Re: FreeBSD -> Windows HTTP TCP performance

2004-01-21 Thread Dmitry A. Bondareff
- Original Message - From: "CHOI Junho" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Monday, January 19, 2004 9:27 AM Subject: Re: FreeBSD -> Windows HTTP TCP performance > > After more investigation, I realized the problem is on the router > side. I think th

What does it mean: arp_rtrequest: bad gateway value

2004-01-21 Thread Vasenin Alexander aka BlackSir
Those messages sometimes appears in log. Maybe someone know where to find what it actually mean? Jan 21 02:58:54 inet /kernel: arp_rtrequest: bad gateway value Jan 21 03:03:54 inet /kernel: arp_rtrequest: bad gateway value Jan 21 03:08:53 inet /kernel: arp_rtrequest: bad gateway value Jan 21 03:13

Re: MPD server not routing

2004-01-21 Thread Gleb Smirnoff
On Tue, Jan 20, 2004 at 10:11:48PM -0800, Andrew Thomas wrote: A> > A> I'm trying to get mpd working as a simple vpn server. I'm doing A> > A> this on a 4.9-STABLE machine of a week or so ago. No matter what A> > A> I do, packets will not route to the client. The login is fine, A> > A> the serve

Re: forged tsecr giving -ve numbers in rtt calculation causing retran

2004-01-21 Thread Mike Silbersack
On Tue, 20 Jan 2004, Richard Wendland wrote: > This does suggest Ken is seeing TSecr messed up in some other way than > simple zeroing. Or working from an old codebase... we'll have to wait for him to respond to find out. KEN! KEN! WHERE ARE YOO? > I'd expect this to be a pretty rare eve

netgraph: ng_eiface and bpf gives duplicate packets

2004-01-21 Thread Jonas Bulow
Hi, Using bpf with ng_eiface results in duplication of all incoming packets. The duplicated packet is only "visible" on the bpf tap and the ngeth interface works as expected besides this behaviour with bpf. The following examplifies the problem: (pasted from my memory) ngctl -f- < tcpdump-n -i

Re: Two ISP lines

2004-01-21 Thread Dinesh Nair
On Wed, 21 Jan 2004, Dinesh Nair wrote: > will do. i'm on 4.9-STABLE. will try the following in this order: > > 1. the multipath patches > 2. security/pf port > 3. rewriting ng_ether to plonk in the new ip address directly into the >mbuf. along with ng_one2many, this should provide the same >

Re: netgraph: ng_eiface and bpf gives duplicate packets

2004-01-21 Thread Ruslan Ermilov
On Wed, Jan 21, 2004 at 10:11:21AM +0100, Jonas Bulow wrote: > Using bpf with ng_eiface results in duplication of all incoming packets. > The duplicated packet is only "visible" on the bpf tap and the ngeth > interface works as expected besides this behaviour with bpf. [...] > > This problem occ

Re: What does it mean: arp_rtrequest: bad gateway value

2004-01-21 Thread Ruslan Ermilov
On Wed, Jan 21, 2004 at 10:51:18AM +0300, Vasenin Alexander aka BlackSir wrote: > Those messages sometimes appears in log. Maybe someone know where to find > what it actually mean? > > Jan 21 02:58:54 inet /kernel: arp_rtrequest: bad gateway value > Jan 21 03:03:54 inet /kernel: arp_rtrequest: bad

setsockopt IP_ADD_MEMBERSHIP not honored

2004-01-21 Thread sammy davis
Does the behavior described in http://lists.freebsd.org/pipermail/freebsd-net/2003-October/001726.html apply to Solaris 8 systems? Also, can you tell me what the difference is between binding IPADDR_ANY, a local network ip address or multicast ip address to the socket and should you use the sam

Re: Two ISP lines

2004-01-21 Thread Adrian Pavlykevych
Dinesh Nair wrote: while this multipath patch does round robin the packets (according to pathmetric) across the two gateways, it does not change the source ip address of the packet to correspond with the interface it went out on. as such, the round robin works this way. the first 10 packets are se

Re: Two ISP lines

2004-01-21 Thread Dinesh Nair
On Wed, 21 Jan 2004, Adrian Pavlykevych wrote: > Hmm, have you accounted for the fact, that if packets of same connection > will be distributed in round-robin fashion between several outgoing > interfaces and get their src IP "fixed", destination host won't see that > as single connection and dro

Re[2]: netgraph questions on ng_tee, ng_iface, ng_socket

2004-01-21 Thread Andrew Riabtsev
Tuesday, January 20, 2004, 9:51:52 PM, you wrote: DN> On Tue, 20 Jan 2004, Gleb Smirnoff wrote: >> Isn't ng_etf(4) the one you need? DN> ng_etf does filtering, i'm planning on doing round robin IP tranmission, DN> with source IP address set accordingly. see ng_one2many which gives an DN> exampl

RTM_LOSING: Kernel Suspects Partitioning

2004-01-21 Thread Brad du Plessis
Hi, I've tried a NetBSD mailing list to no avail and was hoping that someone here could help me. I have the following setup: A - B == C Box A and Box B are on a LAN both on the same subnet. Now from box B I make a pppd modem dialup to box C. Manual routes are setup on A and C to allow

RE: forged tsecr giving -ve numbers in rtt calculation causing re tran

2004-01-21 Thread Ken Faiczak
it is on 4.7 since that is what our product is using but the same code still exists in 5.2 (we're actively migrating our product there) We definitely are seeing incorrect Tsecr returned (ie not 0, but tsecr > ticks, thus the -ve result) The question was more that it could be a problem in general

netgraph: bridge with fwd and divert

2004-01-21 Thread Andrew Riabtsev
Hi, All I'm trying to let my FreeBSD 4.9 box, working as bridge, divert and fwd bridged packets. As i undestand it is not realized in FreeBSD 4.9. I was thinking about to do it (realize), but im too lazy and when i see this huge amount of work i start thinking :) Befor i continue my work i just w

PF installation on 5.2-RELEASE

2004-01-21 Thread Art Mason
Hello, My sincerest apologies if this isn't the correct list to post this question to, but I was wondering if anyone has any guidelines/procedures to follow regarding the correct installation method for PF on FreeBSD 5.2-RELEASE. I know of its existence in ports/security, but was wondering if the

RE: [Freebsd-net] PF installation on 5.2-RELEASE

2004-01-21 Thread Remko Lodder
from pkg-message which lives in /usr/ports/security/pf/ To use pf, please follow these steps: 1. Add kernel options into your kernel config file and recompile kernel: device bpf options PFIL_HOOKS options RANDOM_IP_ID 2. Please set the following variables in /etc/rc.con

Re[2]: netgraph questions on ng_tee, ng_iface, ng_socket

2004-01-21 Thread Dinesh Nair
On Wed, 21 Jan 2004, Andrew Riabtsev wrote: > 1 let default route be to fxp0 > 2 conncet fxp0's upper hook to "one" hook of ng_one2many > 3 connect lower hooks of fxp0 and aue0 to "many" hooks of ng_one2many > 4 u have what u r accept for the overwriting src ip > 5 time for uber hack ng_one2many:

RE: [Freebsd-net] PF installation on 5.2-RELEASE

2004-01-21 Thread Art Mason
Yes, indeed, many thanks for the quick response. I had read through the makefile, but wasn't sure if there were any additional settings that I should take into consideration. On that note, does anyone have any experience running PF under 5.2-RELEASE in a production environment, especially in conj

Troubleshooting network card/link

2004-01-21 Thread Kenneth W Cochran
Hello: Is there anything for FreeBSD that's analogous to Linux's "mii-diag" program? I'm (still) trying to troubleshoot a card's (mis)communication with a router. For background, see http://docs.freebsd.org/cgi/mid.cgi?200401120237.VAA15119655 Thanks, -kc __

Re: [Freebsd-net] PF installation on 5.2-RELEASE

2004-01-21 Thread Max Laier
On Wednesday 21 January 2004 16:58, Art Mason wrote: > Yes, indeed, many thanks for the quick response. I had read through > the makefile, but wasn't sure if there were any additional settings > that I should take into consideration. On that note, does anyone have > any experience running PF unde

Re: tcp mss MCLBYTES restriction

2004-01-21 Thread Andrew Gallatin
Andre Oppermann writes: > > Could you run some bechmarks with the current MCLBYTES rounding > and without it on 100Mbit 1.5kMTU and GigE with 9k MTU? David Borman is totally right. Clipping the mss is really worth it, especially with zero-copy sockets. Forget I said anything. Here is som

Re[2]: netgraph questions on ng_tee, ng_iface, ng_socket

2004-01-21 Thread Dinesh Nair
On Wed, 21 Jan 2004, Andrew Riabtsev wrote: > And now befor send out packet throw one of "many" hook just overwrite > ip-src address with address given in > node->private->enabledLinks[hook->private->numb] or whatever it is > called in ng_one2many.c you'd also need to overwrite the destination e

minor bug in user ppp?

2004-01-21 Thread Brooks Davis
I'm reviewing uses of sdl->sdl_data so see if I can make a minor change to the way that data is stored and I noticed what I think is a bug in the userland ppp implementation. It looks like it's trying to print the interface name from the sdl, but the precision specifier is wrong. A simpiler print

Re: minor bug in user ppp?

2004-01-21 Thread Brian Somers
Yep, that's a bug... feel free to apply the patch. Cheers. On Wed, 21 Jan 2004 13:01:52 -0800, Brooks Davis <[EMAIL PROTECTED]> wrote: > I'm reviewing uses of sdl->sdl_data so see if I can make a minor change > to the way that data is stored and I noticed what I think is a bug in > the userland p