gleb Smirnoff
Hello, networkers! I'd like to remove from kernel support for several really outdated ioctls: SIOCSIFADDR SIOCSIFNETMASK SIOCSIFBRDADDR SIOCSIFDSTADDR Actually their support was always only declared, you can trigger panics easily if you play with them. These ioctls were outdated eve

Re: Processes' FIBs

2012-01-12 Thread Oliver Fromme
Bjoern A. Zeeb wrote: > On 11. Jan 2012, at 15:06 , Oliver Fromme wrote: > > I'm currently looking at the source code of ps, but adding > > a field for the FIB isn't as trivial as I thought because > > ps only sees struct kinfo_proc (via sysctl kern.proc.*) > > which doesn't contain the FIB.

Re: [PATCH] Have netstat test for sctp kernel support

2012-01-12 Thread Michael Tuexen
On Oct 25, 2011, at 8:17 PM, Sean Mahood wrote: > Hello, > > I noticed that when doing a netstat -s (running on a kernel without SCTP > support compiled in), I get the following message output to stderr: > > netstat: sysctl: net.inet.sctp.stats: No such file or directory > > Wondering why it w

Re: SCHED_ULE / NetGraph interaction broken somwhere between r227874 and r229818

2012-01-12 Thread Lev Serebryakov
Hello, Lev. You wrote 12 января 2012 г., 15:00:20: >> But what mav says makes sense. > It is it -- stack size. Setting KSTACK_PAGES=6 fixes situation. OOOPS. Not. After another 5 minutes ng_queue again consumes 100% CPU :( -- // Black Lion AKA Lev Serebryakov ___

Re: SCHED_ULE / NetGraph interaction broken somwhere between r227874 and r229818

2012-01-12 Thread Lev Serebryakov
Hello, Andriy. You wrote 12 января 2012 г., 14:29:57: > But what mav says makes sense. It is it -- stack size. Setting KSTACK_PAGES=6 fixes situation. Feature request: warn user when ng_queue is used due to stack limitations :) I know from mav, that sometime it is unavoidable (with protocols

Re: SCHED_ULE / NetGraph interaction broken somwhere between r227874 and r229818

2012-01-12 Thread Lev Serebryakov
Hello, Andriy. You wrote 12 января 2012 г., 14:29:57: > Well, I mostly meant things like uptime, load level and pattern, etc. These are identical too -- freshly boot system, same load (torrent client on other box), only load -- traffic, as it is router, same upload/download speeds and peer cou

Re: SCHED_ULE / NetGraph interaction broken somwhere between r227874 and r229818

2012-01-12 Thread Andriy Gapon
on 12/01/2012 12:05 Lev Serebryakov said the following: > Hello, Andriy. > You wrote 12 января 2012 г., 13:54:41: > >>> Switching to 4BSD helps. 4BSD works as usual: all CPU time is >>> interrupts and network thread, system is responsive under heaviest load, >>> normal operations of DNS, DHCP a

Re: Filtering on IPSEC

2012-01-12 Thread VANHULLEBUS Yvan
Hi. On Wed, Jan 11, 2012 at 08:14:24PM -0600, David DeSimone wrote: > Alex Dupre wrote: > > > > I've setup my first IPSEC VPN beetween FreeBSD 8.2 and CheckPoint > > VPN-1. I've used a gif interface for the tunnel, setkey for security > > policies and racoon for ikev1. > > I've peered with Check

Re: SCHED_ULE / NetGraph interaction broken somwhere between r227874 and r229818

2012-01-12 Thread Andriy Gapon
on 12/01/2012 11:31 Lev Serebryakov said the following: > Switching to 4BSD helps. 4BSD works as usual: all CPU time is > interrupts and network thread, system is responsive under heaviest load, > normal operations of DNS, DHCP and hostapd. How reproducible is this result? In other words, have

Re: SCHED_ULE / NetGraph interaction broken somwhere between r227874 and r229818

2012-01-12 Thread Lev Serebryakov
Hello, Andriy. You wrote 12 января 2012 г., 13:54:41: >> Switching to 4BSD helps. 4BSD works as usual: all CPU time is >> interrupts and network thread, system is responsive under heaviest load, >> normal operations of DNS, DHCP and hostapd. > How reproducible is this result? 100% > In other

SCHED_ULE / NetGraph interaction broken somwhere between r227874 and r229818

2012-01-12 Thread Lev Serebryakov
Hello, Freebsd-current. I have router, which connects to upstream ISP with mpd5 from ports using PPPoE. I've used SCHED_ULE for long time without nay problems. Under heavy network load (router is not the fastest one -- 500Mhz Geode CPU) main consumer of CPU was "intr{swi1: netisr 0}" threa

Re: Filtering on IPSEC

2012-01-12 Thread Alex Dupre
Bjoern A. Zeeb ha scritto: If you are using tunnel mode and gif you'll have trouble; just use tunnel mode without gif and you'll be happy. Done, it works and I see all packets on enc0 now, thanks. It's because (our) pf cannot NAT on incoming but only on outgoing interfaces. And you need

Re: Very fresh (two days ago) 10-current becomes completely unresponsive under load

2012-01-12 Thread Lev Serebryakov
Hello, Lev. You wrote 12 января 2012 г., 0:33:32: > I'll try to find revision, which breaks ULE + NetGraph by binary > search, but it takes some time as here is 590 revisions in "head/sys" > between previous version I used (which works Ok with ULE) and current > version (which doesn't). So, it sh