Bridging + VLANS + RSTP / MSTP

2011-02-18 Thread kevin
I have been tackling this for about a year (not actively, passively) and would LOVE to employ this properly. I see commercial firewalls like Juniper offer transparent bridging and failover hardware redundancies so I'm pretty sure this would be possible with FreeBSD, but again my switching a

RE: Bridging + VLANS + RSTP / MSTP

2011-02-19 Thread kevin
>Could you send your ifconfig bridge output from both firewalls? >If STP is turned off on the four switch ports that the firewalls are >patched, one of the two firewalls must be root of the spanning tree. I believe if you don't specify 'stp' in the rc.conf ifconfig statement, freebsd by default s

RE: Bridging + VLANS + RSTP / MSTP

2011-02-19 Thread kevin
>No, you have to specify stp there. The default STP mode is RSTP. >If you don't specify stp, you'll get a dumb ethernet bridge. Thanks very much for clarification. This helps me immensely. My room for testing is limited so this will help me take the right steps necessary. One quick last question

RE: Bridging + VLANS + RSTP / MSTP

2011-02-19 Thread kevin
One other thing : > id 00:17:d6:a9:31:e7 priority 16384 hellotime 2 fwddelay 15 And : > root id 00:12:cf:69:e9:ea priority 16384 ifcost 0 port 0 I was under the impression the priority for the root bridge should be a lower number ? Would you be able to post your rc.conf bridge entries for each

RE: Bridging + VLANS + RSTP / MSTP

2011-02-19 Thread kevin
if I cannot get this to work with my existing equiptment I will have to redesign the network without bridging , unfortunately (pf + carp + pfsense + multiple gateways). Thanks, Kevin ___ freebsd-net@freebsd.org mailing list http://lists.freebs

RE: Bridging + VLANS + RSTP / MSTP

2011-02-22 Thread kevin
[switch 1 (vlan 2)] Thanks, Kevin ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

PF + GATEWAY + BRIDGE + CARP failover

2011-03-01 Thread kevin
enced with transparent bridging with only 1 switch and 2 vlans. My mind is a mess from all these problems so if I'm missing something obvious, please let me know! Many thanks, Kevin ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/l

Re: kern/155714: [zyd] [panic] zyd_bulk_write_callback panic in 8.2-RELEASE [regression]

2011-03-27 Thread Kevin
The following reply was made to PR kern/155714; it has been noted by GNATS. From: Kevin To: bug-follo...@freebsd.org Cc: Subject: Re: kern/155714: [zyd] [panic] zyd_bulk_write_callback panic in 8.2-RELEASE [regression] Date: Sun, 27 Mar 2011 14:26:46 -0500 This panic appears to be fixed

RE: Bridge causes freezes

2010-03-16 Thread kevin
>I confirm this problem for another server: >stable 8 amd64 + vlan + carp > >Whenever I join a bridge with a vlan interface: > >ifconfig bridge0 addm vlan35 > >The system soon or later freezes. > >This time it has happened after 3 days of normal behavior. > >No logs, no dump. This happens to me

PF + BRIDGE + PFSYNC causes system freezing

2010-03-16 Thread kevin
# filter rules pass in quick pass out quick pass quick on $mng_if proto pfsync Note the only difference in config is the ip address of the pfsycn interface. When both boxes are on , one or both of them start to really slow down and ultimately freeze. No messages are pasted on the console and /v

RE: PF + BRIDGE + PFSYNC causes system freezing

2010-03-17 Thread kevin
>What are your settings for > > $ sysctl -a | grep bridge.pfil #bridge options net.link.bridge.pfil_onlyip=1 net.link.bridge.pfil_member=1 net.link.bridge.pfil_bridge=0 > Have you tried filtering only on one of the physical bridge interfaces, > with net.link.bridge.pfil_bridge=0 and set skip o

RE: PF + BRIDGE + PFSYNC causes system freezing

2010-03-17 Thread kevin
181.774 ms (DUP!) 64 bytes from 10.0.0.11: icmp_seq=5 ttl=64 time=363.855 ms (DUP!) ^C --- 10.0.0.11 ping statistics --- 9 packets transmitted, 3 packets received, +3 duplicates, 66.7% packet loss round-trip min/avg/max/stddev = 91.159/174.910/363.855/95.135 ms If

Strange Server Problems

2009-02-28 Thread Kevin
is fine (otherwise no websiets would be working). Could anyone please give me some hints? Where should I start to look into this problem? Thanks, Kevin ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To

Re: Strange Server Problems

2009-02-28 Thread Kevin
Thanks for your reply, Joe! There is nothing in either system log or Apache log files. Apache doesn't seem to have got the requests at all. Very strange. On Sat, Feb 28, 2009 at 7:27 AM, Joe Mays wrote: > > I have a dedicated server running FreeBSD 7.0 release, it has been > running > > well fo

Re: Strange Server Problems

2009-02-28 Thread Kevin
ort the problem, their networking stuff fixed the problem. Kevin On Sat, Feb 28, 2009 at 12:47 PM, Boris Kochergin wrote: > Kevin wrote: > >> Thanks for your reply, Joe! There is nothing in either system log or >> Apache >> log files. Apache doesn't seem to have got the r

Is it possible to change BSD licence to GPL for 4.4BSD-Lite's source code?

2008-05-05 Thread kevin
Hi, all I want to port 4.4BSD-Lite's TCP/IP source code to my own OS kernel. My OS kernel is GPL licenced. Is it possible for me to modify 4.4BSD-Lite's source code and change its licence from 4.4BSD-Lite licence to GPL licence? B

Change from BSDL to GPL

2008-05-05 Thread kevin
Hi, all I want to port 4.4BSD-Lite's TCP/IP source code to my own OS kernel. My OS kernel is GPL licenced. Is it possible for me to modify 4.4BSD-Lite's source code and change its licence from 4.4BSD-Lite licence to GPL licence? BR Kevin Wu _

Change from BSDL to GPL

2008-05-05 Thread kevin
Hi, all I want to port 4.4BSD-Lite's TCP/IP source code to my own OS kernel. My OS kernel is GPL licenced. Is it possible for me to modify 4.4BSD-Lite's source code and change its licence from 4.4BSD-Lite licence to GPL licence? BR Kevin Wu _

CFT: lem(4), em(4) e1000 Ethernet TSO testing

2023-07-25 Thread Kevin Bowling
eed. Thus, TSO would not be enabled by default here: * Intel(R) I219-LM and I219-V * Intel(R) I219-LM and I219-V (2) * Intel(R) I219-LM and I219-V (3) * Intel(R) I219-LM and I219-V (4) * Intel(R) I219-LM and I219-V (5) Regards, Kevin Bowling

Re: CFT: lem(4), em(4) e1000 Ethernet TSO testing

2023-07-25 Thread Kevin Bowling
On Tue, Jul 25, 2023 at 7:38 PM Kevin Bowling wrote: > Hi, > > I have been working through various bugs and have come to a point > where TSO is working on systems I have available for testing. > > This results in higher throughput on resource constrained systems, and > le

Re: CFT: lem(4), em(4) e1000 Ethernet TSO testing

2023-07-26 Thread Kevin Bowling
; em4: port 0xacc0-0xacff mem > 0xdf3e-0xdf3f irq 101 at device 3.0 on pci10 > em5: port 0xac80-0xacbf mem > 0xdf3c-0xdf3d irq 102 at device 3.1 on pci10 > > Best Regards, > Cheng Cui > > > On Tue, Jul 25, 2023 at 10:38 PM Kevin Bowling > wrote: >&

Re: tcp and udp traffic over IPv6 does not work from the latest e1000 git change 918c25677d

2023-07-26 Thread Kevin Bowling
Hi Cheng, Have you applied https://reviews.freebsd.org/D41170? Can you also try 'ifconfig emXX -txcsum6' on the DUT? On Wed, Jul 26, 2023 at 12:37 PM Cheng Cui wrote: > > Hello Kevin, > > TCP and UDP traffic over IPv4 are working, but not over IPv6. > On a pair of F

Re: CFT: lem(4), em(4) e1000 Ethernet TSO testing

2023-08-03 Thread Kevin Bowling
Committed as https://cgit.freebsd.org/src/commit/?id=f1b5488f7bba7f25a57750f87cbcbccbd5b9d16b On Tue, Jul 25, 2023 at 7:38 PM Kevin Bowling wrote: > > Hi, > > I have been working through various bugs and have come to a point > where TSO is working on systems I have availa

Looking for some old laptops

2023-08-15 Thread Kevin Bowling
: R51,X40 Regards, Kevin

Re: Looking for some old laptops

2023-08-18 Thread Kevin Bowling
2023 at 7:57 PM Kevin Bowling wrote: > > I am looking for one laptop in each of the Intel Ethernet lines below. > > They contain different generations of Intel Ethernet controllers, and > would be used to expand my testing matrix for Intel Ethernet driver > development. >

Re: em0: No buffer space available for IPv6 traffic but IPv4 is OK

2023-08-18 Thread Kevin Oberman
st a fix? > > Reboot did not solve, no software updates made, no config changes, just > stop working from one day to the next. > > Thank you. > > -- > José Pérez > Oddly, ENOBUFS is the error I get when my firewall is blocking transmit traffic. There may well be other causes. -- Kevin Oberman, Part time kid herder and retired Network Engineer E-mail: rkober...@gmail.com PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683

Restarting IPv6

2023-10-03 Thread Kevin Oberman
I had a problem with one network and had to restart (service wpa_supplicant restart wlan0). My Iv4 came up file, but IPv6 does not come up. Interface has only link-local address. When I boot to the same AP, it comes up fine. Any idea what I'm missing? -- Kevin Oberman, Part time kid herde

Re: Restarting IPv6

2023-10-04 Thread Kevin Oberman
Ok, I'll check it out. Thanks! On Wed, Oct 4, 2023 at 2:21 AM Andrey V. Elsukov wrote: > On 04.10.2023 03:02, Kevin Oberman wrote: > > > > I had a problem with one network and had to restart (service > > wpa_supplicant restart wlan0). My Iv4 came up file, but

Syncookies break with Windows 8

2013-02-01 Thread Kevin Day
ertise MIN(sb_max, TCP_MAXWIN) with no scaling and stay within the RFC. This doesn't affect Linux because it uses timestamp options to stuff the client's wscale, so it gets re-learned on the ACK. OpenBSD and OS X don't have syncookies. NetBSD seems to have the same problem if it'

Re: Syncookies break with Windows 8

2013-02-01 Thread Kevin Day
On Feb 1, 2013, at 4:05 PM, Ed Maste wrote: > On 1 February 2013 16:21, Kevin Day wrote: >> We've got a large cluster of HTTP servers, each server handling >> >10,000req/sec. Occasionally, and during periods of heavy load, we'd get >> complaints from some

Re: Syncookies break with Windows 8

2013-02-01 Thread Kevin Day
ted than they should be. > We're doing similar. During a DDoS we tried changing to syncookies_only and somehow that got left that way, which is how we ran into this problem more reliably. Turning that off, and using higher syncache sizes helped hide this greatly, but it's probably

Re: [PATCH] Add a new TCP_IGNOREIDLE socket option

2013-02-09 Thread Kevin Oberman
ned it on to cause serious problems... yet!) It seems a shame to make everyone who really has a need develop their own patches or dig though old mail to find John's. What I would like to see is a way to have it available, but make it unlikely

Re: lacp on lagg interface: same speed, different media

2013-02-13 Thread Kevin Day
On Feb 12, 2013, at 3:44 PM, Josef Pojsl wrote: > Hello list, > > on a FreeBSD 8.3-RELEASE-p3, I have come across a problem with lacp > protocol on a lagg interface. I have aggregated two interfaces with the > same speed but slightly different type of media (namely 10Gbase-SR and > 10Gbase-LR).

Re: failed to use getifaddrs on geli code

2013-02-16 Thread Kevin Oberman
y is that your sources from which you built the modified geom_eli module are not the same as were used to build the kernel you are running. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists

Re: ntpd bind() failure: Can't assign requested address

2013-03-12 Thread Kevin Oberman
one assigned by the router, a static from rc.conf or DHCPv6? You should have two inet6 addresses, one is link-local (starts with "fe") and another should start with "2". There may be more than two. -- R. Kevin Oberman, Network Engineer E-mail: rkober...@gmail.com _

Re: Syncookies break with Windows 8

2013-04-04 Thread Kevin Day
Hey, Andre! I know the security people have been pretty busy, but has there been any progress on this? We're still running into the occasional complaint with this issue. -- Kevin ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/m

Re: Capture packets before kernel process

2013-04-30 Thread Kevin Oberman
PCAP code will capture the data very early after it is received by the kernel, but the kernel still must do this as it and only actually can "talk" to the interface and receive data. -- R. Kevin Oberman, Network Engineer E-mail: rkober...@gmail.com _

Re: IPv6 tunnel MTU of 1480 not effective

2013-05-11 Thread Kevin Oberman
the developer (I don't recall exactly who any more) that it was right and would not be changed. I really would love to see this reconsidered before IPv6 becomes much more popular as it will simply cause confusion, but I, too, fear that it is a lost cause. Please prove me wrong! -- R. Kevin Ob

Re: IPv6 tunnel MTU of 1480 not effective

2013-05-12 Thread Kevin Oberman
Pv6 based on the destination specified, and options > -4 / -6 like telnet has. Same for traceroute / traceroute6. However, > this is an aside.) > > Steinar Haug, Nethelp consulting, sth...@nethelp.no > Sorry to be so hackneyed, but... +1 Sorry that I was unclear (and may

Re: Duplicate Address Detection misfire?

2013-06-30 Thread Kevin Day
On Jun 30, 2013, at 6:48 PM, Zaphod Beeblebrox wrote: > I have a FreeBSD 9.1-RELEASE vmware guest running. It is using the > "bridged" type of networking with VMWare. It gets it's IPv4 address from > DHCP (successfully) and then fails to initialize IPv6. The relevant > rc.conf is: > > ipv6_ac

Re: Terrible ix performance

2013-07-03 Thread Kevin Oberman
tering Extended Passive Mode (|||10613|) >> 226 Transfer complete >> 43474223104 bytes sent in 01:41 (410.09 MiB/s) >> ftp> >> >> so still about 50% performance on 10GB >> > > Out of interest have you tried limiting the number of queues? > > If not gi

Re: LACP LAGG device problems

2013-07-21 Thread Kevin Oberman
special applications, or any special > > logic above the LAGG device. > > > > Describing how you are using LAGG (and why) might be better > > than just asking for "improvements". > > > > BC > I am aware of at least one case where 100G WAN links ar

Re: Duplicate Address Detection misfire?

2013-07-23 Thread Kevin Day
ok at the physical networking card/adapter on the host OS first if I were troubleshooting this. Updated driver/replace with something else/etc. -- Kevin On Jul 23, 2013, at 12:44 AM, Zaphod Beeblebrox wrote: > What to do when you don't trust the interface? VMWare is obviously emulati

Re: Recommendations for 10gbps NIC

2013-07-29 Thread Kevin Oberman
om California to Europe and Australia. (Yes, careful tuning was required.) -- R. Kevin Oberman, Network Engineer E-mail: rkober...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscr

Re: TSO and FreeBSD vs Linux

2013-08-14 Thread Kevin Oberman
sends multiple packets when is doesn't need to.. > http://people.freebsd.org/~julian/fbsd9.png > Ack! (Sorry) I could have sworn that this had been fixed. Has it been re-broken? -- R. Kevin Oberman, Network Engineer E-mail: rkober...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: Re[3]: Assymetric NIC performance problem

2013-10-07 Thread Kevin Oberman
nd congestion control. Both wireshark and tcptrace are in ports and are best installed on a workstation. The tcpdump output can be used as input to both. ("tcpdump -pw FILE -i INTERFACE host ADDRESS" can do the job. Then copy the capture to the right place for analysis. But start with configurat

Re: LAN network performance issues

2014-03-09 Thread Kevin Oberman
9%re0 prefixlen 64 scopeid 0x1 > nd6 options=29 > media: Ethernet autoselect (1000baseT ) > status: active > lo0: flags=8049 metric 0 mtu 16384 > options=63 > inet6 ::1 prefixlen 128 > inet6 fe80::1%lo0 prefixlen 64 scopeid 0x2 > inet 127.0.0.1 netmask 0xff00 > nd6 options=21 > [vic@yeaguy ~] > > I tried to remove rxcsum and txcsum, but that didnt really improve the > behavior I almost convinced its a iperf issue? maybe.. after iperf > testing i did a FTP transfer and it exceeded what iperf is claiming the > throughput is.. so im not sure what to make of it. > You might try installing iperf3 and testing with that. iperf3 is a major rewrite of iperf and is totally incompatible with the older version, so you will need to install iperf3 on all systems I doubt iperf is the issue, but this is a way to check. -- R. Kevin Oberman, Network Engineer, Retired E-mail: rkober...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: LAN network performance issues

2014-03-09 Thread Kevin Oberman
On Sun, Mar 9, 2014 at 11:44 AM, justin victoria wrote: > > On 3/9/2014 10:40 AM, Kevin Oberman wrote: > > You might try installing iperf3 and testing with that. iperf3 is a major > rewrite of iperf and is totally incompatible with the older version, so > you will need to ins

VNET, if_bridge, if_epair, vlans and bridged phy?

2014-03-16 Thread Kevin Bowling
t 10.10.11.55/24 addm vlan1 description vlan1" A VNET jail on bridge0 in the public IP space works fine, but bridge1 and bridge2 are no longer accessible from the outside, including the host interface like 10.10.10.55. Any ideas on what could be going wrong? Is there a way to use an unt

Re: VNET, if_bridge, if_epair, vlans and bridged phy?

2014-03-17 Thread Kevin Bowling
On 3/16/2014 8:04 PM, Kevin Bowling wrote: I'm trying a somewhat elaborate VNET jails setup and for the most part it's working. I'm using if_epairs, one side that gets passed into the jail, and the other side that attaches to an if_bridge. The if_bridge has a member on a vlan

Server sockets staying in CLOSED for extended periods

2014-03-25 Thread Kevin Oberman
"sshd with zombie process on FreeBSD 10.0-STABLE - workaround". -- R. Kevin Oberman, Network Engineer, Retired E-mail: rkober...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubsc

Re: Multihomed system with jails routing issues

2014-04-12 Thread Kevin Bowling
t officially then at least put here so that others can find it in the archives. There have been long standing memory leaks in stopping VNET jails. For instance kern/164763. Is there anyone looking into this? Is there any will to enable VNET by default in -CURRE

Re: [VIMAGE][udplite] FreeBSD 10-STABLE/powerpc

2014-05-29 Thread Kevin Lo
ewed by: jhb, glebius, adrian > > - Fix a logic bug which prevented the sending of UDP packet with 0 checksum. > > - Disable TX checksum offload for UDP-Lite completely. It wasn't used for > partial checksum coverage, but even for full checksum coverage it doesn't >

Re: [VIMAGE][udplite] FreeBSD 10-STABLE/powerpc

2014-06-02 Thread Kevin Lo
On Thu, May 29, 2014 at 10:40:48AM -0400, Jason Hellenthal wrote: > Hi Kevin, Hi Jason, > Default on PowerPC is GCC 4.2.1 > > Its hard to see that this wouldn't turn up elsewhere on other arch' stop > though as from what I seen doesn't seem to be dependent on Powe

Re: FreeBSD 10 - ixgbe packet drop

2014-06-06 Thread Kevin Bowling
On 6/4/2014 11:46 PM, Özkan KIRIK wrote: Hi I'm using FreeBSD 10. My ix0 is connected to my backbone switch. Traffic is about 90Mbit/s. But after 3 minutes it stops working. ifconfig ix0 down ; ifconfig ix0 up solves problem temprorarily. It's strange that, dev.ix.0.dropped is 0 but, netstat's

[PATCH] merge 'struct ip6protosw' and 'struct protosw' into one

2014-07-23 Thread Kevin Lo
Hi, The diff [1] merges 'struct ip6protosw' and 'struct protosw' into one, since we don't need a separate structure which is shared between ipv4 and ipv6. The key difference between the two is the definition of pr_input function. [1] https://phabric.freebs

Re: OpenBGPd stability issue on FreebBSD 9-PRERELEASE

2011-11-27 Thread Kevin Oberman
ffic with tcpdump and analyze with wireshark. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: choosing distribution: FreeBSD

2011-11-27 Thread Kevin Oberman
o other computer expertise. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: choosing distribution: FreeBSD

2011-11-27 Thread Kevin Oberman
d at the new Linux/Unix user, I feel that, with Unity, it has taken a turn away from usability and an easy transition form Windows. I suggest looking at Mint as a friendlier distro. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___

Re: IPFW tables, dummynet and IPv6

2011-12-18 Thread Kevin Oberman
145 11000 > vlan146/vlan146 12000 > > > I plan to commit it today/tomorrow. > 8.2-S diff will be available, too > Thanks! I've been wanting this for a long time as working around it involved some really, really ugly hacks if you must supp

Re: What is the relationship between Intel and FreeBSD in regards to igb(4)?

2011-12-18 Thread Kevin Oberman
's in the archive, somewhere and the right search terms will find it. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: low network speed

2012-01-24 Thread Kevin Oberman
tcptrace may show the cause of the problem, but the output is not easy to understand. tcptrace is in ports. You could also look at the capture with wireshark. It won't tell as much, but will flag errors and "unusual" activity. Both tools are in ports. -- R. Kevin Oberman, Network Engi

Re: stateful firewall implementation in FreeBSD

2012-01-26 Thread Kevin Oberman
st an IDS/IPS with RTBH. The problem is that their red team of attackers never could successfully attack which really annoyed them to the point that they tryed toi order that the IDS be disabled for their attack attempts. (We refused, siting terms of the testing agreement.) Today, auditors stil

Re: HowTo easy use IPFW

2012-02-04 Thread Kevin Oberman
ings like already compressed video formats. (Probably why it became popular for bittorrent.) R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: freebsd sends arp queries for IP's in not it subnet

2012-02-19 Thread Kevin Oberman
st 10.11.19.151 >        nd6 options=29 >        media: Ethernet autoselect (1000baseT ) >        status: active >        vlan: 7 parent interface: re0 Looks suspicious, but what is the output of 'netstat -rnf inet'? That will say what addresses are in a range that is routed or

Re: firewall stuck

2012-03-13 Thread Kevin Oberman
advertently catching the SSH attempts. Have you done an 'ipfw show' to see what rules are being matched? it may or may not provide a clue. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___ freebsd-net@freebsd.org mailin

Re: firewall stuck

2012-03-14 Thread Kevin Oberman
Please don't top post. It makes following the thread very difficult. (Yes, I know too many MUAs make this difficult.) > On Wed, Mar 14, 2012 at 1:12 PM, Kevin Oberman wrote: >> >> On Tue, Mar 13, 2012 at 7:27 PM, nyoman.b...@gmail.com >> wrote: >> > dear g

Re: Use of network_interfaces in rc.conf

2012-03-15 Thread Kevin Oberman
ig argument in it, but remember the rc.conf is shell, so you must put all of the definition in a single statement. You can't do: ifconfig_em0="DHCP" ifconfig_em0="mediaopt half-duplex" That will not do DHCP, so hte interface will not come up. Of course, you can

Re: firewall stuck

2012-03-24 Thread Kevin Oberman
On Sat, Mar 24, 2012 at 6:30 AM, nyoman.b...@gmail.com wrote: > On Thu, Mar 15, 2012 at 11:47 AM, Kevin Oberman wrote: >> >> Please don't top post. It makes following the thread very difficult. >> (Yes, I know too many MUAs make this difficult.) >> >>  &g

Re: lagg problems on diskless client

2012-04-03 Thread Kevin Oberman
, Beeblebrox wrote: > On Tue, Apr 3, 2012 at 7:46 PM, Kevin Oberman wrote: > >> On Tue, Apr 3, 2012 at 4:51 AM, Beeblebrox wrote: >> > Slightly different point of view: Under this scenario of dikless clients >> > having dual NICs would CRAP be a choice to consider

Re: Stateful IPFW - too many connections in FIN_WAIT_2 or LAST_ACK states

2012-04-17 Thread Kevin Oberman
aster to process plus it does not leave you open to trivial DOS (often of yourself) by filling the dynamic rule tables. Generally, for client systems, stateful UDP makes sense, but I generally don't understand why people choose the more complex, slower, and potentially disruptive stateful rules for

Re: Stateful IPFW - too many connections in FIN_WAIT_2 or LAST_ACK states

2012-04-17 Thread Kevin Oberman
On Tue, Apr 17, 2012 at 12:58 PM, Michael Sierchio wrote: > On Tue, Apr 17, 2012 at 12:48 PM, Kevin Oberman wrote: >> >> >> But I do have to ask why you find statefull rules for outgoing TCP >> connections desirable? Why not: >> 00101 allow tcp from me to any

Re: Stateful IPFW - too many connections in FIN_WAIT_2 or LAST_ACK states

2012-04-20 Thread Kevin Oberman
Are you seeing a large number of TCP sessions in partially closed states? I don't recall if you mentioned it, but what version of FreeBSD are you running? If you have not dine so, I urge you to read the firewall(7) man page. It discusses firewall design and implementation with IPF

Re: Controlling queue delays

2012-05-08 Thread Kevin Oberman
s. This assumes that it actually works as advertized, but the authors are unlikely to have published this without thorough analysis and testing. They are, after all, among the leading TCP experts in the world. -- R. Kevin Oberman, Network Engineer E-ma

Major performance hit with ToS setting

2012-05-24 Thread Kevin Oberman
=4.1942 Mbps 0.5000 MB / 1.00 sec =4.1942 Mbps This is,of course, on a 10G interface. On 7.3 there is little difference between the two. We are using cubic CC on the 8.2 system. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com

Re: Major performance hit with ToS setting

2012-05-24 Thread Kevin Oberman
On Thu, May 24, 2012 at 4:43 PM, Bjoern A. Zeeb wrote: > On 24. May 2012, at 22:55 , Kevin Oberman wrote: > >> When we set the ToS bits for less than best effort (also called >> scavenger) on packets (ToS=32), performance on FreeBSD 8.2 is >> terrible. It was as good as be

Re: Major performance hit with ToS setting

2012-05-25 Thread Kevin Oberman
On Fri, May 25, 2012 at 6:27 AM, Andrew Gallatin wrote: > On 05/24/12 18:55, Kevin Oberman wrote: > >> >> This is,of course, on a 10G interface. On 7.3 there is little > > > Hi Kevin, > > > What you're seeing looks almost like a checksum is bad, or > th

Re: Major performance hit with ToS setting

2012-05-30 Thread Kevin Oberman
On Fri, May 25, 2012 at 6:27 AM, Andrew Gallatin wrote: > On 05/24/12 18:55, Kevin Oberman wrote: > >> >> This is,of course, on a 10G interface. On 7.3 there is little > > > Hi Kevin, > > > What you're seeing looks almost like a checksum is bad, or > th

Re: Major performance hit with ToS setting

2012-06-02 Thread Kevin Oberman
On Fri, Jun 1, 2012 at 2:48 AM, Lawrence Stewart wrote: > On 05/31/12 13:33, Kevin Oberman wrote: > [snip] >> >> I used SIFTR at the suggestion of Lawrence Stewart who headed the >> >> project to bring plugable congestion algorithms to FreeBSD and found >> real

Re: recommended 10g cards

2012-06-08 Thread Kevin Oberman
e FreeBSD drivers and is active in the FreeBSD community. -- R. Kevin Oberman - Network Engineer rkober...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: ifconfig accepting hostname as ipv4 address

2012-06-09 Thread Kevin Oberman
d where on systems that had numerous interfaces, though this was more common in the day of async serial lines and modems. I'll admit that I have mixed feelings about its practicality today, though it does not hurt anything, as far as I can tell. -- R. Kevin Oberman, Network

Re: ating 100Gbit transfer rate

2012-07-11 Thread Kevin Oberman
ll work, too. All 100G hardware is just a mite pricey, though it has dropped tremendously over the past year and a half and I expect it will continue to do so. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___ freebsd-net@freebsd.org mail

Re: ating 100Gbit transfer rate

2012-07-12 Thread Kevin Oberman
on ANI (and I am not sure if new proposals are being accepted), see: http://www.es.net/RandD/advanced-networking-initiative/ > On Thu, Jul 12, 2012 at 6:43 AM, Kevin Oberman wrote: >> >> On Wed, Jul 11, 2012 at 1:31 PM, Sami Halabi wrote: >> > Hi, >> > >> >

Re: System doesn't detect unplugged network cable and doesn't set interface up properly with DHCP

2012-07-12 Thread Kevin Lo
how it works > in FreeBSD? Add the following lines to /etc/devd.conf: notify 0 { match "system" "IFNET"; match "type""LINK_DOWN"; media-type "ethernet"; action "/etc/rc.d/dhclient qui

Re: Major performance hit with ToS setting

2012-07-15 Thread Kevin Oberman
On Sun, Jun 3, 2012 at 5:22 PM, Lawrence Stewart wrote: > On 06/03/12 15:18, Kevin Oberman wrote: >> >> On Fri, Jun 1, 2012 at 2:48 AM, Lawrence Stewart >>  wrote: >>> >>> On 05/31/12 13:33, Kevin Oberman wrote: >>> [snip] >>>> >

Re: What driver should I use for 'intel centrino wireless-N 2200 BGN' ?

2012-10-08 Thread Kevin Oberman
ode? Yes. Some vendors (e.g. Lenovo, HP) have private PCIIDs on their cards, so they may not be in the source. Adding them is trivial, but, should this be the issue, please open a PR to have it added to the source in SVN. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com

Re: What driver should I use for 'intel centrino wireless-N 2200 BGN' ?

2012-10-09 Thread Kevin Oberman
On Tue, Oct 9, 2012 at 6:23 AM, Denise H. G. wrote: > > On 2012/10/09 at 00:44, Kevin Oberman wrote: >> >> On Mon, Oct 8, 2012 at 9:36 AM, Andreas Nilsson wrote: >>> On Mon, Oct 8, 2012 at 2:21 PM, Denise H. G. wrote: >>> >>>> Hi list, >>&

Re: Wireless Networking Bug(s) in 9.1-RC2 (?)

2012-10-16 Thread Kevin Oberman
ddity is that you specify your ssid in the rc.conf file while using WPA. I've never seen that before. It's in my wpa_supplicant.conf file. It seems more reasonable for a laptop that may need to associate with a home and a work SSID as well as ones at conferences and, in my case alternate

Re: Wireless Networking Bug(s) in 9.1-RC2 (?)

2012-10-18 Thread Kevin Oberman
used. What key_mgmt are you specifying? It looks like authentication might be failing. You might try running the supplicant manually (after stopping any that is running) and see what you get. > P.S. I ain't using IPv6... like not at all. Unfortunate, but I can't run it at home, eit

Re: Low Bandwidth on intercontinental connections

2012-11-21 Thread Kevin Oberman
great deal and is very easy to work with. Just load the kernel module and use sysctls to control it. I have used it in conjunction with tcpdump and wireshark to find performance problems. Also, for high performance on bulk data transfers over long, fat pipes, take a look at http://fasterdata.e

Re: Network monitoring with FreeBSD

2012-11-26 Thread Kevin Wilcox
On Nov 26, 2012 6:16 PM, "Kurt Buff" wrote: > I'd love to dive deeper into who is talking, and what traffic is > passing on my network, and I'm pretty dedicated to using FreeBSD, as > I've not liked any Linux I've ever touched. I use a mix of cacti and ipAudit (for netflow and per-IP stats; it a

Review request: fix return value of socket(2) on no family found

2012-12-06 Thread Kevin Lo
19799/functions/socket.html For reference, Linux, NetBSD, and OS X return EAFNOSUPPORT for this. Kevin ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-ne

Re: Broken error handling with AF_* and socket(2) [was Re: svn commit: r243965 - in head/sys: kern sys]

2012-12-21 Thread Kevin Lo
On 2012/12/21 20:11, Garrett Cooper wrote: On Thu, Dec 6, 2012 at 6:22 PM, Kevin Lo wrote: Author: kevlo Date: Fri Dec 7 02:22:48 2012 New Revision: 243965 URL: http://svnweb.freebsd.org/changeset/base/243965 Log: - according to POSIX, make socket(2) return EAFNOSUPPORT rather than

Re: how to completely makes an interface down?

2013-01-24 Thread Kevin Oberman
hting the LED. -- R. Kevin Oberman, Network Engineer E-mail: kob6...@gmail.com ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Re: high cpu usage on natd / dhcpd

2013-01-31 Thread Kevin Lo
behind the NAT flows without causing the natd or dhcpd processes to measurably consume CPU. I see exactly the same issue on -STABLE. Have you been able to figure out the cause? Use ipfw nat instead. It uses the libalias(3) in kernel and avoids gigantic natd(8) overhead. Thanks, Lars Kevin

RE: em driver problem on vmware

2010-10-29 Thread Kevin Lo
Hi Rick, The FreeBSD -current works fine for me with the newest em(4) under the VMware player. Kevin On Friday, 2010-10-29 at 19:22 -0700, Ricky Charlet wrote: > Thanks Jack, > > The failure is that ifconfig is unaware of em0. My em0 is > not configu

Re: icmp packets on em larger than 1472 [SEC=UNCLASSIFIED]

2010-11-11 Thread Kevin Oberman
> Date: Wed, 10 Nov 2010 23:49:56 -0800 (PST) > From: Kirill Yelizarov > > > > --- On Thu, 11/11/10, Kevin Oberman wrote: > > > From: Kevin Oberman > > Subject: Re: icmp packets on em larger than 1472 [SEC=UNCLASSIFIED] > > To: "Wilkinson, Alex&q

Re: icmp packets on em larger than 1472 [SEC=UNCLASSIFIED]

2010-11-11 Thread Kevin Oberman
> From: Pyun YongHyeon > Date: Thu, 11 Nov 2010 13:04:36 -0800 > > On Thu, Nov 11, 2010 at 08:10:57AM -0800, Kevin Oberman wrote: > > > Date: Wed, 10 Nov 2010 23:49:56 -0800 (PST) > > > From: Kirill Yelizarov > > > > > > > &g

Re: kern/138666: [multicast] [panic] not working multicast through igmpproxy

2010-12-31 Thread Kevin Lo
This issue is easily reproduced on 9.0 -CURRENT as well. I got kernel panic after running mrouted, igmpproxy, or xorp. Kevin Andriy Syrovenko wrote: > Hi! > > Yes, I have PF enabled with some NAT rules present in the rule set. However > disabling PF (even by commenting ou

Re: kern/138666: [multicast] [panic] not working multicast through igmpproxy

2010-12-31 Thread Kevin Lo
Bjoern A. Zeeb wrote: > On Fri, 31 Dec 2010, Kevin Lo wrote: > > > This issue is easily reproduced on 9.0 -CURRENT as well. > > I got kernel panic after running mrouted, igmpproxy, or xorp. > > Was it the same as reported in the PR? Yes. ___

  1   2   3   4   >