From owner-freebsd-net@FreeBSD.ORG  Sun Aug 19 05:42:00 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 5A07D16A417
	for <freebsd-net@freebsd.org>; Sun, 19 Aug 2007 05:42:00 +0000 (UTC)
	(envelope-from gnn@neville-neil.com)
Received: from mrout1-b.corp.dcn.yahoo.com (mrout1-b.corp.dcn.yahoo.com
	[216.109.112.27])
	by mx1.freebsd.org (Postfix) with ESMTP id 1EA6213C46E
	for <freebsd-net@freebsd.org>; Sun, 19 Aug 2007 05:42:00 +0000 (UTC)
	(envelope-from gnn@neville-neil.com)
Received: from minion.local.neville-neil.com (proxy8.corp.yahoo.com
	[216.145.48.13])
	by mrout1-b.corp.dcn.yahoo.com (8.13.8/8.13.8/y.out) with ESMTP id
	l7J5fq5p034028; Sat, 18 Aug 2007 22:41:53 -0700 (PDT)
Date: Sun, 19 Aug 2007 12:08:49 +0900
Message-ID: <m27ins2pby.wl%gnn@neville-neil.com>
From: "George V. Neville-Neil" <gnn@neville-neil.com>
To: "Scott Ullrich" <sullrich@gmail.com>
In-Reply-To: <d5992baf0708181258t501e5842y6b8bdee8a5c2e07c@mail.gmail.com>
References: <d5992baf0708171353j7e7563a8y8dca4475779bc410@mail.gmail.com>
	<20070818102803.GA1319@jayce.zen.inc>
	<d5992baf0708181258t501e5842y6b8bdee8a5c2e07c@mail.gmail.com>
User-Agent: Wanderlust/2.15.5 (Almost Unreal) SEMI/1.14.6 (Maruoka)
	FLIM/1.14.8 (=?ISO-8859-4?Q?Shij=F2?=) APEL/10.7 Emacs/22.1
	(i386-apple-darwin8.9.1) MULE/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset=US-ASCII
Cc: freebsd-net@freebsd.org, VANHULLEBUS Yvan <vanhu_bsd@zeninc.net>
Subject: Re: Racoon(ipsec-tools) enters sbwait state or 100% CPU
	utilization	quite often on RELENG_1_2
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 19 Aug 2007 05:42:00 -0000

At Sat, 18 Aug 2007 15:58:16 -0400,
Scott Ullrich wrote:
> Thanks for the very detailed response.   We have worked around the
> problem for now with a simple shell script that looks for racoon
> falling over and simply restarting it.
> 
> Does anyone know if this is fixed in 7-CURRENT?  If so we can easily
> wait until 7 arrives as we plan on releasing pfSense on the 7 platform
> as soon as it is released.
> 
> George, would you like me to file a PR for this against 7-CURRENT?
> 

Please file a PR and assign it to me.

I read your kernel config, and it seems you were using FAST_IPSEC, and
not Kame IPsec, so I'm wondering how relevant Yvan's comment might
be.  I think we should look a bit more deeply at this.

Best,
George