Packages with the wrong source

2009-10-07 Thread Vladislav V. Prodan
I have two channels on the Internet PPPoE - tun1 and tun2. When you start ntpd, incoming packets begin to crumble with the first ISP, although requests come from the 2-nd ISP 23:40:53.548840 IP (tos 0x40, ttl 58, id 0, offset 0, flags [DF], proto UDP (17), length 76) 192.168.30.1.ntp > .ntp:

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Robert Watson wrote: On Wed, 7 Oct 2009, Eugene Grosbein wrote: On Tue, Oct 06, 2009 at 08:28:35PM +0500, rihad wrote: I don't think net.inet.ip.intr_queue_maxlen is relevant to this problem, as net.inet.ip.intr_queue_drops is normally zero or very close to it at all times. When net.isr.d

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
rihad wrote: I've yet to test how this direct=0 improves extensive dummynet drops. Ooops... After a couple of minutes, suddenly: net.inet.ip.intr_queue_drops: 1284 Bumped it up a bit. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.or

Re: dummynet dropping too many packets

2009-10-07 Thread Oleg Bulyzhin
Please show your 'sysctl net.inet.ip' output. -- Oleg. === Oleg Bulyzhin -- OBUL-RIPN -- OBUL-RIPE -- o...@rinet.ru ===

Re: dummynet dropping too many packets

2009-10-07 Thread Robert Watson
On Wed, 7 Oct 2009, rihad wrote: rihad wrote: I've yet to test how this direct=0 improves extensive dummynet drops. Ooops... After a couple of minutes, suddenly: net.inet.ip.intr_queue_drops: 1284 Bumped it up a bit. Yes, I was going to suggest that moving to deferred dispatch has probabl

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Robert Watson wrote: On Wed, 7 Oct 2009, rihad wrote: rihad wrote: I've yet to test how this direct=0 improves extensive dummynet drops. Ooops... After a couple of minutes, suddenly: net.inet.ip.intr_queue_drops: 1284 Bumped it up a bit. Yes, I was going to suggest that moving to deferre

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Oleg Bulyzhin wrote: Please show your 'sysctl net.inet.ip' output. net.inet.ip.portrange.randomtime: 45 net.inet.ip.portrange.randomcps: 10 net.inet.ip.portrange.randomized: 1 net.inet.ip.portrange.reservedlow: 0 net.inet.ip.portrange.reservedhigh: 1023 net.inet.ip.portrange.hilast: 65535 net.i

Re: dummynet dropping too many packets

2009-10-07 Thread Robert Watson
On Wed, 7 Oct 2009, rihad wrote: snapshot of the top -SH output in the steady state? Let top run for a few minutes and then copy/paste the first 10-20 lines into an e-mail. Sure. Mind you: now there's only 1800 entries in each of the two ipfw tables, so any drops have stopped. But it only t

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Robert Watson wrote: On Wed, 7 Oct 2009, rihad wrote: snapshot of the top -SH output in the steady state? Let top run for a few minutes and then copy/paste the first 10-20 lines into an e-mail. Sure. Mind you: now there's only 1800 entries in each of the two ipfw tables, so any drops have

Re: dummynet dropping too many packets

2009-10-07 Thread Oleg Bulyzhin
On Wed, Oct 07, 2009 at 02:23:47PM +0500, rihad wrote: Few questions: 1) why are you not using fastforwarding? 2) search_steps/searches ratio is not that good, are you using 'buckets' keyword in your pipe configuration? 3) you have net.inet.ip.fw.one_pass = 0, is it intended? -- Oleg. ==

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Oleg Bulyzhin wrote: On Wed, Oct 07, 2009 at 02:23:47PM +0500, rihad wrote: Few questions: 1) why are you not using fastforwarding? 2) search_steps/searches ratio is not that good, are you using 'buckets' keyword in your pipe configuration? 3) you have net.inet.ip.fw.one_pass = 0, is it inten

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
rihad wrote: Now the probability of drops (as monitored by netstat -s's "output packets dropped due to no bufs, etc.") is definitely a function of traffic load and the number of items in a ipfw table. I've just decreased the size of the two tables from ~2600 to ~1800 each and the drops instan

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
rihad wrote: net.isr.direct=0 Sorry, net.isr.direct=1 I forgot to revert it back after copy'n'pasting top -SH for Mr. Robert. top -SH: last pid: 2528; load averages: 0.69, 0.89, 0.96 up 1+02:15:20 15:26:01 165 processes: 12 running, 137 sleeping, 16 waiting

Re: dummynet dropping too many packets

2009-10-07 Thread Oleg Bulyzhin
On Wed, Oct 07, 2009 at 03:16:27PM +0500, rihad wrote: > Oleg Bulyzhin wrote: > > On Wed, Oct 07, 2009 at 02:23:47PM +0500, rihad wrote: > > > > Few questions: > > 1) why are you not using fastforwarding? > > 2) search_steps/searches ratio is not that good, are you using 'buckets' > >keyword i

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Oleg Bulyzhin wrote: On Wed, Oct 07, 2009 at 03:16:27PM +0500, rihad wrote: Oleg Bulyzhin wrote: On Wed, Oct 07, 2009 at 02:23:47PM +0500, rihad wrote: Few questions: 1) why are you not using fastforwarding? 2) search_steps/searches ratio is not that good, are you using 'buckets' keyword in

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
rihad wrote: Oleg Bulyzhin wrote: On Wed, Oct 07, 2009 at 03:16:27PM +0500, rihad wrote: Oleg Bulyzhin wrote: On Wed, Oct 07, 2009 at 02:23:47PM +0500, rihad wrote: Few questions: 1) why are you not using fastforwarding? 2) search_steps/searches ratio is not that good, are you using 'buckets

Re: dummynet dropping too many packets

2009-10-07 Thread Barney Cordoba
--- On Wed, 10/7/09, rihad wrote: > From: rihad > Subject: Re: dummynet dropping too many packets > To: "Oleg Bulyzhin" > Cc: freebsd-net@freebsd.org > Date: Wednesday, October 7, 2009, 7:23 AM > rihad wrote: > > Oleg Bulyzhin wrote: > >> On Wed, Oct 07, 2009 at 03:16:27PM +0500, rihad > wrot

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Its frightening to me that someone is managing such a large network with dummynet. Talk about stealing your customer's money. We have no customers - we're a charity ISP. Any alternatives? ALTQ? ___ freebsd-net@freebsd.org mailing list http://lists.free

Re: dummynet dropping too many packets

2009-10-07 Thread Oleg Bulyzhin
On Wed, Oct 07, 2009 at 03:52:56PM +0500, rihad wrote: > You probably have some special sources of documentation ;-) According to > man ipfw, both "netgraph/ngtee" and "pipe" decide the fate of the packet > unless one_pass=0. Or do you mean sprinkling smart skiptos here and > there? ;-) you ca

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Oleg Bulyzhin wrote: On Wed, Oct 07, 2009 at 03:52:56PM +0500, rihad wrote: You probably have some special sources of documentation ;-) According to man ipfw, both "netgraph/ngtee" and "pipe" decide the fate of the packet unless one_pass=0. Or do you mean sprinkling smart skiptos here and the

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Why isn't it enabled by default? Answering myself: probably because of this: The IP fastforwarding path does not generate ICMP redirect or source quench messages. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/fre

Re: dummynet dropping too many packets

2009-10-07 Thread Robert Watson
On Wed, 7 Oct 2009, rihad wrote: Robert Watson wrote: On Wed, 7 Oct 2009, rihad wrote: snapshot of the top -SH output in the steady state? Let top run for a few minutes and then copy/paste the first 10-20 lines into an e-mail. Sure. Mind you: now there's only 1800 entries in each of the

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Oleg Bulyzhin wrote: On Wed, Oct 07, 2009 at 03:52:56PM +0500, rihad wrote: P.S. have you tried net.inet.ip.fastforwarding=1? Yup, it didn't help at all. Reverting it back to 0 for now. ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.o

Re: panic in soabort

2009-10-07 Thread Robert N. M. Watson
On 1 Oct 2009, at 12:24, pluknet wrote: If you run into this again, let me know. Also, are you using accept filters on the box? Got it again (this time on 6.4-p5). P.S. It's funny to say: I got it on two boxes nearly simultaneously. Both from proftpd. See also my first mail (the same).

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Robert Watson wrote: Suggestions like increasing timer resolution are intended to spread out the injection of packets by dummynet to attempt to reduce the peaks of burstiness that occur when multiple queues inject packets in a burst that exceeds the queue depth supported by combined hardware de

Re: kern/127587: commit references a PR

2009-10-07 Thread dfilter service
The following reply was made to PR kern/127587; it has been noted by GNATS. From: dfil...@freebsd.org (dfilter service) To: bug-follo...@freebsd.org Cc: Subject: Re: kern/127587: commit references a PR Date: Wed, 7 Oct 2009 13:12:58 + (UTC) Author: stas Date: Wed Oct 7 13:12:43 2009 Ne

Re: dummynet dropping too many packets

2009-10-07 Thread Robert Watson
On Wed, 7 Oct 2009, rihad wrote: Suggestions like increasing timer resolution are intended to spread out the injection of packets by dummynet to attempt to reduce the peaks of burstiness that occur when multiple queues inject packets in a burst that exceeds the queue depth supported by combin

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Robert Watson wrote: I would suggest making just the HZ -> 4000 change for now and see how it goes. OK, I will try testing HZ=4000 tomorrow morning, although I'm pretty sure there still will be some drops. Can someone please say how to increase the "ifnet transmit queue sizes"? Unfortuna

Re: dummynet dropping too many packets

2009-10-07 Thread Ingo Flaschberger
Hi, can you send me the dmesg ouput from your networkcards when they are detected at booting? can you also send me a lspci and lspci -v ? Kind regards, ingo flaschberger ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mail

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Robert Watson wrote: In the driver init code in if_bce, the following code appears: ifp->if_snd.ifq_drv_maxlen = USABLE_TX_BD; IFQ_SET_MAXLEN(&ifp->if_snd, ifp->if_snd.ifq_drv_maxlen); IFQ_SET_READY(&ifp->if_snd); Which evaluates to a architecture-specific value due to v

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Ingo Flaschberger wrote: Hi, can you send me the dmesg ouput from your networkcards when they are detected at booting? Hello, bce0: mem 0xf400-0xf5ff irq 16 at device 0.0 on pci7 bce0: Ethernet address: 00:1d:09:xx:xx:xx bce0: [ITHREAD] bce0: ASIC (0x57081020); Rev (B2); Bus (PCI

Re: dummynet dropping too many packets

2009-10-07 Thread Ingo Flaschberger
Dear Rihad, can you also send me a lspci and lspci -v ? Sorry, this is FreeBSD, not Linux ;-) you find a lspci in ports. Kind regards, Ingo Flaschberger ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/fre

Re: dummynet dropping too many packets

2009-10-07 Thread Ingo Flaschberger
Dear Rihad, bge network card seems to have small tx/rx rings? If I understood the src/sys/dev/bge/if_bgereg.h correct, the ring size is 512 descriptors, while intel based cards (em) have up to 4096 descriptors. Kind regards, Ingo Flaschberger _

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Ingo Flaschberger wrote: Dear Rihad, bge network card seems to have small tx/rx rings? If I understood the src/sys/dev/bge/if_bgereg.h correct, the ring size is 512 descriptors, while intel based cards (em) have up to 4096 descriptors. We have bce, not bge. I'm gonna try HZ=4000 tomorrow and

Re: dummynet dropping too many packets

2009-10-07 Thread Julian Elischer
rihad wrote: Oleg Bulyzhin wrote: You probably have some special sources of documentation ;-) According to man ipfw, both "netgraph/ngtee" and "pipe" decide the fate of the packet unless one_pass=0. Or do you mean sprinkling smart skiptos here and there? ;-) ngtee should not have any aff

Re: dummynet dropping too many packets

2009-10-07 Thread rihad
Julian Elischer wrote: rihad wrote: Oleg Bulyzhin wrote: You probably have some special sources of documentation ;-) According to man ipfw, both "netgraph/ngtee" and "pipe" decide the fate of the packet unless one_pass=0. Or do you mean sprinkling smart skiptos here and there? ;-) ngtee

Re: dummynet dropping too many packets

2009-10-07 Thread Julian Elischer
rihad wrote: Robert Watson wrote: I would suggest making just the HZ -> 4000 change for now and see how it goes. OK, I will try testing HZ=4000 tomorrow morning, although I'm pretty sure there still will be some drops. Can someone please say how to increase the "ifnet transmit queue sizes

Re: bin/139346: [patch] arp(8) add option to remove static entries listed in file

2009-10-07 Thread Gleb Kurtsou
The following reply was made to PR bin/139346; it has been noted by GNATS. From: Gleb Kurtsou To: ga...@freebsd.org, bug-follo...@freebsd.org Cc: Subject: Re: bin/139346: [patch] arp(8) add option to remove static entries listed in file Date: Wed, 7 Oct 2009 20:40:53 +0300 --zhXaljGHf11kAtnf

Re: kern/139387: [ipsec] Wrong lenth of PF_KEY messages in promiscuous mode

2009-10-07 Thread linimon
Old Synopsis: Wrong lenth of PF_KEY messages in promiscuous mode New Synopsis: [ipsec] Wrong lenth of PF_KEY messages in promiscuous mode Responsible-Changed-From-To: freebsd-bugs->freebsd-net Responsible-Changed-By: linimon Responsible-Changed-When: Wed Oct 7 18:00:49 UTC 2009 Responsible-Changed

recommended PCI for wlan AP

2009-10-07 Thread Joost Mulders
Hi all, I'm preparing the build of my "residential gateway", a home storage server and router. I could use recommendations for a PCI wlan adapter that works well in AP mode (a/b/g). Thanks much! Joost ___ freebsd-net@freebsd.org mailing list htt

PCI card for wlan AP

2009-10-07 Thread Joost Mulders
Howdy, Can you recommend a WLAN PCI card for AP use in my FreeBSD "residential gateway". I'm looking for a 802.11 a/b/g card, no need for "n" yet. Recommendations and "works for me's" are highly appreciated. Thank you, Joost ___ freebsd-net@freeb

Re: PCI card for wlan AP

2009-10-07 Thread Boris Kochergin
Joost Mulders wrote: Howdy, Can you recommend a WLAN PCI card for AP use in my FreeBSD "residential gateway". I'm looking for a 802.11 a/b/g card, no need for "n" yet. Recommendations and "works for me's" are highly appreciated. Thank you, Joost _

Re: recommended PCI for wlan AP

2009-10-07 Thread Rui Paulo
On 4 Oct 2009, at 20:58, Joost Mulders wrote: Hi all, I'm preparing the build of my "residential gateway", a home storage server and router. I could use recommendations for a PCI wlan adapter that works well in AP mode (a/b/g). Wistron cards work well for me. -- Rui Paulo ___

Re: PCI card for wlan AP

2009-10-07 Thread Rui Paulo
On 7 Oct 2009, at 20:04, Boris Kochergin wrote: The heavily-used ones exhibit the problem described at: http://lists.freebsd.org/pipermail/freebsd-net/2009-September/022894.html ...but that's a driver, not a hardware, issue. The one in the router at my house doesn't exhibit the problem, the

Re: recommended PCI for wlan AP

2009-10-07 Thread Nerius Landys
>> I'm preparing the build of my "residential gateway", a home storage server >> and router. I could use recommendations for a PCI wlan adapter that works >> well in AP mode (a/b/g). I have my FreeBSD box configured in AP mode. EnGenius Technologies EPI-3601S (600MW 802.11G PCI Card with Superg

Re: PCI card for wlan AP

2009-10-07 Thread Boris Kochergin
Rui Paulo wrote: On 7 Oct 2009, at 20:04, Boris Kochergin wrote: The heavily-used ones exhibit the problem described at: http://lists.freebsd.org/pipermail/freebsd-net/2009-September/022894.html ...but that's a driver, not a hardware, issue. The one in the router at my house doesn't exhib

Re: kern/137170: [ath] atheros AR9285 not recognised

2009-10-07 Thread rpaulo
Synopsis: [ath] atheros AR9285 not recognised Responsible-Changed-From-To: freebsd-net->rpaulo Responsible-Changed-By: rpaulo Responsible-Changed-When: Wed Oct 7 21:35:31 UTC 2009 Responsible-Changed-Why: I'm working on this one. http://www.freebsd.org/cgi/query-pr.cgi?pr=137170

Reproducible if_wpi panic "not enough data, data_len 2 space 1" on FreeBSD 9-CURRENT with WPA

2009-10-07 Thread Lawrence Stewart
Hi All, I have an Intel 3945ABG in my Toshiba R600 laptop which fairly reliably panics a while after I associate it with a WPA AP. It will happily associate and pass packets for some time (10's of minutes) and then panic. I have managed to trigger it both times I've tried to associate with th

Re: PCI card for wlan AP

2009-10-07 Thread Paul B Mahol
On 10/7/09, Boris Kochergin wrote: > Rui Paulo wrote: >> On 7 Oct 2009, at 20:04, Boris Kochergin wrote: >>> >>> The heavily-used ones exhibit the problem described at: >>> >>> http://lists.freebsd.org/pipermail/freebsd-net/2009-September/022894.html >>> >>> >>> >>> ...but that's a driver, not a h

deadlock with pf uid rules + syncache

2009-10-07 Thread Maxim Dounin
Hello! We with ru@ investigated lockups our colleagues observing on RELENG_7 machines, and was able to track [at least some of] them down to the following deadlock: 1. syncache does syn+ack retransmit on timeout. it holds tcp_sc_head mutex, and output packet processed by pf which in turn wait

Choosing two 10GiGE cards

2009-10-07 Thread rihad
Hi there, We think it's time to switch from two GiGE bce cards to 10GiGE. According to http://www.freebsd.org/releases/7.2R/hardware.html the 10GiGE cards listed below are supported on amd64. Anyone has personal experience using any of them them? Should I prefer drivers that support DEVICE_POLL

Re: Choosing two 10GiGE cards

2009-10-07 Thread Andrew Snow
The only one worth getting IMO is Intel EXPX9502CX4 (INTEL 10 GIGABIT CX4 DUAL PORT SERVER ADAPTER) It is low power and very fast, and works under FreeBSD. Like all Intel NICs It supports interrupt modulation so polling support isn't really needed. - Andrew ___

Re: Choosing two 10GiGE cards

2009-10-07 Thread rihad
Andrew Snow wrote: The only one worth getting IMO is Intel EXPX9502CX4 (INTEL 10 GIGABIT CX4 DUAL PORT SERVER ADAPTER) It is low power and very fast, and works under FreeBSD. Like all Intel NICs It supports interrupt modulation so polling support isn't really needed. Thanks. What does DUA

Re: Choosing two 10GiGE cards

2009-10-07 Thread Andrew Snow
rihad wrote: The only one worth getting IMO is Intel EXPX9502CX4 (INTEL 10 GIGABIT CX4 DUAL PORT SERVER ADAPTER) Thanks. What does DUAL PORT mean? It has two jacks? I think one such adapter will be more than enough to replace our two 1000 mbps cards, whether two jacks or not? Correct, it ha

intel 82576 ipsec offload?

2009-10-07 Thread Siquijor Philips
Hi, I got a dual-port Intel Gigabit NIC with 82576 (ET) chipset http://www.intel.com/Assets/PDF/prodbrief/320116.pdf. It has a feature on IPsec offloading but it only mentioned Microsoft Windows 2008 and Vista servers. I wonder if FreeBSD have also support on this feature? Thanks, Siquijor __

Re: dummynet dropping too many packets

2009-10-07 Thread Oleg Bulyzhin
On Wed, Oct 07, 2009 at 09:42:27PM +0500, rihad wrote: > Julian Elischer wrote: > > rihad wrote: > >> Oleg Bulyzhin wrote: > > > >> You probably have some special sources of documentation ;-) According > >> to man ipfw, both "netgraph/ngtee" and "pipe" decide the fate of the > >> packet unless o