RE: Sending Ethernet frames

2005-03-21 Thread Don Bowman
From: [EMAIL PROTECTED] On Behalf Of Patrik Arlos > Hi, > > > > I'm trying to send 'raw' Ethernet frames. I have however not > found any examples of how to do this in BSD. > > Is it possible to open a 'ethernet' socket, similar to a > AF_INET? I need to be able to control the destination

RE: Underutilisation of CPU --- am I PCI bus bandwidth limited?

2004-10-25 Thread Don Bowman
From: [EMAIL PROTECTED] > ... > > This is rather confusing, as I cannot tell if the system is > IO bound or CPU > bound. Certainly I would not have expected the 133/64 PCI bus > to be saturated > given that peak throughput is around 550Mbit/s with 1024-byte > packets. (Such a > low figure

RE: packet generator

2004-09-14 Thread Don Bowman
From: Andrew Gallatin [mailto:[EMAIL PROTECTED] > Andrew Gallatin writes: > > > xmit routine was called 683441 times. This means that the > queue was > > only a little over two packets deep on average, and vmstat > shows idle > > time. I've tried piping additional packets to nghook mx0:orph

RE: packet generator

2004-09-10 Thread Don Bowman
From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Andrew Gallatin > Sent: September 10, 2004 19:08 PM > To: [EMAIL PROTECTED] > Subject: packet generator > > Does anybody have a free, in-kernel tool to generate packets quicky > and send them out a particular etherent interface on FreeB

RE: dyn buckets

2004-09-10 Thread Don Bowman
From: [EMAIL PROTECTED] > I have a firewall running 4.10 that handles around > 20mbits/sec of traffic > and has around 500 ipfw rules. > > Lately I've noticed that net.inet.ip.fw.curr_dyn_buckets > seems to be maxing > out. I've increased net.inet.ip.fw.dyn_buckets a few times, > but they se

RE: device polling takes more CPU hits??

2004-07-26 Thread Don Bowman
From: Luigi Rizzo [mailto:[EMAIL PROTECTED] > On Mon, Jul 26, 2004 at 01:18:46PM -0700, Kelly Yancey wrote: > ... > > Out of curiousity, what sort of testing did you do to > arrive at these > > settings? I did some testing a while back with a SmartBits > box pumping > > packets through a FreeB

RE: device polling takes more CPU hits??

2004-07-26 Thread Don Bowman
From: James [mailto:[EMAIL PROTECTED] > > I have two boxes behind em0 that I can use to generate > 250kpps to another vlan > within em0 card as a test, so that bge0 is not involved in > the stress test. > Even when doing so, CPU load climbs higher with device > polling turned on. > Opened up s

RE: device polling takes more CPU hits??

2004-07-26 Thread Don Bowman
From: Marko Zec [mailto:[EMAIL PROTECTED] > On Monday 26 July 2004 17:35, Don Bowman wrote: > > > [EMAIL PROTECTED] sysctl machdep.cpu_idle_hlt > > > machdep.cpu_idle_hlt: 1 > > > At least on -STABLE, machdep.cpu_idle_hlt setting is ignore

RE: device polling takes more CPU hits??

2004-07-26 Thread Don Bowman
From: James [mailto:[EMAIL PROTECTED] > Hi Don, > [EMAIL PROTECTED] sysctl kern.clockrate > kern.clockrate: { hz = 4000, tick = 250, tickadj = 1, profhz > = 1024, stathz = 128 } That's a pretty high HZ, here's what i have: kern.clockrate: { hz = 2500, tick = 400, tickadj = 1, profhz = 1024, stath

RE: device polling takes more CPU hits??

2004-07-26 Thread Don Bowman
From: James [mailto:[EMAIL PROTECTED] > Hi all, > ... > > Any idea why device polling is kind of having... negative > impact? Is this b/c > I have SMP compiled on a box that really doesn't have two > cpu's?? Is SMP+APIC_IO > support even required for HTT use? I would post the output of 'sysc

RE: Question on SOCK_RAW, implement a bpf->other host tee

2004-07-17 Thread Don Bowman
From: Don Bowman [mailto:[EMAIL PROTECTED] > I'm trying to implement a 'tee' which reads > from bpf, and sends matching packets to > another layer-2 adjacent host. > Sorry to follow up my own post, but... More specifically, it appears the packet does try and transmit,

Question on SOCK_RAW, implement a bpf->other host tee

2004-07-17 Thread Don Bowman
I'm trying to implement a 'tee' which reads from bpf, and sends matching packets to another layer-2 adjacent host. I'm doing this with SOCK_RAW to try and write the packet back out. The 'sendto' passes, but i don't see a packet anywhere. Am i correct that i can hand an arbitrarily crafted IP pac

RE: Looking for a Broadcom BCM5704 datasheet

2004-05-14 Thread Don Bowman
From: Ruslan Ermilov [mailto:[EMAIL PROTECTED] > On Fri, May 14, 2004 at 09:40:07AM -0700, Paul Saab wrote: > > Ruslan Ermilov wrote: > > > > >Dear networkers, > > > > > >I'm looking for a Broadcom BCM5704[S] technical datasheet. > If anyone has > > >such a beast, or knows how one could obtain i

RE: Can't compile Intel gigabit "em" driver

2004-05-09 Thread Don Bowman
From: Gary Corcoran [mailto:[EMAIL PROTECTED] > > Quick background: > I'm running FreeBSD 4.8-Release and have a new Intel Pro/1000 MT > NIC I want to install. While there is a man page for the "em" > driver which should be usable, there is no "em" listed in LINT > or GENERIC. Nor is the source

RE: Stupid question about managed switches

2004-04-08 Thread Don Bowman
From: Marc G. Fournier [mailto:[EMAIL PROTECTED] > On Thu, 8 Apr 2004, Don Bowman wrote: > > > From: Marc G. Fournier [mailto:[EMAIL PROTECTED] > > > > > > Please excuse this, but my experience with them is zilch ... > > > am going with > > > the

RE: Stupid question about managed switches

2004-04-07 Thread Don Bowman
From: Marc G. Fournier [mailto:[EMAIL PROTECTED] > > Please excuse this, but my experience with them is zilch ... > am going with > the HP Procurve 2826(?) Layer2/Layer3 switch, as was > suggested, but I'm > curious as to how they work ... > > For instance, I know when I setup a router, I have

RE: FIN_WAIT_[1,2] and LAST_ACK

2004-04-04 Thread Don Bowman
From: Brandon Erhart [mailto:[EMAIL PROTECTED] > Hello everyone, > > I am writing a network application that mirrors a given > website (such as a > suped-up "wget"). I use a lot of FDs, and was getting > connect() errors when > I would run out of local_ip:local_port tuples. I lowered the > MS

RE: Looking for switch recommendations ...

2004-03-26 Thread Don Bowman
From: Marc G. Fournier [mailto:[EMAIL PROTECTED] > One thing I hate about comparison shopping for computers ... there are > so many options :( > > What is the difference between Layer2 and Layer3, and what does that > affect? > > I see the HP Procurve 2626 (I don't need 50 ports yet) for > ~

RE: Odd network issue ... *very* slow scp between two servers

2004-03-07 Thread Don Bowman
From: Marc G. Fournier [mailto:[EMAIL PROTECTED] > On Sat, 6 Mar 2004, Tim Wilde wrote: > > > On Sat, 6 Mar 2004, Marc G. Fournier wrote: > > > > > I have two servers on the same network switch, sitting > one on top of the > > > other ... one is running an em (Dual-Xeon 2.4Ghz) device, > the oth

RE: DEVICE_POLLING with SMP

2004-01-29 Thread Don Bowman
> From: Kevin Day [mailto:[EMAIL PROTECTED] > On Jan 29, 2004, at 1:04 AM, Vlad Galu wrote: > > > > I see no reason for it. Having to switch between multiple kernel > > threads to handle polling may bring too much overhead. > > > > > > Would that really be happening though? > > If polling is

RE: crossover between gigE?

2003-12-20 Thread Don Bowman
From: Luigi Rizzo [mailto:[EMAIL PROTECTED] > > On Sat, Dec 20, 2003 at 07:11:22AM -0800, Alfred Perlstein wrote: > > Any suggestion of the kind of cable one should look for at Frys > > to run between two gigE card (intel em0) to function as a crossover? > > A straight cable with all 4 pairs wire

RE: how to saturate 100Mbit

2003-12-13 Thread Don Bowman
From: DrumFire [mailto:[EMAIL PROTECTED] > > >> dd if=holey-file of=/dev/null bs=10m > > > > I've got about 30% of CPU load for the server (P-133) and less than > > 35mbit/s on wire. > > Also you can try to dump traffic with tcpdump and send it with > > /usr/ports/net/tcpreplay > > I'm trying

RE: Two ISP connections

2003-12-10 Thread Don Bowman
From: Andrea Venturoli [mailto:[EMAIL PROTECTED] > ** Reply to note from Barney Wolff <[EMAIL PROTECTED]> Wed, > 10 Dec 2003 11:39:00 -0500 > > > > I don't know of anything published that does this, but it's easy to > > write a perl or shell script that pings the router at the adsl isp > > and

high number of pcb's, core dump in sysctl -a

2003-11-12 Thread Don Bowman
net.inet.tcp.pcbcount: 76043 when i do 'sysctl net.inet.tcp', i get a core dump, while trying to read 'net.inet.tcp.pcblist'. Is there some built in limit to the size of a sysctl result? --don ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.or

RE: Giga-bit switches

2003-10-09 Thread Don Bowman
From: Peter J. Blok [mailto:[EMAIL PROTECTED] > Hi, > > This is just a warning. I am setting up a Giga-bit network > trying to use Jumbo > frames. For NIC the ability to do larger frames is usually > listed, but that > doesn't seem to be the case for switches. > > I have bought a Netgear GS10

RE: I would like to tcpdump and get all the packets...

2003-09-18 Thread Don Bowman
From: Petri Helenius [mailto:[EMAIL PROTECTED] > Bruce M Simpson wrote: > > >Er, if you check this URL: > >http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/tcpdump/CHANGES > > > >Shurely you mean tcpdump 3.7.2, which is already imported > (by fenner, with > >additional hacks)? > > > > > > > I

RE: TCP socket shutdown race condition

2003-08-01 Thread Don Bowman
> From: Mike Silbersack [mailto:[EMAIL PROTECTED] > On Fri, 1 Aug 2003, Scot Loach wrote: > > > Earlier this week one of our FreeBSD 4.7 boxes panic'd. > I've posted the > > stack trace at the end of this message. Using google, I've > found several > > references to this panic over the past th

RE: Help with FreeBSD Bridged Firewall

2003-07-30 Thread Don Bowman
> From: William Knechtel [mailto:[EMAIL PROTECTED] > Yeah, the arp cache is the problem, thanks for nailing that > one for me. > However, the ipfw rule you supplied doesn't seem to want to work for > me... I think for the time being I'll just run a cron job every 15 > minutes or so that clears th

RE: Help with FreeBSD Bridged Firewall

2003-07-29 Thread Don Bowman
> From: William Knechtel [mailto:[EMAIL PROTECTED] I think you need to allow arp through this device, something like: ipfw add 30 allow layer2 mac-type arp [not sure which rule to insert it at]. I'm guessing your arp cache is timing out. ___ [EMAIL PRO

RE: splx() bug in ip_dummynet?

2003-07-24 Thread Don Bowman
From: Don Bowman [mailto:[EMAIL PROTECTED] ... I believe this patch will correct the issue. Index: ip_dummynet.c === RCS file: /usr/cvs/src/sys/netinet/ip_dummynet.c,v retrieving revision 1.24.2.17.1000.1 retrieving revision

splx() bug in ip_dummynet?

2003-07-24 Thread Don Bowman
1.24.2.2 of ip_dummynet.c [RELENG_4] has a bug I'm thinking, can someone comment? In the below snippet, the value of 's' from splimp() is overwritten by the return value of alloc_hash(), which is an errno. If its != 0, then there's a missing splx(). If it is == 0, then splx() is called with the wr

RE: using memory after freed in tcp_syncache (syncache_timer()) with ipfw: patch attached

2003-07-01 Thread Don Bowman
From: Don Bowman [mailto:[EMAIL PROTECTED] > > Synopsis: under some ipfw conditions, tcp_syncache has > syncache_respond() call ip_output call ip_input call syncache_drop(), > which drops the 'syncache' that is being worked on, or corrupts > the list, etc. Th

RE: using memory after freed in tcp_syncache (syncache_timer()) with ipfw: patch attached

2003-06-30 Thread Don Bowman
Synopsis: under some ipfw conditions, tcp_syncache has syncache_respond() call ip_output call ip_input call syncache_drop(), which drops the 'syncache' that is being worked on, or corrupts the list, etc. This is typically seen from syncache_timer or syncache_add. I've attached a patch that I belie

RE: using memory after freed in tcp_syncache (syncache_timer())

2003-06-28 Thread Don Bowman
From: Don Bowman ... It appears this may also occur in syncache_add(): in this case, syncache_respond() alters the list. sc->sc_tp = tp; sc->sc_inp_gencnt = tp->t_inpcb->inp_gencnt; if (syncache_respond(sc, m) == 0) {

using memory after freed in tcp_syncache (syncache_timer())

2003-06-28 Thread Don Bowman
syncache_timer() ... /* * syncache_respond() may call back into the syncache to * to modify another entry, so do not obtain the next * entry on the timer chain until it has completed. */ (void) sync

RE: nested ipfw dummynet pipes

2003-06-20 Thread Don Bowman
From: 'Luigi Rizzo' [mailto:[EMAIL PROTECTED] > On Fri, Jun 20, 2003 at 02:18:17PM -0400, Don Bowman wrote: > ... > > Thanks very much, I will check this. I assume this will be true > > for IPFW2 rather than IPFW. > > one_pass actually affect both. > the comm

RE: nested ipfw dummynet pipes

2003-06-20 Thread Don Bowman
From: Luigi Rizzo [mailto:[EMAIL PROTECTED] > > On Fri, Jun 20, 2003 at 01:41:21PM -0400, Don Bowman wrote: > > is there any way, in a bridging config, to have nested pipes? > > net.inet.ip.fw.one_pass=0 should do the job, i think the comment > in the manpage is now incor

nested ipfw dummynet pipes

2003-06-20 Thread Don Bowman
is there any way, in a bridging config, to have nested pipes? In particular, what i would like to achieve is a rule that allows e.g. 64kbps per host (src-mask 0x), but that all these hosts are in an overall 10Mbps pipe. The idea will be that @ some times of the day the pipe is less than fu

RE: Spontan reboot of FreeBSD 4,x box

2003-05-29 Thread Don Bowman
is hasn't been reproducible enough to find. This is pure speculation. man 8 periodic see /etc/periodic.conf > -Original Message- > From: Dennis Pedersen [mailto:[EMAIL PROTECTED] > Sent: May 28, 2003 16:46 > To: Don Bowman; [EMAIL PROTECTED] > Subject: Re

RE: Spontan reboot of FreeBSD 4,x box

2003-05-29 Thread Don Bowman
> From: Dennis Pedersen [mailto:[EMAIL PROTECTED] > > I have a couple of FreeBSD 4,4 and one 4,7 that are beeing > used as firewalls > in different locations. > Lately i haven noticed that one of the firewall's was > starting to reboot at > a certin time of the day (give or take maybe 10min). T

RE: A problem with too many network interfaces

2003-05-27 Thread Don Bowman
> From: Garrett Wollman [mailto:[EMAIL PROTECTED] > < =?ISO-8859-1?Q?Mikko_Ty=F6l=E4j=E4rvi?= <[EMAIL PROTECTED]> said: > > > A proper BSD port could use something like the trick in > Stevens[1] and > > keep retrying the call with a larger bufer until the length of the > > result is the same as i

RE: Source ip route lookup on incoming packets?

2003-02-28 Thread Don Bowman
> From: Sten Daniel Sørsdal [mailto:[EMAIL PROTECTED] > >On Thu, Feb 27, 2003 at 02:02:53PM +0100, Sten Daniel S?rsdal wrote: > >> What i am looking for is a feature that basically > prevents spoofing by looking > >> the route for the source and match the incoming interface. > >> A firewall s

3COM 3C996-SX (bge) fibre support?

2003-01-14 Thread Don Bowman
I see in the cvs comments that this card is supported (1.11 of if_bge.c). The relevant change seems to be: + /* +* Figure out what sort of media we have by checking the +* hardware config word in the EEPROM. Note: on some BCM5700 +* cards, this value appears to be uns

RE: Redundant NIC/Connections

2003-01-02 Thread Don Bowman
> From: Jonathan Disher [mailto:[EMAIL PROTECTED]] > On Wed, 1 Jan 2003, David J Duchscher wrote: > > > >> >I was wondering how people are handling redundant > connections? We > > >> >would like to have dual NICs in the FreeBSD box with each NIC > > >> connected > > >> >to a different switch. B

RE: Broadcom BCM5703X Gigabit Ethernet woes, panics, no MIIs, oh my!

2002-12-31 Thread Don Bowman
From: George J.V. Cox [mailto:[EMAIL PROTECTED]] > I have a Dell 1655MC blade server, and a compiled-this-week > 4.7-STABLE kernel. > The hardware is a chassis of 6 PCs in a 3U case. Each blade > has two Broadcom > BCM5703 interfaces. Unfortunately, its behaviour is rather > non-deterministic

struct inpcb, INET6

2002-12-14 Thread Don Bowman
Is there a reason that struct inpcb doesn't have an #ifdef INET6 around struct { /* IP options */ struct mbuf *inp6_options; /* IP6 options for outgoing packets */ struct ip6_pktopts *inp6_outputopts; /* IP m

RE: SO_DONTROUTE, arp's, ipfw fwd, etc

2002-12-04 Thread Don Bowman
> From: Julian Elischer [mailto:[EMAIL PROTECTED]] > On Wed, 4 Dec 2002, Don Bowman wrote: ... > It gets the destination MAC address from the SRC AMC field of the > preceding incoming packets with that IP src, dst and port > combination i.e. the node would look withi

RE: SO_DONTROUTE, arp's, ipfw fwd, etc

2002-12-04 Thread Don Bowman
> From: Chuck Swiger [mailto:[EMAIL PROTECTED]] > On Wednesday, December 4, 2002, at 03:37 PM, Don Bowman wrote: > [ ... ] > > These are isp-sized routers (complicated networks with different > > peering points to other networks). Static routes don't work since >

RE: SO_DONTROUTE, arp's, ipfw fwd, etc

2002-12-04 Thread Don Bowman
> From: Julian Elischer [mailto:[EMAIL PROTECTED]] > On Wed, 4 Dec 2002, Don Bowman wrote: > > > Why does it think the source is local? are the routers below > > > doing proxy > > > arp? Did you give your interface a netmask of 0,0.0.0? > > > > > &

RE: SO_DONTROUTE, arp's, ipfw fwd, etc

2002-12-04 Thread Don Bowman
From: Julian Elischer [mailto:[EMAIL PROTECTED]] > The arp is issued because the TCP stack is responding to the > SYN packet with it's own SYN, but it doesn't have a route to the > origianal source, so it creates one, as it's local. this means that it > allocates an ARP entry for it which in turn

RE: SO_DONTROUTE, arp's, ipfw fwd, etc

2002-12-04 Thread Don Bowman
> -Original Message- > From: Chuck Swiger [mailto:[EMAIL PROTECTED]] > On Wednesday, December 4, 2002, at 03:20 PM, Don Bowman wrote: > > > What's happening is I have >1 router feeding me sessions which > > I'm transparently proxying (e.g. squid).

RE: SO_DONTROUTE, arp's, ipfw fwd, etc

2002-12-04 Thread Don Bowman
> From: Don Bowman [mailto:[EMAIL PROTECTED]] > I have a setup where I have a transparent proxy using ipfw fwd (to > localhost). > Data is sent to this device using a MAC rewrite so that > packets arrive with > my MAC, but the original source and destination IP. > When I rece

RE: SO_DONTROUTE, arp's, ipfw fwd, etc

2002-12-04 Thread Don Bowman
> From: Don Bowman [mailto:[EMAIL PROTECTED]] > I have a setup where I have a transparent proxy using ipfw fwd (to > localhost). > Data is sent to this device using a MAC rewrite so that > packets arrive with > my MAC, but the original source and destination IP. > When I rece

SO_DONTROUTE, arp's, ipfw fwd, etc

2002-12-02 Thread Don Bowman
I have a setup where I have a transparent proxy using ipfw fwd (to localhost). Data is sent to this device using a MAC rewrite so that packets arrive with my MAC, but the original source and destination IP. When I receive the SYN, i accept the connection, which causes an ARP to be emitted for the

RE: IPFW question with options and fwd rule

2002-11-26 Thread Don Bowman
> From: Julian Elischer [mailto:[EMAIL PROTECTED]] > On Tue, 26 Nov 2002, Don Bowman wrote: > > > > > If I create a rule to 'fwd' packets with a particular TCP option > > set (or IP option) to a specific local port, and then I accept > > on that port,

IPFW question with options and fwd rule

2002-11-26 Thread Don Bowman
If I create a rule to 'fwd' packets with a particular TCP option set (or IP option) to a specific local port, and then I accept on that port, will subsequent packets without that option work? ie, I have this: 100 fwd localhost,9000 tcp from any to any 1234 tcpoptions ts recv interface SYN (TCP

RE: bge bug w/ out of bounds return receiver, staying in rxeof all the time, patch

2002-11-22 Thread Don Bowman
> From: John Polstra [mailto:[EMAIL PROTECTED]] > In article <184f01c291c9$147e7100$[EMAIL PROTECTED]>, > Sam Leffler <[EMAIL PROTECTED]> wrote: > > > I would recommend a committer look this over and > > > commit it. If you wish, I can make the patch *just* > > > be the change (changing the 16-bit

RE: bge bug w/ out of bounds return receiver, staying in rxeof all the time, patch

2002-11-21 Thread Don Bowman
> From: Sam Leffler [mailto:[EMAIL PROTECTED]] > > I would recommend a committer look this over and > > commit it. If you wish, I can make the patch *just* > > be the change (changing the 16-bit to 32-bit writes, > > without the VPD stuff), but the other changes seemed > > generally useful. > > P

bge bug w/ out of bounds return receiver, staying in rxeof all the time, patch

2002-11-21 Thread Don Bowman
(apologies if you got this more than once, but after 6 hours it hadn't shown up on the mailing list) There is a bug in the STABLE (and current) if_bge which causes the driver to loop forever in interrupt context (in bge_rxeof()). This is caused by the return ring length being 1024 in the driver, a

RE: Sockets and changing IP addresses

2002-11-21 Thread Don Bowman
> From: Archie Cobbs [mailto:[EMAIL PROTECTED]] > Sent: November 21, 2002 16:54 > To: Don Bowman > Cc: 'Wes Peters'; Archie Cobbs; [EMAIL PROTECTED] > Subject: Re: Sockets and changing IP addresses > > > Don Bowman wrote: > > > > I

RE: Sockets and changing IP addresses

2002-11-21 Thread Don Bowman
> From: Wes Peters [mailto:[EMAIL PROTECTED]] > Archie Cobbs wrote: > > > > I'm curious what -net's opinion is on PR kern/38544: > > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/38554 > > > > In summary: if you have a connected socket whose local IP address > > is X, and then change t

RE: bug in bge driver with ENOBUFS on 4.7

2002-11-12 Thread Don Bowman
> From: Don Bowman [mailto:don@;sandvine.com] > In bge_rxeof(), there can end up being a condition which causes > the driver to endlessly interrupt. > > if (bge_newbuf_std(sc, sc->bge_std, NULL) == ENOBUFS) { > ifp->if_ierrors++; > bge_newbuf_std(sc, sc-&

RE: Packet forwarding overhead - with ipfw counting

2002-11-10 Thread Don Bowman
From: Kevin Day [mailto:toasty@;dragondata.com] > When we're pushing 250-300mbits through, we're using about 15% of its > 2.4Ghz P4 Xeon CPU. All of it is in "interrupt" time... that > seems a bit > high, but that'll still let us max things out at 1gbit so we're ok. Try applying these diff to y

bug in bge driver with ENOBUFS on 4.7

2002-11-09 Thread Don Bowman
In bge_rxeof(), there can end up being a condition which causes the driver to endlessly interrupt. if (bge_newbuf_std(sc, sc->bge_std, NULL) == ENOBUFS) { ifp->if_ierrors++; bge_newbuf_std(sc, sc->bge_std, m); continue; } happens. Now, bge_newbuf_std returns ENOBUFS. 'm' is also NULL.

Suggestions for tcbhashsize size?

2002-11-09 Thread Don Bowman
Are there any guidelines for setting the tcbhashsize ? I have a system which I'm expecting to keep ~50K TCP connections going. Does it follow standard hash table rules that it should be less than half full? I currently have net.inet.tcp.tcbhashsize: 4096 --don ([EMAIL PROTECTED] www.sandvine.com)

RE: dhclient turns ethernet card off

2002-11-05 Thread Don Bowman
> From: alexis georges [mailto:floating_in_space_@;hotmail.com] > hey guys > we had a power cut yesterday..all went down at our home.. > when we got electricity back, my internet wouldnot work..only > my computer > atually..i found that my eth. card would not turn on..or > actually i just > fou

RE: MTU problems ...

2002-11-04 Thread Don Bowman
> From: Julian Elischer [mailto:julian@;elischer.org] > There is a program that intercepts tcp session negotiation and > artificially reduces the negotiated MTU but I can't find it > right now.. > I think it was called mssd or something. /usr/ports/net/tcpmssd --don ([EMAIL PROTECTED] www.sandvi

RE: Data payload in SYN packet

2002-11-01 Thread Don Bowman
> From: David Myer [mailto:davidmyer800@;yahoo.com] > Just curious on one thing, we know that SYN packet can > carry data payload, but I never see any implementation > that actually does this. See T/TCP, RFC 1644, and sysctl 'net.inet.tcp.rfc1644' --don ([EMAIL PROTECTED] www.sandvine.com) To Un

RE: Problem in High Speed and Long Delay with FreeBSD

2002-11-01 Thread Don Bowman
> From: Mark Allman [mailto:mallman@;grc.nasa.gov] > Thanks! Other ideas? What MSS is advertised on each end? --don ([EMAIL PROTECTED] www.sandvine.com) To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message

RE: Problem in High Speed and Long Delay with FreeBSD

2002-11-01 Thread Don Bowman
> From: Fran Lawas-Grodek [mailto:Fran.Lawas-Grodek@;grc.nasa.gov] > Well... our development code that we are to ultimately test was > developed on 4.1, thus we really need to try to stick with 4.1. > It does not look like either of the above parameters are available > until 4.7. No worries. Have

RE: Problem in High Speed and Long Delay with FreeBSD

2002-11-01 Thread Don Bowman
> From: Fran Lawas-Grodek [mailto:Fran.Lawas-Grodek@;grc.nasa.gov] Perhaps sysctl net.inet.tcp.inflight_enable=1 will help? you may wish to also change tcp.inflight_max. See tcp(4) as of 4.7. --don ([EMAIL PROTECTED] www.sandvine.com) To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubs

RE: ng_fec hash mechanism versus cisco etherchannel

2002-10-31 Thread Don Bowman
> From: Petri Helenius [mailto:pete@;he.iki.fi] > It does not matter if you send using the other link as long > as you send > all packets > for the same stream over the same link to avoid reordering. > So yes, it does > interoperate. can you end up with a link flap? e.g. the catalyst does SA le

ng_fec hash mechanism versus cisco etherchannel

2002-10-31 Thread Don Bowman
Examining the source code to ng_fec, in ng_fec_output(), it uses the IP address to form the hash to pick the port. This is the same behaviour that 802.3ad specifies, and yields good behaviour since: a: it works in routed environments as well as local area b: packets are not reordered within L4 se

RE: device fxp cannot detect Intel On-Board LAN

2002-10-28 Thread Don Bowman
> From: Ng Wee Yong [mailto:ngweeyong@;yahoo.com.sg] > I just install the FreeBSD 4.6.2 - STABLE version. My > motherboard is a MSI > 845GE Max-L, 1.8Ghz Pentium 4, On-board LAN is Intel 82562. > > FreeBSD just work fine accept it cannot detect my On-Board > Intel LAN. ... kern/39974 describes

RE: Annoying ARP warning messages.

2002-10-28 Thread Don Bowman
> From: Julian Elischer [mailto:julian@;elischer.org] > > Is there support for 802.3ad in FreeBSD? This would be the best > > way to gang interfaces together in a standard fashion. It involves > > LACP (Link Aggregation Control Protocol), which prevents loops > > @ L2 (I think its an extension of S

RE: Annoying ARP warning messages.

2002-10-28 Thread Don Bowman
From: Julian Elischer [mailto:julian@;elischer.org] > On Mon, 28 Oct 2002, Sean Chittenden wrote: > > In this example, does the xl0 interface share the same MAC address? > > umm actually, yes.. sends switches insane.. :-) > if you don't do the step about source Mac address replacement > then they

RE: spoofing source code in kernel

2002-10-28 Thread Don Bowman
From: sepehr sohrabi [mailto:sepehr_soh@;hotmail.com] > > Hi list > Anyone has source code for spoofing (in kernel) for all input > Tcp/IP packets > .For any TCP/IP packet recieve it creates an ACK for it . > someThing like spoofing GW > CLIENT <-> GW <---> server > connections a

RE: Annoying ARP warning messages.

2002-10-26 Thread Don Bowman
> From: Julian Elischer [mailto:julian@;elischer.org] (removed as to why have two NICs on the same network, sending for general enlightenment of the list...) This is reasonably common in L2 switched Ethernet. You have a device which segments the traffic just fine with MAC learning. You have the

Re: Annoying ARP warning messages.

2002-10-26 Thread Don Bowman
This is common with l2 switched networks: the arp is seen everywhere even though the unicast traffic uses the learning mode. --don -Original Message- From: Julian Elischer <[EMAIL PROTECTED]> To: Don Bowman <[EMAIL PROTECTED]> CC: 'Kevin Stevens' <[EMAIL PROT

RE: Annoying ARP warning messages.

2002-10-26 Thread Don Bowman
Kevin Stevens wrote: > I have two systems connected through a common network (switch). They > each have two NICs, with one addressed on one IP network and the second > on another. IP works fine. My problem is that the kernel keeps > bitching about seeing the same MAC addresses on both interfa

panic in 4.7 in close / sbdrop

2002-10-25 Thread Don Bowman
I have a machine running 4.7. I can panic it by sending a reasonably high load of tcp open/close from/to it. The trace below is from a socket from localhost to localhost (sendmail). The max number of open file descriptors I would have had would be ~4500. The rx buffer says it has 43008 bytes, but t

RE: Machine becomes non-responsive, only ^T shows it as alive under l oad: IPFW, TCP proxying

2002-10-24 Thread Don Bowman
> From: Don Bowman > > > > > > I have an application listening on an ipfw 'fwd' rule. > > I'm sending ~3K new sessions per second to it. It > > has to turn around and issue some of these out as > > a proxy, in response to which some of the

RE: Machine becomes non-responsive, only ^T shows it as alive under l oad: IPFW, TCP proxying

2002-10-24 Thread Don Bowman
> From: Kevin Stevens [mailto:Kevin_Stevens@;pursued-with.net] > > Any suggestions for how one would start debugging this to > > find out where its stuck, and how? > > At a guess, you need to tune the state-table retention time down. If by that you mean the MSL? I've set the MSL to 5000 in this

Machine becomes non-responsive, only ^T shows it as alive under load: IPFW, TCP proxying

2002-10-23 Thread Don Bowman
I have an application listening on an ipfw 'fwd' rule. I'm sending ~3K new sessions per second to it. It has to turn around and issue some of these out as a proxy, in response to which some of them the destination host won't exist. I have RST limiting on. I'm seeing messages like: Limiting open p

RE: panic with ipfw / dummynet in 4.7 STABLE

2002-10-22 Thread Don Bowman
> From: Don Bowman [mailto:don@;sandvine.com] > Take a 4.7 image. Using if_em (if it matters). Turn on > bridging (em0, em2), add these ipfw rules: ... Here's the same thing again with -g on. #0 dumpsys () at /usr/src/sys/kern/kern_shutdown.c:487 #1 0xc01b1783 in boot (howto=26

panic with ipfw / dummynet in 4.7 STABLE

2002-10-22 Thread Don Bowman
Take a 4.7 image. Using if_em (if it matters). Turn on bridging (em0, em2), add these ipfw rules: ipfw add 305 prob 0.01 drop MAC any 00:04:76:f3:2d:0a setup ipfw add 310 prob 0.01 reject MAC any 00:04:76:f3:2d:0a setup ipfw add 320 prob 0.01 unreach host MAC any 00:04:76:f3:2d:0a setup ipfw ad

RE: ENOBUFS

2002-10-16 Thread Don Bowman
Sam Leffler wrote: > Try my port of the netbsd kttcp kernel module. You can find it at > > http://www.freebsd.org/~sam this seems to use some things from netbsd like so_rcv.sb_lastrecord and SBLASTRECORDCHK/SBLASTMBUFCHK. Is there something else I need to apply to build it on freebsd -STABLE?

dynamic load of em/fxp/bge

2002-10-16 Thread Don Bowman
I am trying to load the if_em, if_fxp, if_bge drivers via /boot/loader.conf. I've added if_fxp_load="YES" if_bge_load="YES" if_em_load="YES" The problem is that the bge driver doesn't load. It will if I manually load it after startup with kldload. The issue seems to be a dependency on miibus,

dynamic load of em/fxp/bge

2002-10-15 Thread Don Bowman
I am trying to load the if_em, if_fxp, if_bge drivers via /boot/loader.conf. I've added if_fxp_load="YES" if_bge_load="YES" if_em_load="YES" The problem is that the bge driver doesn't load. It will if I manually load it after startup with kldload. The issue seems to be a dependency on miibus,

intel dual gigabit, 82546EB support

2002-10-06 Thread Don Bowman
Is anyone using the intel dual gigabit 82546EB? Does it appear as two separate em devices, eg em0 and em1? http://www.intel.com/network/connectivity/products/pro1000mt_dual_server_ada pter.htm is a card that has it, also some of the newer supermicro motherboards (and probably others) incorporate

RE: new zero copy sockets patches available

2002-05-18 Thread Don Bowman
> Andrew Gallatin writes: >> Kenneth D. Merry writes: >> > >> > I have released a new set of zero copy sockets patches, against -current >> > from today (May 17th, 2002). > > Hi Ken, > > I'm glad to see that you're still maintining this! > > Assuming the mutex issues get sorted out, what d