On Friday 28 May 2010 07:46:07 Giulio Ferro wrote:
> Months ago I reported a system freezing whenever bridge was used
> with pf. This still happens now in 8.1 prerelease: after several minutes
> to hours
> that the bridge is active the system becomes unresponsive.
as I told you last time your repo
On Monday 31 May 2010 08:03:09 Giulio Ferro wrote:
> Max Laier wrote:
> > On Friday 28 May 2010 07:46:07 Giulio Ferro wrote:
> >> Months ago I reported a system freezing whenever bridge was used
> >> with pf. This still happens now in 8.1 prerelease: after several minu
On Tuesday 06 July 2010 22:32:22 Jeremy Chadwick wrote:
> Adding Max Laier (maintainer of pf) to the CC list. He may have some
> ideas as to what's causing this. Max, relevant thread details:
>
> http://lists.freebsd.org/pipermail/freebsd-stable/2010-July/057586.html
> http
n Linux is capable of doing this and solaris too.
> Well then. At least everythings clear now. And in the end, clarifing things
> was the reason for that mail thread :)
You are looking for net/ifstated
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier
can't seem to find ou
> |> what.
> |>
> |> 2a01:678:1:443::443 is a 7.0
> |> 2a01:678:1:443::is a 6.2
> |> 2a01:678:100:2::is a 6.0
> |
> | I've used all of those with IPv6 and they work fine, it's most likely
> | a small config pr
work out if it will
> fit onto a CD or not :-)
But you can't do that on UFS either: sparse files, hardlinks, ...
The GNU du(1) has a "--apparent-size" switch to get the logical size instead
of what the tool's name suggests (the disk usage).
--
/"\
S_ISCHR(st.st_mode) is true
http://www.freebsd.org/doc/en/books/arch-handbook/driverbasics-block.html
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon
ules using the user or group filters.
>
> No, I'm aware of the problems with pf(4) and user/group rules. This LOR
> is in combination with rules on tun(4) devices, as you can see from the
> backtrace. I wonder what tunclone() is doing in there, though.
This LOR is believed to be harmless. There
it to
make sure synproxy is working, but I don't think it was broken after my last
import ... do you have a particular test case that I could reproduce?
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | IC
On Thursday 04 December 2008 16:47:13 Max Laier wrote:
> On Thursday 04 December 2008 16:24:23 Vladimir Ermakov wrote:
> > problem is fixed in OpenBSD 4.4
> > http://www.openbsd.org/plus44.html
>
> The bug this note refers to was introduced after OpenBSD 4.1 (our last
> i
Hello Derek,
On Thursday 10 December 2009 04:45:12 Derek Kulinski wrote:
> My console gets flooded by "pf: unlocked lookup" message anyone knows
> what circumstances cause this message, so I could figure out which pf
> rule is causing it?
this is a generic informational message that was put into
On Friday 22 January 2010 15:20:13 John Baldwin wrote:
> On Friday 22 January 2010 3:08:45 am Florian Smeets wrote:
...
> > If it really is IPsec traffic then there are no rewrite rules only 10 pf
> > pass rules on the enc0 interface and a "scrub in all" rule.
> >
> > Perhaps it matters that i have
On Friday 22 January 2010 19:49:19 John Baldwin wrote:
> On Friday 22 January 2010 12:18:20 pm Max Laier wrote:
> > On Friday 22 January 2010 15:20:13 John Baldwin wrote:
> > > On Friday 22 January 2010 3:08:45 am Florian Smeets wrote:
> >
> > ...
> >
> &
On Tuesday 02 February 2010 18:48:02 Jack Vogel wrote:
> So apparently this thing needs no special knowledge in the driver, yet
> something in
> the new code breaks it, can someone explain tersely how the altq app
> actually
> "pokes" or "hooks up" to the driver? I am not clear about that and I
>
Okay ... attached is a patch to fix this for em(4) (and lay the groundwork to
fix it for other drbr_* consumer as well). I have tested it in VirtualBox,
but don't have real hardware to check for non-ALTQ performance or other
regressions.
Test, comments and review appreciated.
--
Max
Index:
On Sunday 07 March 2010 00:32:21 Jeremy Chadwick wrote:
> On Sat, Mar 06, 2010 at 02:56:07PM -0800, Nick Rogers wrote:
> > ALTQ + RELENG_8 + em(4) will not work at the moment. It does not matter
> > what your PF ruleset looks like or how much traffic you are pushing. The
> > packets that transit th
; 1. Can usb support be disabled from the loader?
> 2. Anyone got any ideas why USB would break the IPMI keyboard?
You could try hint.kbdmux.0.disabled="1" - see kdbmux(4) for details.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier
able 2
> > in ipfw). Traffic to is routed via fastroute in pf
> > (meaning using the default route).
That's quite a complex setup. It would really be interesting to get the
trace for the first LOR in order to figure out which code path we are
looking at. I have a feeling t
might not be
easily implemented in WITNESS.
Anyways - I believe this patch should work around your problem. Let us
know your findings - thanks.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4free
4d
> syscall() at syscall+0x1b5
> Xfast_syscall() at Xfast_syscall+0xab
> --- syscall (133, FreeBSD ELF64, sendto), rip = 0x80091132c, rsp =
> 0x7ffee6e8, rbp = 0x40 ---
Any input greatly appreciated!
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier
nd plugging the power. This is not an
interesting number. What would be interesting is to stop the syncer,
touch a known number of files and then pull the plug.
But in the end it boils down to: There is fsync to build transactions -
use it or else. If you find that you lose fsync'ed fi
| [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
___
freebsd-stable@freebsd.org mailing lis
s behaves correctly! ;-)
>
> On a side note, I could easily fix this problem by frontending the
> server with a Cisco PIX or ASA. I believe they have "half closed"
> timers just for this purpose... Perhaps a kernel tunable knob would be
> a nice option/fix/hack a
uld you
expect us to do the work for you? Unless you can provide "*EXACT*" bug
reports and show willingness to help debugging them, there really is not
much point in this thread.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier
ve a lot of time to send
bogus emails (26 since Wednesday). If you had only spend a bit of that
time into actual bughunting ...
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EM
o set) or myself
directly.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
___
actual question, the answer is no.
>
>
> hope this helps,
>
> Doug
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against
On Tuesday 22 July 2008 00:31:53 Charles Sprickman wrote:
> On Mon, 21 Jul 2008, Kevin Oberman wrote:
> >> From: Max Laier <[EMAIL PROTECTED]>
> >> Date: Mon, 21 Jul 2008 21:38:46 +0200
> >> Sender: [EMAIL PROTECTED]
> >>
> >> On Monday 21 J
d. I assume that port maintainers of affected (kernel module) ports
will bump the port revision after the change to give you/portupgrade a hint.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2par
something that supports 64bit addresses (and thus 512*2^64 bytes of swap
space per device) ... but I don't see why you'd want to do something like
this. Remember that you need memory to manage your swap space as well!
--
/"\ Best regards, | [EM
quot;\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
signature.asc
Description: This is a digitally signed message part.
On Thursday 02 August 2007, Frank Behrens wrote:
> Max Laier <[EMAIL PROTECTED]> wrote on 2 Aug 2007 17:13:
> > On Thursday 02 August 2007, Frank Behrens wrote:
> > > The build has following problems:
> > > - libexec/Makefile has still reference to ftp_proxy
On Thursday 02 August 2007, Frank Behrens wrote:
> Max Laier <[EMAIL PROTECTED]> wrote on 25 Jul 2007 1:35:
> > now available at: http://people.freebsd.org/~mlaier/PF41/ with
> > instructions how to build.
>
> Thanks! I tested it, because I have some trouble with pf
&g
ntation either. There has been a
discussion to provide a environment variable to emit only IPv4 queries,
though.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECT
s includes the hal and xorg-server ports.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
signature.asc
Description: This is a digitally signed message part.
ENG_6
isn't broken for me ...
Any takers? If not I might get round to it eventually, but I'd prefer
somebody with genuine interest would step up.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4fr
, but
> without any results. As an experiment I tried also to plug a system HDD
> to another sever platform (SuperServer 6015V-TB), but system hanging
> didn't stop. I think that it is not only hardware problem.
> Linux (Gentoo) and Windows server 2003 on this hardware were workin
to go back (not sure why you
would want to, though) you should be able to cvsup RELENG_6_2 and do a
src upgrade (or downgrade in this case). This, however, might leave you
with some leftover files that were added to RELENG_6.
--
/"\ Best regards, | [EM
ans something, I do not know freebsd-update principles in conjunction
> with INDEX-*.
It looks like freebsd-update will delete all files in INDEX-OLD but not in
INDEX-NEW by default. Is there a way to make a certain file stick
around? It was obviously a mistake to install /etc/pf.conf a
ill a lot of room for improvement here. I'll rebuild with
lock profiling tomorrow and see what I can gather. Anything you'd like
to see in particular?
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4f
improvement - or try nscd(8).
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
signature.asc
Description: This is a digitally signed message part.
isn't
> starting up properly for no apparent reason).
Yet they lose the configuration changes they might have applied to the
original foo.conf. I don't think you should delete files that have
changed. Maybe moving them somewhere for future reference would be the
best thing to do
t; Isn't the "pf_nattable_max" a typo for "ipf_nattable_max"?
>
> BTW, talk to Darren Reed about that, he is the author and ipf is
> contributed software :)
>
> Cheers,
# ipf -T list
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Ma
gt; or 7 and if it works well.
>
> Thanks in advance :)
Last time I checked there was something wrong with the apic.
hint.apic.0.disabled=1 from the loader got it booting and working well,
but you loose SMP.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ /
vs[] and subsequent chip revision arrays.
It's easiest to build a kernel w/o device bge and loading bge from
modules. This way you can cd to src/sys/modules/bge and "make load;
#test; make unload; #change source; #repeat" until it works.
--
/"\ Best regards,
gt;
> IPC Sys5 isn't "64bit-aware" or the problem is elsewhere?
It looks like shm_segsz in struct shmid_ds is of type int, so that will limit
your segment. Also there are the kernel config options SHMMAX and SHMMAXPGS.
--
/"\ Best regards, | mla...@f
u might want to check with
them to make sure they have the fix in their build - though I recall it was a
joined effort back then.
--
/"\ Best regards, | mla...@freebsd.org
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.lov
On Wednesday 04 March 2009 13:50:09 Eirik Øverby wrote:
> On Mar 3, 2009, at 19:23, Scott Ullrich wrote:
> > On Tue, Mar 3, 2009 at 12:52 PM, Max Laier wrote:
> > [snip]
> >
> >> Make sure that you are configuring the same aliases with the same
> >> netmask
a big issue that it's missing as write operations on the
> domain list are conservative and extremely rare.
>
> I've CC'd Max Laier, who added the warnings -- perhaps he could lend some
> insight into the types of problems he anticipated. The main one I'm aware
>
that might well be the culprit for the error you are seeing. I assume
you can't trigger the panic at will, though. In any case I'd be interested in
your feedback, thanks.
--
/"\ Best regards, | mla...@freebsd.org
\ / Max Laier |
| [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgpF9ZSmeYtaR.pgp
Description: PGP signature
922602548 264811
Are you using usb on that box? If not, get rid of device uhci in your kernel
config to see if that fixes it. If you are using usb - I have no idea. A
BIOS upgrade might help.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Ma
y.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgp3dTcOo1C4r.pgp
Description: PGP signature
On Tuesday 11 July 2006 14:35, Mark Andrews wrote:
> > On 7/10/06, Max Laier <[EMAIL PROTECTED]> wrote:
> > > On Monday 10 July 2006 16:40, Vlad GALU wrote:
> > > > Is the iwi driver going to be synced with rev. 1.3x of HEAD? I'm
> > > > usi
On Tuesday 11 July 2006 15:04, Michael Butler wrote:
> Max Laier wrote:
> | net/iwi-firmware-kmod, but it needs to be updated to the new
> | __FreeBSD_version
> | Right now it will tell you that you need iwi-firmware instead, which is
> | wrong.
>
> Once the updates have bee
sed to work?
This is from the firmware(9) support code. Add "options firmware" and you
should be fine. You will still need to load the firmware blobs as modules,
but that's another story.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Ma
T-111-E
> add_rule(): PF ioctl DIOCADDRULE failed
> Jul 20 10:44:11 fw1 kernel: Jul 20 10:44:11 fw1 HTTP[7607]: NATT-701-E
> addnatmap out(): Adding TCP NAT MAP from [127.0.0.1]:60860 to
> [212.80.76.13]:80 -> [193.179.161.10]:60860 failed
> Jul 20 10:44:11 fw1 kernel: Jul 20 10
<[EMAIL PROTECTED]> wrote:
> > Have you tried using the firmware from iwi-firmware-kmod, rather than
> > iwi-firmware. I am using the former on a Thinkpad T42 and it is working
> > ok.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ /
ot;make buildworld" and "make
buildkernel". Order is crucial as "make buildworld" also builds a new
compiler and includes that are used later. There is a separate target to
only build the tools that are required to build a kernel. Check the
Makefile.
--
/"\ B
T6, av, &a)))
ret = add_dstip(cmd, av);
- if ((ret == NULL) && strcmp(av, "any") != 0)
+ if ((ret == NULL) && (strcmp(av, "any") != 0))
ret = cmd;
free(host);
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgpBYLkXoGk54.pgp
Description: PGP signature
us of that is or if it works with the
in-kernel version.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgpg0JXkwNWe3.pgp
Description: PGP signature
race, or at least figure out which function
the IP is refering to?
> The system is a single Xeon with HTT enabled and the HDD used is
> somewhat old. I can try installing on another one. The swapper
> process somehow points me to the HDD.
> Of course any clues are most welcome.
On Saturday 09 September 2006 19:38, Karl Denninger wrote:
> This is not cool folks.
Want a refund?
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/
down" in rc.conf will result in an 'up' interface. I
> also disabled devd, as it seems to be running pccard_ether carp0 start
> as a result of the interface creation. Although it is started
> sometime after the interface has been created.
>
> How are other people handling
gt; Any ideas?
If you do have firmware-iwi-kmod and things are still not working properly
you should try the following:
1) Disable WPA on AP and see if you can attach w/o wpa_supplicant
2) See if you can attach w/ wpa_supplicant (key_mgmt=NONE)
etc. ... to find out which part really is th
roblem here.
After I associated with the AP w/ hidden SSID I changed the channel via
webinterface. The disconnect resulted in the exact problem you were
having. Only stopping and restarting wpa_supplicant fixed the issue and
I got associated on the new channel. Not sure what happens
On Monday 09 October 2006 20:26, Max Laier wrote:
> On Monday 09 October 2006 19:53, Andrew N. Below wrote:
> > Hi.
> >
> > [..]
> >
> > > You can try using ap_scan=2 or whatever it is in the
> > > wpa_supplicant.conf file. This causes wpa_supplicant
PLES section of carp(4).
> What can I do to make the balance automatic as the docs imply? This
> also happens on another pair of machines I have which are CARP +
> arpbalance for another IP.
>
> The NICs in question are hooked up to a gigabit switch.
--
/"\ Best regards,
be worded and submit as a doc PR.
> It seems to me that preempt off is a mostly useless
> configuraiton for load balance, but probably not for just simple
> failover.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier
Hey Scott,
On Saturday 11 November 2006 04:44, Scott Ullrich wrote:
> Sources from today, right before the compile.
>
> I have paused the virtual machine if someone would like me to issue
> further db> commands.
>
> Thanks,
>
> Scott
>
>
> FreeBSD 6.2-PRERELEASE #0: Sat Nov 11 02:47:35 UTC 2006
>
.
> b) use an external usb network "dongle". Look at the ural driver, you
> can find some of the supported devices quite cheap. I dont know how
> good they are, I have just tested one, and have some issues with it
> (stability) but haven't been able to rule out
t?
Are there similar instances? RANDOM_IP_ID does only have the "was removed"
note, AFAIR.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EM
gt; Both 'show witness' and 'show locks' came up empty. What's the most
> effective way to hunt down these deadlocks with the online kernel debugger?
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier
tell me if
> > this problem is new to you and if I should do that.
>
> I've CC'd Max Laier due to his extensive work with pf on FreeBSD. I think
> a WITNESS+INVARIANTS kenrel would be quite helpful, if you could.
Yes, WITNESS would be interesting, though I don't
| [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgp9wLPC2pT6O.pgp
Description: PGP signature
there any known problems with these
> > card and 5.3? this happens on different servers updated since the last 2
> > weeks.
> >
> > many thanks,
> >
> > karl
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier
xperienced a speed degradation as well. Please let me know either way
with information about the chipset on your NIC. Thanks!
> Many thanks,
>
> Keal
>
> > -Ursprüngliche Nachricht-
> > Von: Max Laier [mailto:[EMAIL PROTECTED]
> > Gesendet: Sonntag, 30.
gt; If you need some details or so let me know by cc please, I'm not reading
> this group on a very regular basis.
PR kern/61448 might apply to you. Can you try the diff offered there and
follow-up with your findings?
http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/61448
Thanks.
--
/&
Can you also please
try the attached diff and see if it turns up anything - though I certainly
doubt that. Really except to see pfsync being the culprit here. Tell me if
removeing it helps. Thanks.
I'm a bit busy these days so I can't do extensive testing myself. It'd be a
grea
le.freebsd.org/~mlaier/if_rl.c.PR.patch directly.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgpUC7GRsTXtb.pgp
Description: PGP signature
atch in
kern/61448, which I recently committed to HEAD, works (better). Please stay
away from the patch above as it is a hack. If nothing else helps - however -
please send me a HEADSUP! There is also another rl(4) PR: kern/63190 which I
haven't heard back from, yet.
--
/"\ Best
assumption (see the module's Makefile) or you can reenable "options INET6" in
the kernel.
The ENOENT error returned from kldload is a bit misleading, though.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ
16 CET 2005 [EMAIL PROTECTED]:/usr/obj/usr/src/sys/ATLAS i386
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgpxJPwdRAya0.pgp
Description: PGP signature
do_death(1);
| }
| }
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgplY5XYA57GD.pgp
Description: PGP signature
#x27;t live without ALTQ rate-limitting on VLAN submit a PR and
throw it my way.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign
should simply be that it disables VLAN hardware support
which doesn't seem to work with promiscuous mode. You could also try to
disable it manually (ifconfig) to see if that improves on the packet loss.
> Marko
>
> Max Laier wrote:
> >On Tuesday 29 March 2005 20:28, Marko Äuk wrot
ng manually $ifconfig em0 -vlanhwtag
> ifconfig em1 disable ? :) I have traffic on it :) ( I'll be running
> carp as soon and pfsync as I'll learn how to and if it will work fine
>
> :) , to have redaudant firewall )
>
> Cuk
>
> Max Laier wrote:
> >On Thursd
o want to enable
debugging (pfctl -x misc) and watch the console for "bad state" messages.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgpwF6SMfaU8B.pgp
Description: PGP signature
etstat -m is giving odd results:
>
> FAQ. Documented in 5.3 errata:
> http://www.freebsd.org/releases/5.3R/errata.html
Maybe we should add that:
$vmstat -z | grep Mbuf
gives an idea of the actual memory usage for mbufs.
--
/"\ Best regards,
> > > further w/o that, sorry. :(
> >
> > NP, I've added DDB to my kernel, but I'm having a hard time finding
> > out how
>
> to
>
> > break into DDB over an SSH connection ... telnet is easy, but all my
> > HP
>
> remote
>
&g
>
> Marc G. Fournier Hub.Org Networking Services
> (http://www.hub.org) Email . [EMAIL PROTECTED]
> MSN . [EMAIL PROTECTED] Yahoo . yscrappy Skype: hub.org
> ICQ . 7615664
>
> ________
"bad cksum!" - this is a symptom of checksumming done in
hardware. ifconfig bge1 -rxcsum -txcsum should get rid of them.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgppB7vvCmPvM.pgp
Description: PGP signature
as it sees the packet before the hardware has calculated
it. On the receiver the checksum will be correct.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ AS
RAM (6G of RAM, 8G of swap) :(
DDB has a ps of it's own - I'm not sure how helpful it is for your
specific problem, though.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net
d3000,...) at socket+0xb3
> syscall(3b,3b,3b,0,7,...) at syscall+0x380
> Xint0x80_syscall() at Xint0x80_syscall+0x1f
> --- syscall (97, FreeBSD ELF32, socket), eip = 0x282939d3, esp =
> 0xbfbfeb1c, ebp = 0xbfbfebf8 ---
> db >
Something like the attached should fix it. Seems t
d?tn=1207>]
>
>
> Remarks:
>
> /2007-Jan-18 16:07:54 by anonymous:/
> We have attempted to fix this with no luck. This is a FreeBSD dhclient
> issue. Please install FreeBSD and post a bug report to
> freebsd-stable@freebsd.org
--
/"\ Best regards,
ateless autoconfiguration. You might
want to try "rtsol -d interface".
3) Check the net.inet6.ip6.accept_rtadv sysctl. ipv6_enable should take
care of this.
4) Check your firewall rules.
--
/"\ Best regards, | [EMAIL PROTECTED]
\ / Max Laier
s, | [EMAIL PROTECTED]
\ / Max Laier | ICQ #67774661
X http://pf4freebsd.love2party.net/ | [EMAIL PROTECTED]
/ \ ASCII Ribbon Campaign | Against HTML Mail and News
pgpjdZq0zkQiY.pgp
Description: PGP signature
) ...". If more
control is required you have to write explicit addresses in your
configuration anyway. 2 is obsolete by "pfctl -vvsI -i stf0" which has
all the counters for all the interfaces. ALTQ is the only remaining
problem. I did do some initial patches to tear down
o any keep state" | pfctl -vf-
pass out on stf0 inet6 all keep state
Still, rule loaded without problems ...
The "(ifnX)" syntax is only for places where you use the interface as an
address. The "on ifnX" part stays unchanged in any case and it does not
matter if the int
1 - 100 of 143 matches
Mail list logo
