rarpd

2013-04-05 Thread Joe Holden
Hi guys, I'm trying to make rarpd behave, but it doesn't seem to want to listen on vlan interfaces, or at least not mine: The machine is a router with two interaces: vr0 - routable ip address that pf performs nat on vr1 - several vlan interfaces of which I want rarpd to listen on one, vr1.9

Re: close(2) while accept(2) is blocked

2013-04-05 Thread Jilles Tjoelker
On Thu, Apr 04, 2013 at 08:43:17PM +0300, Andriy Gapon wrote: > on 01/04/2013 18:22 John Baldwin said the following: > > I think you need to split the 'struct file' reference count into two > > different counts similar to the how we have vref/vrele vs > > vhold/vdrop for vnodes. The fget for accep

Re: panic in tcp_do_segment()

2013-04-05 Thread Juan Mojica
Agree with Matt. Whenever there is an UNLOCK/LOCK like is present in soclose(), there is a window to allow something through. Unsetting SO_ACCEPTCONN was put in place because the LOCK/UNLOCK in soclose let a new socket to be added to the so_incomp list causing a different ASSERT to be hit - and m

Re: panic in tcp_do_segment()

2013-04-05 Thread Matt Miller
Hey Rick, I believe Juan and I have root caused this crash recently. The t_state = 0x1, TCPS_LISTEN, in the link provided at the time of the assertion. In tcp_input(), if we're in TCPS_LISTEN, SO_ACCEPTCONN should be set on the socket and we should never enter tcp_do_segment() for this state. I

Re: panic in tcp_do_segment()

2013-04-05 Thread Andre Oppermann
On 05.04.2013 00:33, Rick Macklem wrote: Hi, When pho@ was doing some NFS testing, he got the following crash, which I can't figure out. (As far as I can see, INP_WLOCK() is always held when tp->t_state = TCPS_CLOSED and it is held from before the test for TCPS_CLOSED in tcp_input() up until the

Re: Syncookies break with Windows 8

2013-04-05 Thread Andre Oppermann
On 04.04.2013 23:52, Kevin Day wrote: On Feb 1, 2013, at 5:09 PM, Andre Oppermann wrote: I'm working on a solution. Have to make sure that the chance to crack a reduced cookie during its 30 seconds lifetime isn't too high. That means involving our resident crypto experts for verification.