Re: kern/164490: [pfil] Incorrect IP checksum on pfil pass from ip_output()

2012-04-07 Thread Maxim Ignatenko
The following reply was made to PR kern/164490; it has been noted by GNATS. From: Maxim Ignatenko To: bug-follo...@freebsd.org Cc: Subject: Re: kern/164490: [pfil] Incorrect IP checksum on pfil pass from ip_output() Date: Sat, 7 Apr 2012 10:17:20 +0300 Method described in http

Re: userfw - modular packet filter

2012-02-13 Thread Maxim Ignatenko
On пн, 13 лют 2012 19:25:42 Sami Halabi wrote: > Hi Maxim, > what are the other advantages on ipfw/pf ? like did you make speed > measures? does packet leave the firewall faster? There was no performance testing yet, I want to implement more functionality first, to compare performance on rulesets

Re: userfw - modular packet filter

2012-02-13 Thread Maxim Ignatenko
2012/2/13 Andrey V. Elsukov : > On 13.02.2012 14:31, Maxim Ignatenko wrote: >> Dear -net, >> >> Today I want to present new packet filter for FreeBSD: userfw. It's >> main design goal - to be easily extensible. >> Source code is here: http://git.userfw.net/

userfw - modular packet filter

2012-02-13 Thread Maxim Ignatenko
Dear -net, Today I want to present new packet filter for FreeBSD: userfw. It's main design goal - to be easily extensible. Source code is here: http://git.userfw.net/ https://github.com/gelraen/userfw/ Dedicated website: http://userfw.net/ userfw's packet processing is, much like ipfw's, based on

Re: ng_patch node

2010-05-17 Thread Maxim Ignatenko
Extended and improved version of ng_patch node: 1) added new operations ('*', '/', unary '-', '<<', '>>') 2) single node now able to apply arbitrary number of changes 3) m_pullup replaced with m_copydata/m_copyback 4) ntoh/hton used to apply changes correctly 5) checksum handling 6) added some stat

Re: ng_patch node

2010-01-11 Thread Maxim Ignatenko
2010/1/12 Julian Elischer : > Maxim Ignatenko wrote: >> >> Hi, >> I've written netgraph node able to modify arbitrary (8|16|32)-bit >> unsigned integer in passing packets. Node applies one of =,+,-,&,| and >> ^ operations to number at given offset. >&

ng_patch node

2010-01-11 Thread Maxim Ignatenko
+ +.include Index: netgraph/ng_patch.c === --- netgraph/ng_patch.c (revision 0) +++ netgraph

Re: kern/132715: [lagg] [panic] Panic when creating vlan's on lagg interface

2009-04-28 Thread Maxim Ignatenko
The following reply was made to PR kern/132715; it has been noted by GNATS. From: Maxim Ignatenko To: bug-follo...@freebsd.org, g...@wp.pl Cc: freebsd-curr...@freebsd.org Subject: Re: kern/132715: [lagg] [panic] Panic when creating vlan's on lagg interface Date: Tue, 28 Apr 2009

Re: kern/132715: [lagg] [panic] Panic when creating vlan's on lagg interface

2009-04-28 Thread Maxim Ignatenko
The following reply was made to PR kern/132715; it has been noted by GNATS. From: Maxim Ignatenko To: bug-follo...@freebsd.org, g...@wp.pl Cc: freebsd-curr...@freebsd.org Subject: Re: kern/132715: [lagg] [panic] Panic when creating vlan's on lagg interface Date: Tue, 28 Apr 2009

Re: kern/132715: [lagg] [panic] Panic when creating vlan's on lagg interface

2009-04-28 Thread Maxim Ignatenko
The following reply was made to PR kern/132715; it has been noted by GNATS. From: Maxim Ignatenko To: bug-follo...@freebsd.org, g...@wp.pl Cc: freebsd-curr...@freebsd.org Subject: Re: kern/132715: [lagg] [panic] Panic when creating vlan's on lagg interface Date: Tue, 28 Apr 2009

Re: [dummynet] Several queues connected to one pipe: "dummynet: OUCH! pipe should have been idle!"

2009-04-27 Thread Maxim Ignatenko
2009/4/27 Oleg Bulyzhin : > > Perhaps you stepped on this: > > http://docs.freebsd.org/cgi/getmsg.cgi?fetch=879027+0+archive/2009/svn-src-all/20090419.svn-src-all > > You can try to change type of dn_pipe.numbytes to int64_t (instead of dn_key). > (ip_dummynet.h:341) > This is exactly what is done

Re: [dummynet] Several queues connected to one pipe: "dummynet: OUCH! pipe should have been idle!"

2009-04-27 Thread Maxim Ignatenko
2009/4/27 Luigi Rizzo : > On Mon, Apr 27, 2009 at 04:51:18PM +0300, Maxim Ignatenko wrote: >> 2009/4/27 Luigi Rizzo : >> > >> > ok there seems to be no change related to dummynet between these >> > two versions so I am not sure where to look. >> > Co

Re: [dummynet] Several queues connected to one pipe: "dummynet: OUCH! pipe should have been idle!"

2009-04-27 Thread Maxim Ignatenko
2009/4/27 Luigi Rizzo : > > ok there seems to be no change related to dummynet between these > two versions so I am not sure where to look. > Could you double check what is the last working version ? > Yes, r191201 have this problems too (it seems, i didn't updated for a long time). Now I updated

Re: [dummynet] Several queues connected to one pipe: "dummynet: OUCH! pipe should have been idle!"

2009-04-26 Thread Maxim Ignatenko
2009/4/27 Luigi Rizzo : > On Mon, Apr 27, 2009 at 01:12:55AM +0300, Maxim Ignatenko wrote: >> 2009/4/27 Luigi Rizzo : >> > >> > could you give us a few more details on the branch you >> > are using (HEAD or RELENG_7 ?) and what svn revision did >> >

Re: [dummynet] Several queues connected to one pipe: "dummynet: OUCH! pipe should have been idle!"

2009-04-26 Thread Maxim Ignatenko
2009/4/27 Luigi Rizzo : > > could you give us a few more details on the branch you > are using (HEAD or RELENG_7 ?) and what svn revision did > you use before the update (which did not show the error) ? > Sorry, I've forgot to mention that... I use HEAD, and before update it was r191201, if I'm no

[dummynet] Several queues connected to one pipe: "dummynet: OUCH! pipe should have been idle!"

2009-04-26 Thread Maxim Ignatenko
Hi, I have next dummynet configuration: ipfw pipe 3 bw 3Mbit/s ipfw queue 10 config pipe 3 weight 10 mask src-ip 0x ipfw queue 11 config pipe 3 weight 10 mask dst-ip 0x Two queues for different traffic directions connected to one pipe. After update to r191410 my /var/

Re: kern/132715: [lagg] [panic] Panic when creating vlan's on lagg interface

2009-04-20 Thread Maxim Ignatenko
The following reply was made to PR kern/132715; it has been noted by GNATS. From: Maxim Ignatenko To: bug-follo...@freebsd.org, g...@wp.pl Cc: Subject: Re: kern/132715: [lagg] [panic] Panic when creating vlan's on lagg interface Date: Mon, 20 Apr 2009 18:46:32 +0300 This panic