ary cpu burn on
> every single packet we sent out, all to solve a problem that doesn't
> really exist.
Well, that's why it's a sysctl defaulting to off in my patch. Don't
turn it on if you don't want to.
Kris
PGP signature
hat's why it's a sysctl defaulting to off in my patch. Don't
> :turn it on if you don't want to.
> :
> :Kris
>
> Let me put it another way: I think this sort of thing is an excellent
> example of introducing unnecessary kernel bloat into the syste
an you efficiently or
> :> anonymously or not? I get port scanned every day. Most hackers don't
> :> even bother with portscans, they just try the exploit on the target=
> :=20
> :> machines directly.
> :
> :Tools, not policy..
> :
> :You may not car
end your AS
to the ISP #1 route (the big upstream) so that it's advertised as two
hops, and then route normally for the other ISP (the five-year contract
one). The net result should be two equal-cost routes back to your NOC even
though it goes to two ISPs (really one).
Make sense?
-
P#2
> to the rest of the world.
Ah, static routes. How unfortunate.
Well, I don't have much more to add to this one but words. Ted has said
what needed to be said.
-
Kris Kirby, KE4AHR | TGIFreeBSD...
se vnodes. That way we can swap out in times of low
> memory. To really take advantage of this, use softupdates so the meta-data
> operations on the network buffers can be scheduled async.
It seemed like a legitimate and serious enough question, I'm not sure
what warranted this response.
Kris
PGP signature
On Tue, May 22, 2001 at 10:51:23AM +0200, Wei Zhao (ERA) wrote:
> Hi,
>
> Does anyone know where I can find the netBSD RFC2507 implementation
> for PPP ?
Try asking on a NetBSD list.
Kris
PGP signature
A while back I posted a version of this which was activated by sysctl,
but people didn't like the per-packet performance overhead, so here's
an updated version which uses a compile-time option. Please review;
I'd like to commit this soon.
Kris
In
On Sat, May 26, 2001 at 02:46:44AM -0400, Alfred Perlstein wrote:
> * Kris Kennaway <[EMAIL PROTECTED]> [010526 02:38] wrote:
> > A while back I posted a version of this which was activated by sysctl,
> > but people didn't like the per-packet performance overhead, so her
Actually, this patch was broken; the updated one is at:
http://www.freebsd.org/~kris/randomized-ipid.diff
Kris
PGP signature
Alfred just wanted to be able to switch it on without
> recompiling a kernel (e.g., while running GENERIC), this obviously
> doesn't help.
I thought about doing this, but I really couldn't think why someone
would want to do that.
Kris
PGP signature
On Thu, May 31, 2001 at 05:55:57AM +0100, vishwanath pargaonkar wrote:
> Hi,
> i have 4.2 stable powepack CD ie 10 CDs.
> does we have anything as ipv6 testing tool in those 10
> CDs.
Only what's in the FreeBSD base system and ports collection anyway.
Kris
PGP signature
On Fri, Jun 01, 2001 at 01:25:29AM +0200, Jesper Skriver wrote:
> On Sat, May 26, 2001 at 12:38:15AM -0700, Kris Kennaway wrote:
> > Actually, this patch was broken; the updated one is at:
> >
> > http://www.freebsd.org/~kris/randomized-ipid.diff
>
> Looks good to
tunately, with a randomized seqence #, the new connection ISN
> may be less than the old sequence used, and the SYN will be ignored.
>
> I've copied this over to kris, who (IIRC) brought in the new sequence
> numbering.
Sorry I've been ignoring this; I'm still getting caught up from my
vacation. Niels, how has OpenBSD handled this?
Kris
PGP signature
On Mon, Jul 16, 2001 at 11:00:04AM +0300, Ruslan Ermilov wrote:
> Recall my question on IRC about monotonicity right after you committed
> this?
Yes; recall my answer? :)
Kris
PGP signature
me data from both these structures?
>
> Thanks,
> Ramamoorthy. R.
>
> To Unsubscribe: send mail to [EMAIL PROTECTED]
> with "unsubscribe freebsd-questions" in the body of the message
This question would be better asked on the freebsd-net mailing list
where I've forwarded it.
Kris
PGP signature
I've forwarded this message to the freebsd-net mailing list where it's
more on-topic for discussion.
Kris
On Mon, Aug 27, 2001 at 11:51:30AM -0700, S.V. Ganesh wrote:
> What is the size of the IPCB(struct inpcb) and TPCB(struct tcpcb) structure?
> (ignoring platform specific
references a patch. I can find no other information about
> this issue. Can someone point me to the patch or other documentation
> about this.
Yes, it was fixed by switching to the RFC 1948 algorithm.
Kris
PGP signature
my K7-850 with
Barricuda hard drives (9.0). I'm using xl's on most machine (K7 as well)
with a fxp in my P166 with SCSI drives (sees only ~6 MB/s on a good day).
Any ideas? I've got 2560 total mbuf clusters on the P166; I can't really
think of much else to change to speed
until you get a public /30 for the WAN link.
I'm a fascist; I wouldn't have taken a link without a public WAN ip.
-
Kris Kirby, KE4AHR | TGIFreeBSD... 'Nuff said.
<[EMAIL PROTECTED]> |
---
"Fate, it s
What's our current best recommended solution for channel-bonding ethernet
cards? Netgraph?
-
Kris Kirby, KE4AHR | TGIFreeBSD... 'Nuff said.
<[EMAIL PROTECTED]> | IM: KrisBSD
---
"Fate, it seems, is not wit
#ifndef _Z_UTIL_H line:45 and
> says that thereis no terminator for that
> i want to know why and how i can solve this problem
Turn your changes into legitimate C code?
Kris
msg04486/pgp0.pgp
Description: PGP signature
On Sun, Jan 06, 2002 at 03:56:04PM +, June Carey wrote:
> >From: Kris Kennaway <[EMAIL PROTECTED]>
> >To: June Carey <[EMAIL PROTECTED]>
> >CC: [EMAIL PROTECTED]
> >Subject: Re: FreeBSD-4.3 IPv6 bug
> >Date: Sat, 5 Jan 2002 15:26:45 -0800
> >
he IPSEC
tunnel even necessary (if I don't care about security)?
Finally, can FreeBSD bridge a subnet attached to a public interface on the
big bad old internet to the other side of the world?
--
Kris Kirby, KE4AHR | TGIFreeBSD... 'Nuff said.
<[EMAIL PROT
tic IPs inside the 216.6.6.129/25 net (in your example) to relay.
I'm a little confused by this.
--
Kris Kirby, KE4AHR | TGIFreeBSD... 'Nuff said.
<[EMAIL PROTECTED]> | IM: KrisBSD | HSV, AL.
---
"Fate, it seems, is
i6: on pcib6
pci6: at device 0.0 (no driver attached)
pcib7: irq 16 at device 6.0 on pci0
pci7: on pcib7
pcib8: at device 30.0 on pci0
pci8: on pcib8
em0: port 0xec00-0xec3f
mem 0xfeaa-0xfeab irq 16 at device 4.0 on pci8
em0: Ethernet address: 00:02:b3:e8:fc:8a
This is on both 6.0-RELEAS
On Tue, Nov 22, 2005 at 08:54:49PM -0800, John Polstra wrote:
>
> On 23-Nov-2005 Kris Kennaway wrote:
> > I am seeing the em driver undergoing an interrupt storm whenever the
> > amr driver receives interrupts. In this case I was running newfs on
> > the amr arra
> irq64: em0 2890414 2
Again uhci seems to have a lot of interrupts.
Kris
pgpTDybmH2bMR.pgp
Description: PGP signature
is doing checksum offload, tcpdump on the host won't see
the right checksum, since it's only generated on the way out the door.
Run tcpdump on another host on the network to verify whether it's
correct on the wire.
Kris
pgp4IT3W4xYFa.pgp
Description: PGP signature
ould be filed as a problem report.
I don't know that there's a lot of point since 4.11 is in "legacy"
mode and few developers still use it.
Kris
pgpiqgYmSWE7d.pgp
Description: PGP signature
On Tue, Dec 13, 2005 at 04:32:10PM -0800, Jack Vogel wrote:
> On 12/13/05, Kris Kennaway <[EMAIL PROTECTED]> wrote:
> > On Tue, Dec 13, 2005 at 01:37:31PM -0800, Doug Barton wrote:
> > > Mihail Balikov wrote:
> > > > Hello,
> > > >
> > &g
/*
588 * If a temporary address has just become
deprecated,
589 * regenerate a new one if possible.
Kris
pgpe0RalyS2kc.pgp
Description: PGP signature
On Thu, Jan 19, 2006 at 02:30:35PM +0900, JINMEI Tatuya / [EMAIL
PROTECTED]@C#:H wrote:
> >>>>> On Sun, 15 Jan 2006 19:44:38 -0500,
> >>>>> Kris Kennaway <[EMAIL PROTECTED]> said:
>
> > I ran ntpdate on an amd64 system with ipv6 enabled and a
On Mon, Jan 23, 2006 at 02:39:42PM -0500, Kris Kennaway wrote:
> On Thu, Jan 19, 2006 at 02:30:35PM +0900, JINMEI Tatuya / [EMAIL
> PROTECTED]@C#:H wrote:
> > >>>>> On Sun, 15 Jan 2006 19:44:38 -0500,
> > >>>>> Kris Kennaway <[EMAIL PROTECTED]
On Sun, Jan 15, 2006 at 07:44:38PM -0500, Kris Kennaway wrote:
> I ran ntpdate on an amd64 system with ipv6 enabled and a skewed clock
> (ntpdate stepped it back by about an hour), and immediately got a
> use-after-free panic in ifaddr. When I rebooted with memguard enabled
> on this
On Tue, Feb 07, 2006 at 07:16:09PM +0900, JINMEI Tatuya / [EMAIL
PROTECTED]@C#:H wrote:
> >>>>> On Tue, 7 Feb 2006 00:45:02 -0500,
> >>>>> Kris Kennaway <[EMAIL PROTECTED]> said:
>
> >> I ran ntpdate on an amd64 system with ipv6 enabled and
On Sat, Feb 11, 2006 at 03:38:56PM +0900, JINMEI Tatuya / [EMAIL
PROTECTED]@C#:H wrote:
> >>>>> On Fri, 10 Feb 2006 22:50:25 -0500,
> >>>>> Kris Kennaway <[EMAIL PROTECTED]> said:
>
> >> Sorry, not really (we've not got a test environm
On Sat, Feb 11, 2006 at 04:31:23PM +0900, JINMEI Tatuya / [EMAIL
PROTECTED]@C#:H wrote:
> >>>>> On Sat, 11 Feb 2006 02:14:11 -0500,
> >>>>> Kris Kennaway <[EMAIL PROTECTED]> said:
>
> >> >> Sorry, not really (we've not got a test
ient. I
Talk to kuriyama@ about this, he is currently investigating it.
Kris
pgpIFzP7UqrDw.pgp
Description: PGP signature
ed38) at fork_exit+0xc5
fork_trampoline() at fork_trampoline+0x8
--- trap 0x1, eip = 0, esp = 0xf3bbed6c, ebp = 0 ---
db>
I can leave it in DDB for a little while (can't dump) in case someone
needs additional debugging, but not forever.
Kris
pgpk4Q1JL3z5n.pgp
Description: PGP signature
On Thu, Feb 16, 2006 at 03:15:14PM -0500, Kris Kennaway wrote:
> Peter Holm's stress test gave me this on an SMP machine running fresh
> 7.0:
>
> Fatal trap 12: page fault while in kernel mode
> cpuid = 0; apic id = 00
> fault virtual address = 0xdeadc0de
> fault code
ine+0x8
--- trap 0x1, eip = 0, esp = 0xe5007d6c, ebp = 0 ---
db>
Core available.
Kris
pgpHaWvwryxPy.pgp
Description: PGP signature
On Thu, Feb 23, 2006 at 03:19:46AM -0500, Kris Kennaway wrote:
> I ran tcpdump and killall tcpdump in a loop on 7.0, and after a few
> minutes it panicked with:
>
> Fatal trap 12: page fault while in kernel mode
> cpuid = 0; apic id = 00
> fault virtual address
On Thu, Feb 16, 2006 at 03:15:14PM -0500, Kris Kennaway wrote:
> Peter Holm's stress test gave me this on an SMP machine running fresh
> 7.0:
>
> Fatal trap 12: page fault while in kernel mode
> cpuid = 0; apic id = 00
> fault virtual address = 0xdeadc0de
> fault code
OK
> 6.0 5.4 Hangs
> 6.1pre 5.4 Hangs
>
> 6.0 6.0 OK
> 6.1pre 6.0 OK
>
>
> Any ideas about this, or whom to contact?
kuriyama; there are PRs suggesting that a change he made about a year
ago caused problems.
Kris
pgpTVvgI8Z6vW.pgp
Description: PGP signature
side
> at all, only as a client.
It's supported it since the early 5.x days. However, evidence is that
it was broken in some situations in 6.0-RELEASE.
Kris
pgp3fUzraKOqi.pgp
Description: PGP signature
_handlers+0x144
ithread_loop() at ithread_loop+0xa4
fork_exit() at fork_exit+0x94
fork_trampoline() at fork_trampoline+0x8
which looks like a double free of an mbuf. Can someone take a look?
Kris
pgp6qoBVG41uV.pgp
Description: PGP signature
9fa560:cpu5) 1815572046008 net/route.c.198: Adding ref -> 0
0xf80227cefc20
Kris
P.S. This comment in netinet6/ip6_output.c appears to be bogus, since
RTFREE is only a single statement:
if (ro == &ip6route && ro->ro_rt) { /* brace necessary for RTFREE */
On Mon, Mar 06, 2006 at 06:15:56PM -0500, Kris Kennaway wrote:
> I've been adding KTR debugging to try and track down the cause of this
> recurring problem (FYI: debug.mpsafenet=0 is no longer working around
> it). To refresh your memory, here is the panic:
>
> db> wh
>
#IP security (crypto; define w/ IPSEC)
Better to use fast ipsec unless you have a need for ipv6.
Kris
pgpu2TAwoFW2j.pgp
Description: PGP signature
em
> >or the requirement of FreeBSD 6.0 kernel has been increased and HW
> >of my firewall is not enough?
>
> HZ=100 is not a good idea..
> i set it to 1000 before and i had no idle CPU
> try to set it to 2000
> echo 'kern.hz="2000"' >> /boot/loader.conf
I don't think that's a sensible idea on a 400MHz CPU.
Kris
pgpybLTHctM3w.pgp
Description: PGP signature
= 32, tf_err = 2, tf_eip = 671763789, tf_cs = 51, tf_eflags = 659, tf_esp =
-1077941536, tf_ss = 59}) at ../../../i386/i386/trap.c:1016
#13 0xc06e3daf in Xint0x80_syscall () at ../../../i386/i386/exception.s:191
#14 0x0033 in ?? ()
Previous frame inner to this frame (corrupt stack?)
Core ava
problem.
Backing out the changes to vfs_lookup.c would work around the problem
for now (although it reintroduces other bugs).
> Now cpu is like it should be, but BSD crashes twice a day
> with nothing in logs that I can find.
What do you mean "crashes" then? Do you need to configure crashdumps
as described in the handbook and developers' handbook?
Kris
pgpvvSY9vFTEA.pgp
Description: PGP signature
On Tue, May 23, 2006 at 09:58:26PM -0400, Kris Kennaway wrote:
> I got this panic as a non-privileged user running the stress2 test
> component that does random syscalls:
>
> panic: m_prepend: MH_ALIGN not PKTHDR mbuf
> cpuid = 1
> KDB: enter: panic
> [thread pid 15370 tid
this problem. However, others are seeing sporadic
watchdog timeouts at higher system load on non-shared em systems too.
This is in addition to the hardware instances you already know about
where the em driver has not worked going back to 5.x.
Kris
pgpxsUkSh2pBg.pgp
Description: PGP signature
2, hoping to halve the
> dump times -- and it is barely crowling now...
>
> Please, advise. Thanks!
We've been discussing em issues for several weeks now, so it would be
great if you could get yourself up to speed - please review the
discussion on freebsd-stable and freebsd-net (start with posts by
Scott Long, myself, and Jack Vogel).
Kris
pgpkRQ7ktM9yK.pgp
Description: PGP signature
bad).
Kris
pgphfb5isF86R.pgp
Description: PGP signature
documented in http://people.freebsd.org/~kris/scaling/mysql.html and
references therein.
You'll probably want to use my kris-contention p4 branch to avoid the
scaling bottlenecks we have identified and solved so far.
Kris
___
freebsd-net@freebsd.or
ince most of those applications probably support NetBSD or
> OpenBSD and I plan to bump __FreeBSD_version. Other then those issues
Will you fix all the broken ports if I give you a list?
Kris
msg07351/pgp0.pgp
Description: PGP signature
ents that ended
> up causing a lot of grief, most of which I was not involved in,
> but merely watched from the sidelines.
I'm hard-pressed to think of any change to FreeBSD that you have not
involved yourself in ;-)
Kris
pgp0.pgp
Description: PGP signature
out any solution :<
> Is there any workaround, or patches ?
Check that it's negotiating the media type and options correctly. On
the gohan machines it has been failing to negotiate full-duplex mode
for the past few months, leading to LAN transfer speeds on the order
of 20kps unl
Synopsis: ether_input casts m_hdr to mbuf and causes bpf_mtap to access random data
Responsible-Changed-From-To: freebsd-bugs->freebsd-net
Responsible-Changed-By: kris
Responsible-Changed-When: Mon Jul 14 03:48:13 PDT 2003
Responsible-Changed-Why:
Assign to networking developers
h
Synopsis: mbuf-related kernel panic (sbappendaddr)
Responsible-Changed-From-To: freebsd-bugs->freebsd-net
Responsible-Changed-By: kris
Responsible-Changed-When: Mon Jul 14 04:04:13 PDT 2003
Responsible-Changed-Why:
Assign to net mailing list for evaluation
http://www.freebsd.org/cgi/qu
Synopsis: Bug in network stack in sending broadcast packets
Responsible-Changed-From-To: freebsd-bugs->freebsd-net
Responsible-Changed-By: kris
Responsible-Changed-When: Mon Jul 14 04:20:31 PDT 2003
Responsible-Changed-Why:
Assign to net mailing list for evaluation
http://www.freebsd.org/
Synopsis: process exits but socket is still ESTABLISHED
Responsible-Changed-From-To: freebsd-bugs->freebsd-net
Responsible-Changed-By: kris
Responsible-Changed-When: Mon Jul 14 04:20:52 PDT 2003
Responsible-Changed-Why:
Assign to net mailing list for evaluation
http://www.freebsd.org/cgi/qu
have options IPX in kernel and the IPXrouted is running
> fine.
kldstat tells you that the module isn't *loaded*. Have you added nwfs
support to your kernel, or do you have the nwfs.ko module available in
the module load path?
Kris
pgp0.pgp
Description: PGP signature
On Mon, Jul 21, 2003 at 08:27:15AM +0200, Roger Olofsson wrote:
> Hello Kris and thank you for your swift reply,
>
> I have searched the machine for nwfs.ko and it doesn't exist. I have of
> course rebuilt kernel with options IPX and recompiled ncplib to make sure
> that
d8 88
`88' "" `Y8 `8b d8' 88
88 ,adP88 `8b d8' ""
88 88,,88 `8b,d8' aa
88 `"8bbdP"Y8 Y88' 88
d8'
d8'
:-)
Kris
pgp0.pgp
Description: PGP signature
itted through the pipe even after I
reconfigured it back to the previous (working) setting. Restarting
ppp, ifconfig down/up, had no effect and I had to reboot the machine
to get it to transmit packets through the interface again.
Kris
pgp0.pgp
Description: PGP signature
e details, like the commands you tried and the errors you
got in return.
Kris
pgp0.pgp
Description: PGP signature
up() at mi_startup+0xb5
begin() at begin+0x2c
Can you please investigate?
Kris
pgp0.pgp
Description: PGP signature
On Thu, Oct 23, 2003 at 12:07:14PM -0700, Kris Kennaway wrote:
> Updated to HEAD, booted with WITNESS enabled, and the boot dies here:
>
> ipfw2 initialized, divert disabled, rule-based forwarding enabled, default to
> accept, logging unlimited
> malloc() of "16" with th
mething lightweight like 'ipfwshow'
> as /bin/sh builtin, isn't it?
Dear god, no! How many hundred times per second are you running ipfw
for the overhead to be non-negligible?
Kris
--
In God we Trust -- all others must submit an X.509 certificate.
-- Charles Forsythe <
w to add TCP-MD5 keys to both FreeBSD and OpenBSD SADBs.
>
> Is there any plans about integration of BGP routing daemon (Zebra or Quagga)
> into FreeBSD? With BGP routing daemon onboard, FreeBSD will be a strong
> alternative against expensive commercial routers.
What's wrong with installing the port if you want this?
Kris
pgp0.pgp
Description: PGP signature
of time under a suitably restrictive
license, with a provision that after a certain time (e.g. 12 months)
it becomes BSD-licensed. This allowed Kirk to get commercial funding
for the SU work while also being able to contribute it to end-users
who don't mind the license terms, and eventually for other commercial
users.
Kris
pgp0.pgp
Description: PGP signature
4-bit
variable would slow down the code on non-64-bit architectures like the
venerable i386.
Kris
pgp0.pgp
Description: PGP signature
On Mon, Mar 15, 2004 at 06:23:37PM -0800, Marcel Moolenaar wrote:
> On Mon, Mar 15, 2004 at 04:05:44PM -0800, Kris Kennaway wrote:
> > >
> > > It seems that the byte counters (derived from netstat -nbi) reset at
> > > around 4 GB. Is there no way around this?
101 - 177 of 177 matches
Mail list logo