Re: Processes' FIBs

2012-01-15 Thread Julian Elischer
On 1/13/12 4:27 AM, Kostik Belousov wrote: On Thu, Jan 12, 2012 at 10:44:51PM -0800, Julian Elischer wrote: On 1/12/12 6:04 AM, Oliver Fromme wrote: Bjoern A. Zeeb wrote: > On 11. Jan 2012, at 15:06 , Oliver Fromme wrote: > > I'm currently looking at the source code of ps, but adding

Re: kern/163370: [bpf] [request] enable zero-copy BPF by default

2012-01-15 Thread linimon
Old Synopsis: zero-copy BPF is disabled by default New Synopsis: [bpf] [request] enable zero-copy BPF by default Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: linimon Responsible-Changed-When: Mon Jan 16 01:32:37 UTC 2012 Responsible-Changed-Why: reclassify. http

Re: ICMP attacks against TCP and PMTUD

2012-01-15 Thread Nikolay Denev
On 15.01.2012, at 21:35, Andrey Zonov wrote: > This helped me: > /boot/loader.conf > net.inet.tcp.hostcache.hashsizee536 > net.inet.tcp.hostcache.cachelimit66080 > > Actually, this is a workaround. As I remember, real problem is in > tcp_ctlinput(), it could not update MTU for destination IP if

Re: ICMP attacks against TCP and PMTUD

2012-01-15 Thread Andrey Zonov
This helped me: /boot/loader.conf net.inet.tcp.hostcache.hashsize=65536 net.inet.tcp.hostcache.cachelimit=1966080 Actually, this is a workaround. As I remember, real problem is in tcp_ctlinput(), it could not update MTU for destination IP if hostcache allocation fails. tcp_hc_updatemtu() shou

em loses link after IPMI reset

2012-01-15 Thread Andrey Zonov
Hi, I have a few boxes with Intel 82574L NIC that run under 8.2-STABLE. After execution `ipmitool mc reset cold' NIC loses link and after negotiation it sets 100TX media type (normal is 1000T). Under Linux on the same box this problem doesn't occur, after BMC reset driver doesn't lose link.

Re: ICMP attacks against TCP and PMTUD

2012-01-15 Thread Nikolay Denev
On Jan 15, 2012, at 8:27 PM, Andrey Zonov wrote: > Hi, > > Could you please show the output of `vmstat -z | grep hostcache'? > > On 12.01.2012 21:55, Nikolay Denev wrote: >> Hello, >> >> A web server that I administer running Nginx and FreeBSD-7.3-STABLE was >> recently >> under a ICMP attack

Re: ICMP attacks against TCP and PMTUD

2012-01-15 Thread Andrey Zonov
Hi, Could you please show the output of `vmstat -z | grep hostcache'? On 12.01.2012 21:55, Nikolay Denev wrote: Hello, A web server that I administer running Nginx and FreeBSD-7.3-STABLE was recently under a ICMP attack that generated a large amount of outgoing TCP traffic. With some tcpdump a