Stuck in FIN_WAIT_2

2012-03-15 Thread grarpamp
Hi. I've got 900-1000 connections stuck in FIN_WAIT_2. The processes behind them on both sides have long since exited. Anything I can do to clear them out short of reboot? The box is 4.11, so no tcpdrop to try. I suspect this may be starting to limit mbuf clusters. Not sure. The box is idle. If in

Re: Stuck in FIN_WAIT_2

2012-03-15 Thread grarpamp
> net.inet.tcp.finwait2_timeout <-- lower this > net.inet.tcp.fast_finwait2_recycle <-- set this to 1 Not present. This state has lingered for a couple years. It needs upgraded anyways, reboot coming. ___ freebsd-net@freebsd.org mailing list http://lists

netmap

2012-03-16 Thread grarpamp
Hi. I read most of the netmap paper. In short, cool work :) I have one question... is this meant only for use with dedicated tap interfaces? Or will it be integrated with the mangement interface? Example... Today: fxp0 - onboard NIC, 192.168.0.10, ssh, httpd, smtp, tcpdump, etc. ixgbe0 - PCIe ad

Re: netmap

2012-03-16 Thread grarpamp
> yes this is the long term plan (actually, kind of works now too > if the netmap-attached client then passes the packets to the host > stack). I would not know how to do that as a common user. Maybe like divert/natd socket in ipfw. But perhaps natd is the only example of user tool in base for tha

FreeBSD on/for switches/routers

2012-04-01 Thread grarpamp
Maybe people are doing things in this area... Just links. http://openvswitch.org/ http://www.openflow.org/ http://www.xorp.org/ http://pica8.com/ https://prontosystems.wordpress.com/ ___ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailm

Fwd: [Ntop-misc] Announce: libzero (netmap)

2012-05-20 Thread grarpamp
fwd, re: developments related to netmap. -- Forwarded message -- From: Luca Deri Date: Mon, May 14, 2012 at 10:13 AM Subject: [Ntop-misc] Announce: libzero To: ntop-m...@listgateway.unipi.it, n...@unipi.it Hi all, Last year we have introduced PF_RING DNA for implementing 0% CPU

BSD netmap side by side with Linux pfring/dna

2012-12-21 Thread grarpamp
I notice a lot of users seemingly depending on Linux and some pfring/dna for some things. There is similar work in the field ongoing in FreeBSD which may be equally useful to consider. http://info.iet.unipi.it/~luigi/netmap/ ___ freebsd-net@freebsd.org ma

MPLS

2010-11-01 Thread grarpamp
Was reading through the OpenBSD 4.8 release notes. Seems they have a good bit of work/support for MPLS going on. I've seen light mention of it on FreeBSD lists now and then yet am unaware of any committed work. Is MPLS of age such that FreeBSD should have designs on doing it? Would it fit better a

bwi vs. bwn

2011-02-17 Thread grarpamp
I have a BCM94312MCG, which driver should I choose and why? The man pages are nearly identical. It appears that bwn is newer/maintained? And more modular with siba? Can the newer upstream firmware at openwrt be used with bwn-firmware-kmod? http://downloads.openwrt.org/sources/broadcom-wl-4.150.10

Re: bwi vs. bwn

2011-02-18 Thread grarpamp
>> I have a BCM94312MCG, which driver should I choose and why? >> The man pages are nearly identical. > > The FreeBSD bwn and bwi modules seem to be equivalent to the Linux > b43 and b43legacy drivers. This page may or may not help: > http://wireless.kernel.org/en/users/Drivers/b43 I'll see if I

b43-fwcutter port update to v13 [patch]

2011-02-18 Thread grarpamp
I diffed the source of b43-fwcutter, v12 to v13. And also between v12 + fbsd port patches and v13 native. It all looks clean, both compile, and v13 produces digest identical output files to v12 + fbsd port when used as in the bwi and bwn kmod ports. The current fwcutter port can thus be bumped to

Re: bwi vs. bwn

2011-02-18 Thread grarpamp
>> Doesn't FreeBSD have some sort of ndiswrapper function for this? >> http://www.broadcom.com/support/802.11/linux_sta.php > NDISulator, ndis(4). Hmm, maybe that only applies to the Windows driver bundles as distributed by the vendors (Dell, HP, Lenovo, etc). Or from Microsoft itself as part of t

FreeBSD I/OAT (QuickData now?) driver

2011-06-06 Thread grarpamp
Is this work part of what's needed to enable the FreeBSD equivalent of TNAPI? I know we've got polling. And probably MSI-X in a couple drivers. Pretty sure there is still one CPU doing the interrupt work? And none of the multiple queue thread spreading tech exists? http://www.ntop.org/blog http:/

MPLS

2011-06-06 Thread grarpamp
I had notices some GSOC project in maybe 2008 on MPLS. There doesn't seem to be much current talk of this. So I am unsure, excluding the GSOC, of the overall picture of MPLS in FreeBSD. Is there any current work? Or directions planned? Overall interest / demand? Thanks :) __

Re: MPLS

2011-06-15 Thread grarpamp
> Pawel wrote: >> I had notices some GSOC project in maybe 2008 >> on MPLS. There doesn't seem to be much current >> talk of this. So I am unsure, excluding the GSOC, >> of the overall picture of MPLS in FreeBSD. >> Is there any current work? Or directions planned? >> Overall interest / demand? >

Re: FreeBSD I/OAT (QuickData now?) driver [10gb pfring silicom]

2011-06-19 Thread grarpamp
Perhaps some similar work here. And maybe a card vendor with docs and an affinity to open source. Just news, that's all. http://www.ntop.org/blog/pf_ring/introducing-the-10-gbit-pf_ring-dna-driver/ bcc: hackers, isp. reply to net. ___ freebsd-net@freebs

Call for testers: ng_netflow with v9 and IPv6 support

2009-09-06 Thread grarpamp
Wouldn't it be better to support the obvious formal emergent standards track protocol instead of the legacy informational one? Or to perform both via sysctl or other arguments/defines, with the standard IPFIX being the default mode? Have you reviewed the nProbe code for other various ideas? Thanks

Re: Call for testers: ng_netflow with v9 and IPv6 support

2009-09-08 Thread grarpamp
> Thanks for pointing out those RFCs. Sure. There are more I probably missed. Search rfc-editor or ietf for netflow or ipfix. > can v5 count ipv6 ? No, what's next netflow version can ? v9? Ok, let's > implement v9. Yep, ipv6 is becoming really important, definitely on backbones. nProbe has ha

Intel 10Gb

2010-05-07 Thread grarpamp
Just wondering in general these days how close FreeBSD is to full 10Gb rates at various packet sizes from minimum ethernet frame to max jumbo 65k++. For things like BPF, ipfw/pf, routing, switching, etc. http://www.ntop.org/blog/?p=86 ___ freebsd-net@free

Fwd: [Ntop-misc] [Announce] 10 Gbit Hardware Packet Filtering Using Commodity Network Adapters

2010-09-04 Thread grarpamp
fyi for possible porters... -- Forwarded message -- From: Luca Deri Date: Sep 4, 2010 8:17 AM Subject: [Ntop-misc] [Announce] 10 Gbit Hardware Packet Filtering Using Commodity Network Adapters To: n...@unipi.it, ntop-m...@listgateway.unipi.it The promise of filtering packets in

Re: [tor-relays] FreeBSD's global IP ID (was: Platform diversity in Tor network)

2014-11-07 Thread grarpamp
On Thu, Nov 6, 2014 at 8:52 AM, Philipp Winter wrote: > On Wed, Nov 05, 2014 at 04:04:41AM -0500, grarpamp wrote: >> 173 FreeBSD > > FreeBSD still seems to use globally incrementing IP IDs by default. > That's an issue as it leaks fine-grained information about how m

Re: [tor-relays] FreeBSD's global IP ID (was: Platform diversity in Tor network)

2014-11-07 Thread grarpamp
re running, or simply delegate them and/or any parameters of lesser importance to platform specific guides on the Tor wiki. > On 7 November 2014 00:20, grarpamp wrote: >> On Thu, Nov 6, 2014 at 8:52 AM, Philipp Winter wrote: >>> >>> FreeBSD still seems to use glob

FreeBSD Solution Comparable to VyOS (BGP IPv4+6 FW) in Tor Intensive Environments

2018-10-11 Thread grarpamp
On 10/11/18, Conrad Rockenhaus wrote: > Hello, > > I’m researching for a new colo, and in order to bring it online until I can > consolidate some hardware, I would like to temporarily run a VyOS Router as > the main router so I can start getting things online sooner than later. This > VyOS Router

Fwd: Sharing experience with Via Nano 1.6ghz with Padlock hw accel

2016-06-05 Thread grarpamp
-- Forwarded message -- From: fatal Date: Sun, 5 Jun 2016 18:20:56 +0200 Subject: Re: [tor-relays] Sharing experience with Via Nano 1.6ghz with Padlock hw accel To: tor-rel...@lists.torproject.org Hello, openssl with enabled padlock and tor stable crashes on my via nano servers r