Re: bxe + if_lagg

2012-10-31 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/31/12 3:47 AM, YongHyeon PYUN wrote: > On Tue, Oct 30, 2012 at 11:23:37AM -0400, Tom Judge wrote: > > [...] > >> I am trying to get if_lagg working in an HP blade for failover >> between the 2 in chassis cisco switches

Re: bxe + if_lagg

2012-10-30 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/10/2012 12:51, Garrett Cooper wrote: > On Oct 30, 2012, at 9:45 AM, Tom Judge wrote: > >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> On 30/10/2012 12:12, Adam McDougall wrote: >>> On 10/30/12 11:23,

Re: bxe + if_lagg

2012-10-30 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 30/10/2012 12:12, Adam McDougall wrote: > On 10/30/12 11:23, Tom Judge wrote: >> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 >> >> >> >> I am trying to get if_lagg working in an HP blade for failover >>

bxe + if_lagg

2012-10-30 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am trying to get if_lagg working in an HP blade for failover between the 2 in chassis cisco switches, but it would seem that the link state is not being propagated up to the lagg device. Any hints/ideas? dmesg: bxe1: metric 0 mtu 1500 options=

Re: Bridging + VLANS + RSTP / MSTP

2011-02-19 Thread Tom Judge
On 19/02/2011 11:07, kevin wrote: >> No, you have to specify stp there. The default STP mode is RSTP. >> If you don't specify stp, you'll get a dumb ethernet bridge. > Thanks very much for clarification. This helps me immensely. My room for > testing is limited so this will help me take the right s

Re: igb and jumbo frames

2010-12-03 Thread Tom Judge
e memory area get fragmented and the system can't allocate any new 9k clusters. > > So... any feedback is good right now. > I will provide more feedback in the coming weeks as we load these (4) systems up. Currently they are idling waiting for the application jails to be deployed on th

igb and jumbo frames

2010-12-03 Thread Tom Judge
Hi, So I have been playing around with some new hosts I have been deploying (Dell R710's). The systems have a single dual port card in them: i...@pci0:5:0:0:class=0x02 card=0xa04c8086 chip=0x10c98086 rev=0x01 hdr=0x00 vendor = 'Intel Corporation' class = network

Re: "kernel: carp_input: received len 20 < sizeof(struct carp_header)" messages

2010-11-04 Thread Tom Judge
On 04/11/2010 18:02, Ask Bjørn Hansen wrote: > Hi, > > On a network segment we have both Linux boxes with keepalived (some sort of > vrrp implementation) and FreeBSD boxes with carp enabled. > > The FreeBSD logs have a gazillion "kernel: carp_input: received len 20 < > sizeof(struct carp_header)"

Re: Excessive Duplicate ACKs

2010-10-29 Thread Tom Judge
On 10/27/2010 01:27 PM, Sean Bruno wrote: > We moved an application stack from BSD4(BOO!) to BSD7(YAY!) recently and > got a great performance increase, so first: GOOD JOB. > > Periodically, we are seeing strings of duplicate ACK being sent in > <100uSec deltas. I can't imagine that this should b

Re: bge watchdog timeout errors FreeBSD 7.3

2010-10-08 Thread Tom Judge
On 10/08/2010 08:48 AM, a.sm...@ukgrid.net wrote: > Quoting Tom Judge : > >> >> The R610 has a NetXtream II chipset which uses the bce(4) driver. If >> you are going to doing heavy network traffic, or using jumbo frames I >> would personally recommend you fit an

Re: bge watchdog timeout errors FreeBSD 7.3

2010-10-08 Thread Tom Judge
On 10/08/2010 07:42 AM, a.sm...@ukgrid.net wrote: > Quoting Pyun YongHyeon : > >>> >> >> Ok, there might be a couple of edge cases not handled in bge(4). I >> believe things will improve over time but it depends on users >> feedback and testing. > > On this particular server I really need to get

Re: bce(4) - com_no_buffers (Again)

2010-09-24 Thread Tom Judge
On 09/23/2010 02:33 PM, Tom Judge wrote: > The throttle command I am using in the tests is the one from here: > > http://klicman.org/throttle/ > > > On 09/23/2010 02:26 PM, Tom Judge wrote: > >> On 09/23/2010 01:21 PM, David Christensen wrote: >> >>

Re: bce(4) - com_no_buffers (Again)

2010-09-23 Thread Tom Judge
On 09/23/2010 03:30 PM, David Christensen wrote: >>> Failure to allocate a new buffer should cause the driver to >>> drop the received frame and reuse the buffer, not lock up the >>> system. Are you seeing the lockup come from bce(4) or does >>> it come from somewhere else due to the dropped data?

brgphy - Disabling flow control from the host

2010-09-23 Thread Tom Judge
Hi, I was looking though the brgphy code toady looking for a way to control flow control from the host rather than from the switch but didn't find any hints. Is it possible to control the flow control negotiation on these PHY's? Thanks Tom -- TJU13-ARIN __

Re: bce(4) - com_no_buffers (Again)

2010-09-23 Thread Tom Judge
The throttle command I am using in the tests is the one from here: http://klicman.org/throttle/ On 09/23/2010 02:26 PM, Tom Judge wrote: > On 09/23/2010 01:21 PM, David Christensen wrote: > >>>>> Under testing I have yet to see a memory fra

Re: bce(4) - com_no_buffers (Again)

2010-09-23 Thread Tom Judge
On 09/23/2010 01:39 PM, Pyun YongHyeon wrote: > On Thu, Sep 23, 2010 at 10:05:33AM -0500, Tom Judge wrote: > >> On 09/13/2010 03:53 PM, Pyun YongHyeon wrote: >> >>> On Mon, Sep 13, 2010 at 03:38:41PM -0500, Tom Judge wrote: >>> >>>

Re: bce(4) - com_no_buffers (Again)

2010-09-23 Thread Tom Judge
On 09/23/2010 01:21 PM, David Christensen wrote: Under testing I have yet to see a memory fragmentation issue with >> this >> driver. I follow up if/when I find a problem with this again. >> So here we are again. The system is locking up again

bce(4) un hiding adapter info

2010-09-23 Thread Tom Judge
Hi, Would it be possible to unhide the output of bce_print_adapter_info() from under boot verbose? This information is useful for comparing firmware and card versions between machines. Alternatively what about adding a sysctl under dev.bce.X for this info? Thanks Tom -- TJU13-ARIN _

Re: bce(4) - com_no_buffers (Again)

2010-09-23 Thread Tom Judge
On 09/13/2010 03:53 PM, Pyun YongHyeon wrote: > On Mon, Sep 13, 2010 at 03:38:41PM -0500, Tom Judge wrote: > >> On 09/13/2010 02:33 PM, Pyun YongHyeon wrote: >> >>> On Mon, Sep 13, 2010 at 02:07:58PM -0500, Tom Judge wrote: >>> >>> >

Re: Fwd: Re: Strange FreeBSD behavior when trying to forward beetween ipsec crypted gif's. May be a problem with ICMP unreach packets at all

2010-09-17 Thread Tom Judge
On 09/17/2010 03:18 AM, Vladimir Grigorov wrote: > greets all > > > >> If you take a look at icmp_error() in sys/netinet/ip_icmp.c you will see >> that icmp errors are not sent for packets that have been previously been >> decrypted by IPSec. >> > May be some misunderstandings happens.

Re: Strange FreeBSD behavior when trying to forward beetween ipsec crypted gif's. May be a problem with ICMP unreach packets at all

2010-09-16 Thread Tom Judge
On 09/16/2010 09:00 AM, Vladimir Grigorov wrote: > Greetings all. > > > I have strange problems related to passage icmp need-frag packets, and, as > result, all packets with packets length greater than output gif MTU. > > Network diagram: > > [HostA] -- (mtu 1500) --- [FW1] --- ipsec gif mtu 1280

Re: bce(4) - com_no_buffers (Again)

2010-09-13 Thread Tom Judge
On 09/13/2010 02:33 PM, Pyun YongHyeon wrote: > On Mon, Sep 13, 2010 at 02:07:58PM -0500, Tom Judge wrote: > >> On 09/13/2010 01:48 PM, Pyun YongHyeon wrote: >> >>> On Mon, Sep 13, 2010 at 10:04:25AM -0500, Tom Judge wrote: >>> >>>

Re: bce(4) - com_no_buffers (Again)

2010-09-13 Thread Tom Judge
On 09/13/2010 02:11 PM, Andre Oppermann wrote: > On 13.09.2010 20:48, Pyun YongHyeon wrote: >> On Mon, Sep 13, 2010 at 10:04:25AM -0500, Tom Judge wrote: >>> Without BCE_JUMBO_HDRSPLIT then we see no errors. With it we see >>> number >>> of errors, however th

Re: bce(4) - com_no_buffers (Again)

2010-09-13 Thread Tom Judge
On 09/13/2010 01:48 PM, Pyun YongHyeon wrote: > On Mon, Sep 13, 2010 at 10:04:25AM -0500, Tom Judge wrote: > >> >> Does this mean that these cards are going to perform badly? This is was >> what I gathered from the previous thread. >> >> > I mean t

Re: bce(4) - com_no_buffers (Again)

2010-09-13 Thread Tom Judge
On 09/09/2010 07:24 PM, Pyun YongHyeon wrote: > On Thu, Sep 09, 2010 at 03:58:30PM -0500, Tom Judge wrote: > >> Hi, >> I am just following up on the thread from March (I think) about this issue. >> >> We are seeing this issue on a number of systems running 7.1.

bce(4) - com_no_buffers (Again)

2010-09-09 Thread Tom Judge
Hi, I am just following up on the thread from March (I think) about this issue. We are seeing this issue on a number of systems running 7.1. The systems in question are all Dell: * R710 R610 R410 * PE2950 The latter do not show the issue as much as the R series systems. The cards in one of t

Re: LLDP

2010-08-09 Thread Tom Judge
On 08/02/2010 09:22 AM, Vasily Samoilov wrote: > Hello. > Do anyone knows any way to recieve (not send) LLDP (CDP, etc) packets > from other networking hardware and query neighbour discovery results > from FreeBSD box via snmp? > Thanks in advance! > There is the OpenLLDP project that I have had s

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2010-01-13 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Christensen wrote: >>> Does the attached patch make a difference for you? >> This patch seems to do the trick, on at least one of the >> R610's that we have. >> >> Just did cold boot, 5 warm boots, cold boot, 5 warm boots and >> have not had an

Re: Not seeing data on an unnumbered interface...

2009-12-14 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kurt Buff wrote: > Sigh. Yes, that works. > > So, to expose even more of my ignorance, any thoughts on why it isn't > up at boot? > /etc/rc.conf: ifconfig_em0="UP" > Kurt > > On Mon, Dec 14, 2009 at 11:35, Jack Vogel wrote: >> Not familiar wi

Re: carp(4) and VRRP on the same segment

2009-12-09 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Claudio Jeker wrote: > On Wed, Dec 09, 2009 at 02:43:46PM +0000, Tom Judge wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Hi, >> >> We have had some issues with running both carp and VRRP i

carp(4) and VRRP on the same segment

2009-12-09 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, We have had some issues with running both carp and VRRP in the same physical segment. It has mostly caused issues with the embedded devices running VRRP. One other side affect is the hugely verbose output on the FreeBSD side where carp is compla

Re: ifconfig: BRDGADD tun0: Invalid argument

2009-12-08 Thread Tom Judge
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Boris Kochergin wrote: > Ahoy. I have an 8.0-RELEASE/i386 machine (installed clean from the CD, > so no kernel/world mismatches are possible) on which I am trying to add > a tun device to a bridge: > > # ifconfig tun0 create > # ifconfig bridge0 creat

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-11-24 Thread Tom Judge
David Christensen wrote: For the record we also have not been able to reproduce the issue on the R710 only the R610. I got hold of an R610 system and I now understand why the issue was difficult to replicate on R710. The R610 ships without Enterprise iDRAC while the R710 ship with the add-in

Re: if_bridge as if_vlan parent

2009-11-21 Thread Tom Judge
Josh Paetzel wrote: On Nov 21, 2009, at 11:39 AM, Tom Judge wrote: Hi, I was why I get the following error when trying to create a vlan on top of if_bridge: # ifconfig bridge0 create # ifconfig vlan2 vlan 2 vlandev bridge0 ifconfig: SIOCSETVLAN: Protocol not supported And if there was/is

if_bridge as if_vlan parent

2009-11-21 Thread Tom Judge
Hi, I was why I get the following error when trying to create a vlan on top of if_bridge: # ifconfig bridge0 create # ifconfig vlan2 vlan 2 vlandev bridge0 ifconfig: SIOCSETVLAN: Protocol not supported And if there was/is any reason for this to not be supported. Thanks Tom

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-11-12 Thread Tom Judge
David Christensen wrote: Is there any progress on this issue? We can provide access to hardware with this fault (Specifically the R610). I haven't been able to reproduce it on the r710 I have in house. Checking with other groups now to see if they have one a I can use, though I'm not sure why

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-11-11 Thread Tom Judge
David Christensen wrote: Hi, we have two new Dell R610 machines with four bce NICs (only bce0 is connected at this time). I tried cold (power cycle in iDRAC) and warm reboot (shutdown -r now), NIC is working on every reboot, but I am still seeing messages: bce0: /usr/src/sys/dev/bce/if_bce.c

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-30 Thread Tom Judge
Tom Judge wrote: David Christensen wrote: The next test is to diable the LOM's management firmware but boot to an active network. After disabling the management firmware and doing 1 cold reboot and 3 warms all worked correctly. After re enabling the firmware and doing 1 cold reboot

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-29 Thread Tom Judge
David Christensen wrote: The next test is to diable the LOM's management firmware but boot to an active network. Get the User Diag utility at the bottom of http://www.broadcom.com/support/ethernet_nic/netxtremeii.php. Run the uxdiag utility with the command line: "C:\>uxdiag -c 0 -mfw 0 -c 1

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-29 Thread Tom Judge
David Christensen wrote: Can you try a different test? Power-on the system with the network cable attached to an idle switch (i.e. keep all network traffic from being forwarded to the NIC during driver initialization). Does the system power up successfully? Repeatedly? The problem I saw wa

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-29 Thread Tom Judge
David Christensen wrote: After fighting with the update process for a bit and then learning about the live cycle manager I have managed to test the R610 with the 5.0.9 firmware. On the face of it, it seems that this resolves the issue. After a reboot this morning the error has resurfaced and

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-29 Thread Tom Judge
Tom Judge wrote: David Christensen wrote: Thanks for the rapid response. Dell have firmware 5.0.9 on their website here: http://tiny.cc/ex834 Will that work? Yes, that release does include a good version of BCM5709 bootcode (v5.06). I couldn't really tell until I downloaded the fil

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-28 Thread Tom Judge
David Christensen wrote: Thanks for the rapid response. Dell have firmware 5.0.9 on their website here: http://tiny.cc/ex834 Will that work? Yes, that release does include a good version of BCM5709 bootcode (v5.06). I couldn't really tell until I downloaded the file and looked at the tempor

Re: snort on multiple interfaces

2009-10-28 Thread Tom Judge
Andrea Venturoli wrote: Some years ago, I checked to see whether I would be able to let a single snort process listen on more than one NIC. At the time it was only possible in Linux. Now, I searched a bit, but nothing new came up. Did anything improve since then? Do we still need multiple snor

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-27 Thread Tom Judge
Steven Hartland wrote: On Tue, 27 Oct 2009 23:02:09 - "Steven Hartland" mentioned: If I understand the PR comments right, the code to support this PHY should be present in 8.0. So you can start by trying out 8.0-RC1 ISO image (or USB stick image, fwiw). Just tried 8.0RC2 no go, PHY sti

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-27 Thread Tom Judge
First sorry for the top post, the blackberry won't allow me to bottom post or I can't find the option. I will try this update when I get to the office in the morning. Hopefully it will resolve the issue. Thanks Tom --Original Message-- From: David Christensen To: Tom J

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-27 Thread Tom Judge
David Christensen wrote: Has anyone seen these errors before: http://www.freebsd.org/cgi/query-pr.cgi?pr=135836&cat= The system is a Dell R610 and it happens on both cold and warm boots. I am about to check a second chassis, and test with 8, and will follow up after my tests. Yes, I've

Re: kern/108542: [bce] Huge network latencies with 6.2-RELEASE / STABLE

2009-10-27 Thread Tom Judge
The following reply was made to PR kern/108542; it has been noted by GNATS. From: Tom Judge To: bug-follo...@freebsd.org, r...@unix-asp.com Cc: Subject: Re: kern/108542: [bce] Huge network latencies with 6.2-RELEASE / STABLE Date: Tue, 27 Oct 2009 21:53:41 + This should not be a problem

Re: kern/107850: [bce] bce driver link negotiation is faulty

2009-10-27 Thread Tom Judge
The following reply was made to PR kern/107850; it has been noted by GNATS. From: Tom Judge To: bug-follo...@freebsd.org, ol...@ipunplugged.com Cc: Subject: Re: kern/107850: [bce] bce driver link negotiation is faulty Date: Tue, 27 Oct 2009 21:51:05 + This bug should not be present in

bce(4) PRs - brief analysis

2009-10-27 Thread Tom Judge
Hi, I went looking though all the PRs related to bce(4) this afternoon trying to shed some light on my R610 issue and came across the following duplicates: No SerDes PHY Support: kern/139761 kern/136417 kern/134658 - and possibly kern/118238 however this is different controller. CTX Write

Re: kern/134658: [bce] bce driver fails on PowerEdge m610 blade.

2009-10-27 Thread Tom Judge
The following reply was made to PR kern/134658; it has been noted by GNATS. From: Tom Judge To: bug-follo...@freebsd.org, harald_jen...@dell.com Cc: Subject: Re: kern/134658: [bce] bce driver fails on PowerEdge m610 blade. Date: Tue, 27 Oct 2009 21:32:24 + Hi, This seems to be a

Re: kern/135836: [bce] bce BCM5709 Watchdog after warm boot - ok after cold boot

2009-10-27 Thread Tom Judge
The following reply was made to PR kern/135836; it has been noted by GNATS. From: Tom Judge To: bug-follo...@freebsd.org, rwilli...@borderware.com Cc: Subject: Re: kern/135836: [bce] bce BCM5709 Watchdog after warm boot - ok after cold boot Date: Tue, 27 Oct 2009 21:30:51 + Hi, This

Re: kern/139761: [bce] bce driver on IBM HS22 [No PHY found on Child MII bus]

2009-10-27 Thread Tom Judge
The following reply was made to PR kern/139761; it has been noted by GNATS. From: Tom Judge To: bug-follo...@freebsd.org, sebastian.tym...@gmail.com Cc: Subject: Re: kern/139761: [bce] bce driver on IBM HS22 [No PHY found on Child MII bus] Date: Tue, 27 Oct 2009 21:25:30 + Hi, This

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-27 Thread Tom Judge
to my page. Tom - Original Message - From: "Tom Judge" To: Cc: ; "Xin LI" ; "David Christensen" ; ; "Stanislav Sedov" Sent: Tuesday, October 27, 2009 8:11 PM Subject: Re: bce(4) BCM5907 CTX write errors on 7.2 driver Tom Judge wrote:

Re: bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-27 Thread Tom Judge
Tom Judge wrote: Hi, Has anyone seen these errors before: http://www.freebsd.org/cgi/query-pr.cgi?pr=135836&cat= The system is a Dell R610 and it happens on both cold and warm boots. I am about to check a second chassis, and test with 8, and will follow up after my tests. Here ar

bce(4) BCM5907 CTX write errors on 7.2 driver

2009-10-27 Thread Tom Judge
Hi, Has anyone seen these errors before: http://www.freebsd.org/cgi/query-pr.cgi?pr=135836&cat= The system is a Dell R610 and it happens on both cold and warm boots. I am about to check a second chassis, and test with 8, and will follow up after my tests. Tom _

Re: FreeBSD + Samba + Active Directory

2009-10-09 Thread Tom Judge
Andrea Venturoli wrote: Hello. I have a setup with two FreeBSD 6.3 domain controllers using samba + openldap + nss_ldap. The company might be switching to Active Directory soon (not my choice, before you ask :-), so I might need to reconfigure the two FreeBSD boxes to become AD members (with

Re: CARP and LACP

2009-10-03 Thread Tom Judge
Andrea Venturoli wrote: Hello. Fast question: are the two above compatible? Can I use CARP over a lagg interface? Yes it should work just fine, we use it here with lagg+carp and lagg+vlan+carp. Tom bye & Thanks av. ___ freebsd-net@freebsd

Re: CARP IP level load balancing

2009-01-21 Thread Tom Judge
Luiz Otavio O Souza wrote: Date: Tuesday, January 20, 2009, 9:30 AM In FreeBSD there is only ARP level LB, that is in some cases just not enough for load balancing. Is there any plans to port IP level LB from OpenBSD, and, if yes, will it be ported to 7x and 6x? In my opinion, full CARP realizat

Re: kern/96268: [socket] TCP socket performance drops by 3000% if packets are split at the first byte

2009-01-15 Thread Tom Judge
Jost Boekemeier wrote: Hi, from my point of view this issue can be closed. TCP write/write/read sequences are bad on any operating system, it's just that other OS are a little bit smarter. -- I think Jon Nagle has had a proposal to fix/remove this unconditional delay, but I don't know if it

Re: kern/87194: [fxp] fxp(4) promiscuous mode seems to corrupt hw-csum

2009-01-14 Thread Tom Judge
The following reply was made to PR kern/87194; it has been noted by GNATS. From: Tom Judge To: bug-follo...@freebsd.org, gr...@freebsd.org Cc: Subject: Re: kern/87194: [fxp] fxp(4) promiscuous mode seems to corrupt hw-csum Date: Wed, 14 Jan 2009 19:22:17 -0600 Can you add the output of

Re: kern/96268: [socket] TCP socket performance drops by 3000% if packets are split at the first byte

2009-01-14 Thread Tom Judge
The following reply was made to PR kern/96268; it has been noted by GNATS. From: Tom Judge To: bug-follo...@freebsd.org, jost2...@users.sourceforge.net Cc: Subject: Re: kern/96268: [socket] TCP socket performance drops by 3000% if packets are split at the first byte Date: Wed, 14 Jan 2009 19

Re: tcpdump/snort to capture chat sessions

2008-06-11 Thread Tom Judge
Bill Moran wrote: In response to R J <[EMAIL PROTECTED]>: I am trying to use tcpdump (or snort, but they are both behaving the same in this case) to capture all the lines or contents of an msn chat session, the actual conversation. I am getting partial output; i.e, I'll only get half of a se

Re: ICMP Error transmission/response over IPSec tunnels

2008-05-27 Thread Tom Judge
Bjoern A. Zeeb wrote: On Tue, 27 May 2008, Tom Judge wrote: Hi, Yes we do indeed see a reply from node b. It is good to here that this is a known issue. The IPSec configuration is a gif ipip tunnel that is then encrypted with IPSec using esp in tunnel mode as per the ipsec vpn section in

Re: ICMP Error transmission/response over IPSec tunnels

2008-05-27 Thread Tom Judge
Bjoern A. Zeeb wrote: On Tue, 27 May 2008, Tom Judge wrote: Hi, Today I looked into why I can not get a traceroute across a IPSec IPIP tunnel I guess not an IPIP tunnel but just IPsec tunnel mode? ... Any information about this would be appreciated as I would like to be able to do

ICMP Error transmission/response over IPSec tunnels

2008-05-27 Thread Tom Judge
Hi, Today I looked into why I can not get a traceroute across a IPSec IPIP tunnel an came across an interesting piece of code. Here is a diagram of the setup: [Node A] <-> [Router A] <-{IPSec}-> [Router B] <-> [Node B] If I traceroute from node A to node B I never see the ICMP packet for

Re: OS throws away large packets

2008-04-28 Thread Tom Judge
Mr Y wrote: Hi all, I'm trying to implement Large Recieve Offload for an Ethernet driver on FreeBSD 6.3, but all my >MTU packets are being thrown by the OS. I'm using mbuf chains in this imlpementation, each mbuf is a cluster of MCLBYTES bytes. They are linked by the m_next pointer. The first pa

Re: Multiple default routes on multihome host

2008-02-18 Thread Tom Judge
Bill Moran wrote: In response to Eygene Ryabinkin <[EMAIL PROTECTED]>: Bill, Mon, Feb 18, 2008 at 04:36:18PM -0500, Bill Moran wrote: I would suggest you ask yourself (and possibly the list) _why_ you think multiple default routes is necessary ... what is it that you're hoping to accomplish.

Re: Multiple default routes on multihome host

2008-02-18 Thread Tom Judge
Nick Barnes wrote: At 2008-02-18 21:36:18+, Bill Moran writes: I would rather send packets from the P2 subnet addresses to the P2 router, while the packets from the P1 subnet addresses keep going to the P1 router. Apparently I can do this with some IPFW cunning, but that seems like overk

Re: Kernel compile options

2008-02-13 Thread Tom Judge
Michael Tuexen wrote: <> (also, please don't top post) Why not? I do that a lot... Please read: http://www.html-faq.com/etiquette/?toppost It outlines the arguments quite well. Tom1 ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.or

Re: Kernel compile options

2008-02-12 Thread Tom Judge
Michael Tuexen wrote: Hi George, thanks for the feedback. So I'll make sure that one can compile SCTP with only INET enabled. You mention nothing about SCTP in you original post. I belive that SCTP depends on both INET and INET6. Tom Best regards Michael On Feb 12, 2008, at 3:39 PM, [EMA

Re: Newb question

2008-02-09 Thread Tom Judge
Kurt Buff wrote: All, My company is getting a fractional DS3 in the near future, and I've acquired a Sangoma a301 card to handle the interface. We're retaining one of the T1s we currently have, from a different provider, and we're intent on using BGP to manage the two connections. Does anyone

Re: VLAN problems

2008-01-30 Thread Tom Judge
Alexandre Biancalana wrote: On 1/30/08, Tom Judge <[EMAIL PROTECTED]> wrote: Do you have any error messages on the console in dmesg? ('cannot pad short frame', 'unable to prepend vlan header' for example). no :( Sorry I'm fresh out of ideas now... Un

Re: VLAN problems

2008-01-30 Thread Tom Judge
Alexandre Biancalana wrote: On 1/29/08, Tom Judge <[EMAIL PROTECTED]> wrote: Alexandre Biancalana wrote: Hi Tom ! Thanks for your help! I had to step back the chance an put the "old" gateway back, the performance was unacceptable :-( Looking closer I see that still have t

Re: VLAN problems

2008-01-30 Thread Tom Judge
Andrei Kolu wrote: Alexandre Biancalana wrote: This server is an Dell Power Edge 1950, QuadCore 2.83, 2Gb Ram, one bce gigabit interface connected to a gigabit port of a Cisco 4500 in trunk mode. Why you are using trunk mode? IIRC then "trunk" is used only between Cisco switches and routers

Re: VLAN problems

2008-01-29 Thread Tom Judge
Alexandre Biancalana wrote: Hi Tom ! Thanks for your help! I had to step back the chance an put the "old" gateway back, the performance was unacceptable :-( Looking closer I see that still have the problem using the old gateway too, in a small scale because I only use vlan to external links.

Re: VLAN problems

2008-01-29 Thread Tom Judge
Alexandre Biancalana wrote: Hi Tom ! Thanks for your help! I had to step back the chance an put the "old" gateway back, the performance was unacceptable :-( Where these 2 systems connected to the same switch port and cabling? Could you post the interface error counters from the switch port?

Re: VLAN problems

2008-01-29 Thread Tom Judge
Alexandre Biancalana wrote: Hi list, I changed the company gateway implementing vlan concept and now I have a lot of slow and packet loss. I'm running FreeBSD FW1 7.0-PRERELEASE FreeBSD 7.0-PRERELEASE #0: Fri Jan 25 10:36:18 UTC 2008 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/FW amd64

Re: help

2008-01-21 Thread Tom Judge
David DeSimone wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tom Judge <[EMAIL PROTECTED]> wrote: my question is how to configure 2 nics with different ip on same box in the same subnet. Configure the second with a /32 prefix (netmask 255.255.255.255) instead of the usual n

Re: help

2008-01-21 Thread Tom Judge
Bruce M. Simpson wrote: Enovation Technologies wrote: i configure with sysinstall my second nic , but when i restart my box i have this message arp: 10.200.1.1 is on re0 but got reply from 00:50:7f:b0:a0:f8 on re1 my question is how to configure 2 nics with different ip on same box in the

Re: Tuning of IP_MAX_MEMBERSHIPS for IP Multicast Sockets

2008-01-17 Thread Tom Judge
Eugene Grosbein wrote: On Thu, Jan 17, 2008 at 12:49:54PM +, Tom Judge wrote: On RELENG_6_2 the max multicast memberships per socket (IP_MAX_MEMBERSHIPS) is hard coded in sys/netinet/in.h to 20. Would there be any problem with bumping this to say 40. The problem is our VPN routers

Tuning of IP_MAX_MEMBERSHIPS for IP Multicast Sockets

2008-01-17 Thread Tom Judge
Hi, On RELENG_6_2 the max multicast memberships per socket (IP_MAX_MEMBERSHIPS) is hard coded in sys/netinet/in.h to 20. Would there be any problem with bumping this to say 40. The problem is our VPN routers running quagga (ospf) seem to be hitting this limit. I know the problem is fixed

Re: if_bridge forwarding incorrectly forwarding ethernet link local addressed packets (e.g. lldp)

2008-01-17 Thread Tom Judge
Andrew Thompson wrote: On Thu, Jan 17, 2008 at 02:22:53AM +, Tom Judge wrote: Hi, As brought up in the thread "Programming interface MAC filter without enabling PROMISC on an interface from user space." it would seem that if_bridge does not conform to IEEE 802.1D-2004. Wh

if_bridge forwarding incorrectly forwarding ethernet link local addressed packets (e.g. lldp)

2008-01-16 Thread Tom Judge
Hi, As brought up in the thread "Programming interface MAC filter without enabling PROMISC on an interface from user space." it would seem that if_bridge does not conform to IEEE 802.1D-2004. Which states: 7.12.6 Reserved addresses Frames containing any of the group MAC Addresses specified

Re: Programming interface MAC filter without enabling PROMISC on an interface from user space.

2008-01-15 Thread Tom Judge
Bruce M. Simpson wrote: Tom Judge wrote: Personally I can't see why this approach would be a problem, but I am not a expert. The address is defined in IEEE Std 802.1D-2004 as to not be forwarded by bridges (which I interpret as it being link local in a sense as switches/bridges ar

Re: Programming interface MAC filter without enabling PROMISC on an interface from user space.

2008-01-14 Thread Tom Judge
Bruce M. Simpson wrote: Tom Judge wrote: Thanks for the response. I have a quick grep of the src tree to find an example of this being used and only found the following from wpa_supplicant and I have a few questions: * I am presuming that this will do what I want, am I correct? Yes

Re: Programming interface MAC filter without enabling PROMISC on an interface from user space.

2008-01-14 Thread Tom Judge
Bruce M. Simpson wrote: Tom Judge wrote: Hi, I have just started experimenting with OpenLLDP and come across a little bit of a nasty. When it opens the interface, it puts it into PROMISC mode, which I don't really want to happen. Is there any way to add the LLDP MAC address (01-80-

Programming interface MAC filter without enabling PROMISC on an interface from user space.

2008-01-14 Thread Tom Judge
Hi, I have just started experimenting with OpenLLDP and come across a little bit of a nasty. When it opens the interface, it puts it into PROMISC mode, which I don't really want to happen. Is there any way to add the LLDP MAC address (01-80-C2-00-00-0E) to the interface mac filter from use

Re: Spurious error from i[pf]_carp

2007-12-16 Thread Tom Judge
Bruce M. Simpson wrote: Max Laier wrote: Alternatively you could change IPPROTO_CARP in netinet/in.h to another unused protocol number. This is really the preferred way of dealing with mixed CARP and VRRP environments as the CARP packets might in turn irritate the VRRP routers, too. This

Spurious error from i[pf]_carp

2007-12-14 Thread Tom Judge
Hi, I have just looked into the source of an error that we are seeing a lot on our FreeBSD 6.2-p5 systems. The error is: "carp_input: received len 20 < sizeof(struct carp_header)" The messages are coming from a pair of systems that are configured to have a pair of load balancing carp interfa

Re: Marvell chipsets on 8-CURRENT and XP x64 won't talk with one another

2007-10-25 Thread Tom Judge
Garrett Cooper wrote: Mike Silbersack wrote: On Fri, 19 Oct 2007, Garrett Cooper wrote: Just to clarify, how are the two hooked together? Is it over gigabit switch, a 10mbps hub, or directly cabled together? -Mike Sure. They're both connected over a gigabit switch, but the Windows dri

Re: Samba with AD support not compile

2007-10-10 Thread Tom Judge
Subscriber wrote: Thank you very much, Tom. It works! Cache. One thing that you should note is that if you plan to "make buildworld" you have to deinstall security/krb5 otherwise the buildworld will fail. Tom Tom Judge пишет: Subscriber wrote: Hi I just tried to install

Re: Samba with AD support not compile

2007-10-10 Thread Tom Judge
Subscriber wrote: Hi I just tried to install net/samba3 (samba-3.0.26a_1,1) on new server and have an error. Error occurs only when I enable "ADS" option in port config dialog. Then I try to compile port with gcc-4.2.2 instead of default system compiler and has the same result. Does anybody kno

Re: new mbuf flag proposal

2007-09-30 Thread Tom Judge
Oleg Bulyzhin wrote: Hi all. Recently, i discovered following problem (though it was already discussed, see http://freebsd.rambler.ru/bsdmail/freebsd-ipfw_2006/msg00491.html): pfil handlers (like ipfw or pf) sometime need to create packets (like tcp rst or icmp errors). In order to avoid loops M

Re: Strange behaviour of route command

2007-09-17 Thread Tom Judge
Giorgos Keramidas wrote: On 2007-09-10 14:05, Giorgos Keramidas <[EMAIL PROTECTED]> wrote: On 2007-09-10 02:03, Nuno Antunes <[EMAIL PROTECTED]> wrote: Tom Judge wrote: Hi, While making some changes to the routing table on one of our routers today I noticed that "route add&

Re: nested vlans and ethernet frame size

2007-09-10 Thread Tom Judge
Ivan Alexandrovich wrote: Hi I'd like to ask for advice - what is the right place for setting maximum ethernet frame size in freebsd? It needs 1526 bytes to allow two vlan tags per packet. Those tags must be processed by ng_vlan code so it seems that vlanmtu interface flag will be of no use here

Re: axe(4) and Linksys USB200M question

2007-09-10 Thread Tom Judge
Scott Bennett wrote: My Dell Inspiron XPS has just one built-in Ethernet port, and I need to have at least one other. Armed with a printed copy of Section 3.2 of the FreeBSD 6.2 Harware Notes, I went to the several electronics stores, looking to find a device on the list of supported device

Strange behaviour of route command

2007-09-07 Thread Tom Judge
Hi, While making some changes to the routing table on one of our routers today I noticed that "route add" was showing some strange behaviour. When adding a route for 128/8 to the table rather than adding 128.0.0.0/8 it would add 0.0.0.0/8, however adding 10/9 works correctly. Is this a bug i

Re: Interface Status changes to UP and Down

2007-09-06 Thread Tom Judge
Gloomy Group wrote: Hi all, I am running Freebsd 6.2 as Transparent proxy Server. My hardware is Intel(R) Pentium(R) 4 CPU 3.00GHz, 1GB DDR2 Memory and 2 SATA hardisk. While checking dmesg it shows link state change to up and Down and sometimes the server crashes. ipfw: pullup failed ipfw

Re: If_bridge and MST

2007-09-04 Thread Tom Judge
Shteryana Shopova wrote: On 9/4/07, Andrew Thompson <[EMAIL PROTECTED]> wrote: On Mon, Sep 03, 2007 at 10:21:20PM +0100, Tom Judge wrote: Andrew Thompson wrote: On Mon, Sep 03, 2007 at 02:11:59PM +0100, Tom Judge wrote: Hi, I was wondering if if_bridge had been taught how to speak mu

  1   2   >