From owner-freebsd-ipfw@FreeBSD.ORG Mon Mar 23 11:06:58 2009 Return-Path: Delivered-To: freebsd-ipfw@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 92CC9106566B for ; Mon, 23 Mar 2009 11:06:58 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 7F8728FC32 for ; Mon, 23 Mar 2009 11:06:58 +0000 (UTC) (envelope-from owner-bugmaster@FreeBSD.org) Received: from freefall.freebsd.org (localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n2NB6w7J004040 for ; Mon, 23 Mar 2009 11:06:58 GMT (envelope-from owner-bugmaster@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n2NB6vlU004036 for freebsd-ipfw@FreeBSD.org; Mon, 23 Mar 2009 11:06:57 GMT (envelope-from owner-bugmaster@FreeBSD.org) Date: Mon, 23 Mar 2009 11:06:57 GMT Message-Id: <200903231106.n2NB6vlU004036@freefall.freebsd.org> X-Authentication-Warning: freefall.freebsd.org: gnats set sender to owner-bugmaster@FreeBSD.org using -f From: FreeBSD bugmaster To: freebsd-ipfw@FreeBSD.org Cc: Subject: Current problem reports assigned to freebsd-ipfw@FreeBSD.org X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Mar 2009 11:06:59 -0000 Note: to view an individual PR, use: http://www.freebsd.org/cgi/query-pr.cgi?pr=(number). The following is a listing of current problems submitted by FreeBSD users. These represent problem reports covering all versions including experimental development code and obsolete releases. S Tracker Resp. Description -------------------------------------------------------------------------------- o kern/132553 ipfw [ipfw] ipfw doesn't understand ftp-data port o kern/131817 ipfw [ipfw] blocks layer2 packets that should not be blocke o kern/131601 ipfw [ipfw] [panic] 7-STABLE panic in nat_finalise (tcp=0) o kern/131558 ipfw [ipfw] Inconsistent "via" ipfw behavior o bin/130132 ipfw [patch] ipfw(8): no way to get mask from ipfw pipe sho o kern/129103 ipfw [ipfw] IPFW check state does not work =( o kern/129093 ipfw [ipfw] ipfw nat must not drop packets o kern/129036 ipfw [ipfw] 'ipfw fwd' does not change outgoing interface n o kern/128260 ipfw [ipfw] [patch] ipfw_divert damages IPv6 packets o kern/127230 ipfw [ipfw] [patch] Feature request to add UID and/or GID l o kern/127209 ipfw [ipfw] IPFW table become corrupted after many changes o bin/125370 ipfw [ipfw] [patch] increase a line buffer limit o conf/123119 ipfw [patch] rc script for ipfw does not handle IPv6 o kern/122963 ipfw [ipfw] tcpdump does not show packets redirected by 'ip s kern/121807 ipfw [request] TCP and UDP port_table in ipfw o kern/121382 ipfw [dummynet]: 6.3-RELEASE-p1 page fault in dummynet (cor o kern/121122 ipfw [ipfw] [patch] add support to ToS IP PRECEDENCE fields o kern/118993 ipfw [ipfw] page fault - probably it's a locking problem o kern/117234 ipfw [ipfw] [patch] ipfw send_pkt() and ipfw_tick() don't s o kern/116009 ipfw [ipfw] [patch] Ignore errors when loading ruleset from p kern/115755 ipfw [ipfw] [patch] unify message and add a rule number whe o bin/115172 ipfw [patch] ipfw(8) list show some rules with a wrong form o docs/113803 ipfw [patch] ipfw(8) - don't get bitten by the fwd rule p kern/113388 ipfw [ipfw] [patch] Addition actions with rules within spec o kern/112708 ipfw [ipfw] ipfw is seems to be broken to limit number of c o kern/112561 ipfw [ipfw] ipfw fwd does not work with some TCP packets o kern/107305 ipfw [ipfw] ipfw fwd doesn't seem to work o kern/105330 ipfw [ipfw] [patch] ipfw (dummynet) does not allow to set q o bin/104921 ipfw [patch] ipfw(8) sometimes treats ipv6 input as ipv4 (a o kern/104682 ipfw [ipfw] [patch] Some minor language consistency fixes a o kern/103454 ipfw [ipfw] [patch] [request] add a facility to modify DF b o kern/103328 ipfw [ipfw] [request] sugestions about ipfw table o kern/102471 ipfw [ipfw] [patch] add tos and dscp support o kern/98831 ipfw [ipfw] ipfw has UDP hickups o kern/97951 ipfw [ipfw] [patch] ipfw does not tie interface details to o kern/97504 ipfw [ipfw] IPFW Rules bug o kern/95084 ipfw [ipfw] [regression] [patch] IPFW2 ignores "recv/xmit/v o kern/93300 ipfw [ipfw] ipfw pipe lost packets o kern/91847 ipfw [ipfw] ipfw with vlanX as the device o kern/88659 ipfw [modules] ipfw and ip6fw do not work properly as modul o kern/87032 ipfw [ipfw] [patch] ipfw ioctl interface implementation o kern/86957 ipfw [ipfw] [patch] ipfw mac logging o kern/82724 ipfw [ipfw] [patch] [request] Add setnexthop and defaultrou s kern/80642 ipfw [ipfw] [patch] ipfw small patch - new RULE OPTION o bin/78785 ipfw [patch] ipfw(8) verbosity locks machine if /etc/rc.fir o kern/74104 ipfw [ipfw] ipfw2/1 conflict not detected or reported, manp o kern/73910 ipfw [ipfw] serious bug on forwarding of packets after NAT o kern/72987 ipfw [ipfw] ipfw/dummynet pipe/queue 'queue [BYTES]KBytes ( o kern/71366 ipfw [ipfw] "ipfw fwd" sometimes rewrites destination mac a o kern/69963 ipfw [ipfw] install_state warning about already existing en o kern/60719 ipfw [ipfw] Headerless fragments generate cryptic error mes o kern/55984 ipfw [ipfw] [patch] time based firewalling support for ipfw o kern/51274 ipfw [ipfw] [patch] ipfw2 create dynamic rules with parent o kern/48172 ipfw [ipfw] [patch] ipfw does not log size and flags o kern/46159 ipfw [ipfw] [patch] [request] ipfw dynamic rules lifetime f a kern/26534 ipfw [ipfw] Add an option to ipfw to log gid/uid of who cau 56 problems total. From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 25 08:29:26 2009 Return-Path: Delivered-To: freebsd-ipfw@FreeBSD.ORG Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id DE082106564A for ; Wed, 25 Mar 2009 08:29:26 +0000 (UTC) (envelope-from oleg@lath.rinet.ru) Received: from lath.rinet.ru (lath.rinet.ru [195.54.192.90]) by mx1.freebsd.org (Postfix) with ESMTP id 9D0C18FC17 for ; Wed, 25 Mar 2009 08:29:26 +0000 (UTC) (envelope-from oleg@lath.rinet.ru) Received: by lath.rinet.ru (Postfix, from userid 222) id 626DC704B; Wed, 25 Mar 2009 11:29:25 +0300 (MSK) Date: Wed, 25 Mar 2009 11:29:25 +0300 From: Oleg Bulyzhin To: Eugene L Kovalenja Message-ID: <20090325082925.GA13280@lath.rinet.ru> References: <200903181022.n2IAMsWs038026@lurza.secnetix.de> <49C310A9.6020102@qwe.net.ua> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <49C310A9.6020102@qwe.net.ua> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: freebsd-ipfw@FreeBSD.ORG Subject: Re: FreeBSD 7.0: dummynet 99% cpu X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Mar 2009 08:29:27 -0000 On Fri, Mar 20, 2009 at 05:42:33AM +0200, Eugene L Kovalenja wrote: > Oliver Fromme ?????: > > Eugene L Kovalenja wrote: > > > FreeBSD *** 7.0-RELEASE FreeBSD 7.0-RELEASE #6: Sun Nov 23 14:32:31 EET > > > [...] > > > Time in three days traffic via ipfw doesn't go. In top: > > > 21 root 1 -44 - 0K 8K WAIT 7 2:15 99.02% dummynet > > > (this is example, not copy\paste) > > > > There are a few problems that have been fixed (or worked > > around) after the release of 7.0. For example, look at > > PR kern/113548 which has a work-around in 7.1. Your > > problem description sounds like it could be caused by > > the same problem. > > > > Therefore I recommend you update to 7.1 or 7-stable. > > > > Best regards > > Oliver > > > > > Hello. > > System updated to: > [root@taurus /usr/home/qwe]# uname -a > FreeBSD *** 7.1-RELEASE-p3 FreeBSD 7.1-RELEASE-p3 #0: Thu Mar 19 > 16:31:53 EET 2009 root@***:/usr/obj/usr/src/sys/QWEKRN70 i386 > > but once trouble has repeated (30 mins ago). > > > After that I change my sysctl variables: > net.inet.ip.dummynet.io_fast=1 > net.inet.ip.dummynet.debug=1 > net.inet.ip.dummynet.hash_size=16384 (from 512) > > What can I'll to do? > > Sorry for my bad English :( > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" Please do the following (when dummynet will hang next time): 1) Grab the output of follwing commands: sysctl net.inet.ip.dummynet ipfw pipe show 2) wait a bit (30 seconds should be enough) 3) do 1) once again. Examining counters may help in understanding problem. -- Oleg. ================================================================ === Oleg Bulyzhin -- OBUL-RIPN -- OBUL-RIPE -- oleg@rinet.ru === ================================================================ From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 25 11:12:30 2009 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9DC881065674 for ; Wed, 25 Mar 2009 11:12:30 +0000 (UTC) (envelope-from qwe@qwe.net.ua) Received: from mail.qwe.net.ua (qwe.net.ua [80.245.118.211]) by mx1.freebsd.org (Postfix) with ESMTP id 934738FC0C for ; Wed, 25 Mar 2009 11:12:29 +0000 (UTC) (envelope-from qwe@qwe.net.ua) Received: from localhost (localhost.qwe.net.ua [127.0.0.1]) by mail.qwe.net.ua (Postfix) with ESMTP id 15AEAC250 for ; Wed, 25 Mar 2009 13:12:27 +0200 (EET) Received: from mail.qwe.net.ua ([127.0.0.1]) by localhost (qwe.net.ua [127.0.0.1]) (amavisd-new, port 10024) with LMTP id rKgNyTnnUibF for ; Wed, 25 Mar 2009 13:12:23 +0200 (EET) Received: from [10.2.7.253] (unknown [10.2.7.253]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mail.qwe.net.ua (Postfix) with ESMTP id 45EA2B857 for ; Wed, 25 Mar 2009 13:12:23 +0200 (EET) Message-ID: <49CA119D.7090304@qwe.net.ua> Date: Wed, 25 Mar 2009 13:12:29 +0200 From: Eugene L Kovalenja User-Agent: Thunderbird 2.0.0.19 (Windows/20081209) MIME-Version: 1.0 To: freebsd-ipfw@freebsd.org References: <200903181022.n2IAMsWs038026@lurza.secnetix.de> <49C310A9.6020102@qwe.net.ua> <20090325082925.GA13280@lath.rinet.ru> In-Reply-To: <20090325082925.GA13280@lath.rinet.ru> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Subject: Re: FreeBSD 7.0: dummynet 99% cpu X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Mar 2009 11:12:30 -0000 Oleg Bulyzhin пишет: > On Fri, Mar 20, 2009 at 05:42:33AM +0200, Eugene L Kovalenja wrote: > >> Oliver Fromme ?????: >> >>> Eugene L Kovalenja wrote: >>> > FreeBSD *** 7.0-RELEASE FreeBSD 7.0-RELEASE #6: Sun Nov 23 14:32:31 EET >>> > [...] >>> > Time in three days traffic via ipfw doesn't go. In top: >>> > 21 root 1 -44 - 0K 8K WAIT 7 2:15 99.02% dummynet >>> > (this is example, not copy\paste) >>> >>> There are a few problems that have been fixed (or worked >>> around) after the release of 7.0. For example, look at >>> PR kern/113548 which has a work-around in 7.1. Your >>> problem description sounds like it could be caused by >>> the same problem. >>> >>> Therefore I recommend you update to 7.1 or 7-stable. >>> >>> Best regards >>> Oliver >>> >>> >>> >> Hello. >> >> System updated to: >> [root@taurus /usr/home/qwe]# uname -a >> FreeBSD *** 7.1-RELEASE-p3 FreeBSD 7.1-RELEASE-p3 #0: Thu Mar 19 >> 16:31:53 EET 2009 root@***:/usr/obj/usr/src/sys/QWEKRN70 i386 >> >> but once trouble has repeated (30 mins ago). >> >> >> After that I change my sysctl variables: >> net.inet.ip.dummynet.io_fast=1 >> net.inet.ip.dummynet.debug=1 >> net.inet.ip.dummynet.hash_size=16384 (from 512) >> >> What can I'll to do? >> >> Sorry for my bad English :( >> _______________________________________________ >> freebsd-ipfw@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw >> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" >> > > Please do the following (when dummynet will hang next time): > 1) Grab the output of follwing commands: > sysctl net.inet.ip.dummynet > ipfw pipe show > 2) wait a bit (30 seconds should be enough) > 3) do 1) once again. > > Examining counters may help in understanding problem. > > before: sysctl net.inet.ip.dummynet net.inet.ip.dummynet.debug: 0 net.inet.ip.dummynet.pipe_byte_limit: 1048576 net.inet.ip.dummynet.pipe_slot_limit: 100 net.inet.ip.dummynet.io_pkt_drop: 14138 net.inet.ip.dummynet.io_pkt_fast: 610276 net.inet.ip.dummynet.io_pkt: 1789875 net.inet.ip.dummynet.io_fast: 1 net.inet.ip.dummynet.tick_lost: 0 net.inet.ip.dummynet.tick_diff: -891 net.inet.ip.dummynet.tick_adjustment: 9797 net.inet.ip.dummynet.tick_delta_sum: 449 net.inet.ip.dummynet.tick_delta: 0 net.inet.ip.dummynet.red_max_pkt_size: 1500 net.inet.ip.dummynet.red_avg_pkt_size: 512 net.inet.ip.dummynet.red_lookup_depth: 256 net.inet.ip.dummynet.max_chain_len: 16 net.inet.ip.dummynet.expire: 1 net.inet.ip.dummynet.search_steps: 1798977 net.inet.ip.dummynet.searches: 1788798 net.inet.ip.dummynet.extract_heap: 0 net.inet.ip.dummynet.ready_heap: 48 net.inet.ip.dummynet.curr_time: 138355446 net.inet.ip.dummynet.hash_size: 512 ipfw pipe show | grep -v ip 01241: 2.048 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01122: 4.096 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 00801: 9.000 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01242: 2.048 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01212: 256.000 Kbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01121: 4.096 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01091: 512.000 Kbit/s 0 ms 50 sl. 46 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00802: 9.000 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01211: 256.000 Kbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01092: 512.000 Kbit/s 0 ms 50 sl. 45 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00701: 9.000 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 00821: 9.000 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00791: 9.000 Mbit/s 0 ms 50 sl. 5 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01111: 2.048 Mbit/s 0 ms 50 sl. 5 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00822: 9.000 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01231: 1.024 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01072: 1.024 Mbit/s 0 ms 50 sl. 3 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00702: 9.000 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01251: 1.024 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01232: 1.024 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01112: 2.048 Mbit/s 0 ms 50 sl. 5 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01071: 1.024 Mbit/s 0 ms 50 sl. 3 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00811: 9.000 Mbit/s 0 ms 50 sl. 2 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00792: 9.000 Mbit/s 0 ms 50 sl. 5 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01221: 512.000 Kbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01202: 128.000 Kbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01101: 1.024 Mbit/s 0 ms 50 sl. 18 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01082: 256.000 Kbit/s 0 ms 50 sl. 18 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00812: 9.000 Mbit/s 0 ms 50 sl. 2 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00722: 9.000 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01252: 1.024 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01222: 512.000 Kbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01201: 128.000 Kbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail 01102: 1.024 Mbit/s 0 ms 50 sl. 16 queues (512 buckets) droptail mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 01081: 256.000 Kbit/s 0 ms 50 sl. 19 queues (512 buckets) droptail mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes Pkt/Byte Drp 00721: 9.000 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail after: sysctl net.inet.ip.dummynet net.inet.ip.dummynet.debug: 0 net.inet.ip.dummynet.pipe_byte_limit: 1048576 net.inet.ip.dummynet.pipe_slot_limit: 100 net.inet.ip.dummynet.io_pkt_drop: 15177 net.inet.ip.dummynet.io_pkt_fast: 634143 net.inet.ip.dummynet.io_pkt: 1873018 net.inet.ip.dummynet.io_fast: 1 net.inet.ip.dummynet.tick_lost: 0 net.inet.ip.dummynet.tick_diff: -884 net.inet.ip.dummynet.tick_adjustment: 9803 net.inet.ip.dummynet.tick_delta_sum: 320 net.inet.ip.dummynet.tick_delta: -1 net.inet.ip.dummynet.red_max_pkt_size: 1500 net.inet.ip.dummynet.red_avg_pkt_size: 512 net.inet.ip.dummynet.red_lookup_depth: 256 net.inet.ip.dummynet.max_chain_len: 16 net.inet.ip.dummynet.expire: 1 net.inet.ip.dummynet.search_steps: 1882134 net.inet.ip.dummynet.searches: 1871939 net.inet.ip.dummynet.extract_heap: 0 net.inet.ip.dummynet.ready_heap: 48 net.inet.ip.dummynet.curr_time: 138373128 net.inet.ip.dummynet.hash_size: 512 dummynet cpu load now - 56% From owner-freebsd-ipfw@FreeBSD.ORG Wed Mar 25 17:19:11 2009 Return-Path: Delivered-To: freebsd-ipfw@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 644EE1065809; Wed, 25 Mar 2009 17:19:11 +0000 (UTC) (envelope-from brucec@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 38EE78FC20; Wed, 25 Mar 2009 17:19:11 +0000 (UTC) (envelope-from brucec@FreeBSD.org) Received: from freefall.freebsd.org (brucec@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n2PHJBgr004552; Wed, 25 Mar 2009 17:19:11 GMT (envelope-from brucec@freefall.freebsd.org) Received: (from brucec@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n2PHJBZe004547; Wed, 25 Mar 2009 17:19:11 GMT (envelope-from brucec) Date: Wed, 25 Mar 2009 17:19:11 GMT Message-Id: <200903251719.n2PHJBZe004547@freefall.freebsd.org> To: brucec@FreeBSD.org, freebsd-bugs@FreeBSD.org, freebsd-ipfw@FreeBSD.org From: brucec@FreeBSD.org Cc: Subject: Re: bin/117214: ipfw(8) fwd with IPv6 treats input as IPv4 X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Mar 2009 17:19:13 -0000 Synopsis: ipfw(8) fwd with IPv6 treats input as IPv4 Responsible-Changed-From-To: freebsd-bugs->freebsd-ipfw Responsible-Changed-By: brucec Responsible-Changed-When: Wed Mar 25 17:18:47 UTC 2009 Responsible-Changed-Why: Over to maintainer(s). http://www.freebsd.org/cgi/query-pr.cgi?pr=117214 From owner-freebsd-ipfw@FreeBSD.ORG Thu Mar 26 10:08:28 2009 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B3D951065670 for ; Thu, 26 Mar 2009 10:08:28 +0000 (UTC) (envelope-from oleg@lath.rinet.ru) Received: from lath.rinet.ru (lath.rinet.ru [195.54.192.90]) by mx1.freebsd.org (Postfix) with ESMTP id 1DE3E8FC14 for ; Thu, 26 Mar 2009 10:08:27 +0000 (UTC) (envelope-from oleg@lath.rinet.ru) Received: by lath.rinet.ru (Postfix, from userid 222) id 8C2D17049; Thu, 26 Mar 2009 13:08:26 +0300 (MSK) Date: Thu, 26 Mar 2009 13:08:26 +0300 From: Oleg Bulyzhin To: Eugene L Kovalenja Message-ID: <20090326100826.GA44053@lath.rinet.ru> References: <200903181022.n2IAMsWs038026@lurza.secnetix.de> <49C310A9.6020102@qwe.net.ua> <20090325082925.GA13280@lath.rinet.ru> <49CA119D.7090304@qwe.net.ua> MIME-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <49CA119D.7090304@qwe.net.ua> User-Agent: Mutt/1.5.18 (2008-05-17) Cc: freebsd-ipfw@freebsd.org Subject: Re: FreeBSD 7.0: dummynet 99% cpu X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 26 Mar 2009 10:08:29 -0000 On Wed, Mar 25, 2009 at 01:12:29PM +0200, Eugene L Kovalenja wrote: > Oleg Bulyzhin ÐÉÛÅÔ: > > On Fri, Mar 20, 2009 at 05:42:33AM +0200, Eugene L Kovalenja wrote: > > > >> Oliver Fromme ?????: > >> > >>> Eugene L Kovalenja wrote: > >>> > FreeBSD *** 7.0-RELEASE FreeBSD 7.0-RELEASE #6: Sun Nov 23 14:32:31 EET > >>> > [...] > >>> > Time in three days traffic via ipfw doesn't go. In top: > >>> > 21 root 1 -44 - 0K 8K WAIT 7 2:15 99.02% dummynet > >>> > (this is example, not copy\paste) > >>> > >>> There are a few problems that have been fixed (or worked > >>> around) after the release of 7.0. For example, look at > >>> PR kern/113548 which has a work-around in 7.1. Your > >>> problem description sounds like it could be caused by > >>> the same problem. > >>> > >>> Therefore I recommend you update to 7.1 or 7-stable. > >>> > >>> Best regards > >>> Oliver > >>> > >>> > >>> > >> Hello. > >> > >> System updated to: > >> [root@taurus /usr/home/qwe]# uname -a > >> FreeBSD *** 7.1-RELEASE-p3 FreeBSD 7.1-RELEASE-p3 #0: Thu Mar 19 > >> 16:31:53 EET 2009 root@***:/usr/obj/usr/src/sys/QWEKRN70 i386 > >> > >> but once trouble has repeated (30 mins ago). > >> > >> > >> After that I change my sysctl variables: > >> net.inet.ip.dummynet.io_fast=1 > >> net.inet.ip.dummynet.debug=1 > >> net.inet.ip.dummynet.hash_size=16384 (from 512) > >> > >> What can I'll to do? > >> > >> Sorry for my bad English :( > >> _______________________________________________ > >> freebsd-ipfw@freebsd.org mailing list > >> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > >> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" > >> > > > > Please do the following (when dummynet will hang next time): > > 1) Grab the output of follwing commands: > > sysctl net.inet.ip.dummynet > > ipfw pipe show > > 2) wait a bit (30 seconds should be enough) > > 3) do 1) once again. > > > > Examining counters may help in understanding problem. > > > > > before: > > sysctl net.inet.ip.dummynet > net.inet.ip.dummynet.debug: 0 > net.inet.ip.dummynet.pipe_byte_limit: 1048576 > net.inet.ip.dummynet.pipe_slot_limit: 100 > net.inet.ip.dummynet.io_pkt_drop: 14138 > net.inet.ip.dummynet.io_pkt_fast: 610276 > net.inet.ip.dummynet.io_pkt: 1789875 > net.inet.ip.dummynet.io_fast: 1 > net.inet.ip.dummynet.tick_lost: 0 > net.inet.ip.dummynet.tick_diff: -891 > net.inet.ip.dummynet.tick_adjustment: 9797 > net.inet.ip.dummynet.tick_delta_sum: 449 > net.inet.ip.dummynet.tick_delta: 0 > net.inet.ip.dummynet.red_max_pkt_size: 1500 > net.inet.ip.dummynet.red_avg_pkt_size: 512 > net.inet.ip.dummynet.red_lookup_depth: 256 > net.inet.ip.dummynet.max_chain_len: 16 > net.inet.ip.dummynet.expire: 1 > net.inet.ip.dummynet.search_steps: 1798977 > net.inet.ip.dummynet.searches: 1788798 > net.inet.ip.dummynet.extract_heap: 0 > net.inet.ip.dummynet.ready_heap: 48 > net.inet.ip.dummynet.curr_time: 138355446 > net.inet.ip.dummynet.hash_size: 512 > > ipfw pipe show | grep -v ip > > 01241: 2.048 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01122: 4.096 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 00801: 9.000 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01242: 2.048 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01212: 256.000 Kbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01121: 4.096 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01091: 512.000 Kbit/s 0 ms 50 sl. 46 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00802: 9.000 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01211: 256.000 Kbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01092: 512.000 Kbit/s 0 ms 50 sl. 45 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00701: 9.000 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 00821: 9.000 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00791: 9.000 Mbit/s 0 ms 50 sl. 5 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01111: 2.048 Mbit/s 0 ms 50 sl. 5 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00822: 9.000 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01231: 1.024 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01072: 1.024 Mbit/s 0 ms 50 sl. 3 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00702: 9.000 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01251: 1.024 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01232: 1.024 Mbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01112: 2.048 Mbit/s 0 ms 50 sl. 5 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01071: 1.024 Mbit/s 0 ms 50 sl. 3 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00811: 9.000 Mbit/s 0 ms 50 sl. 2 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00792: 9.000 Mbit/s 0 ms 50 sl. 5 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01221: 512.000 Kbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01202: 128.000 Kbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01101: 1.024 Mbit/s 0 ms 50 sl. 18 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01082: 256.000 Kbit/s 0 ms 50 sl. 18 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00812: 9.000 Mbit/s 0 ms 50 sl. 2 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00722: 9.000 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01252: 1.024 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01222: 512.000 Kbit/s 0 ms 50 sl. 1 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01201: 128.000 Kbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > 01102: 1.024 Mbit/s 0 ms 50 sl. 16 queues (512 buckets) droptail > mask: 0x00 0x00000000/0x0000 -> 0xffffffff/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 01081: 256.000 Kbit/s 0 ms 50 sl. 19 queues (512 buckets) droptail > mask: 0x00 0xffffffff/0x0000 -> 0x00000000/0x0000 > BKT Prot ___Source IP/port____ ____Dest. IP/port____ Tot_pkt/bytes > Pkt/Byte Drp > 00721: 9.000 Mbit/s 0 ms 50 sl. 0 queues (512 buckets) droptail > > after: > sysctl net.inet.ip.dummynet > net.inet.ip.dummynet.debug: 0 > net.inet.ip.dummynet.pipe_byte_limit: 1048576 > net.inet.ip.dummynet.pipe_slot_limit: 100 > net.inet.ip.dummynet.io_pkt_drop: 15177 > net.inet.ip.dummynet.io_pkt_fast: 634143 > net.inet.ip.dummynet.io_pkt: 1873018 > net.inet.ip.dummynet.io_fast: 1 > net.inet.ip.dummynet.tick_lost: 0 > net.inet.ip.dummynet.tick_diff: -884 > net.inet.ip.dummynet.tick_adjustment: 9803 > net.inet.ip.dummynet.tick_delta_sum: 320 > net.inet.ip.dummynet.tick_delta: -1 > net.inet.ip.dummynet.red_max_pkt_size: 1500 > net.inet.ip.dummynet.red_avg_pkt_size: 512 > net.inet.ip.dummynet.red_lookup_depth: 256 > net.inet.ip.dummynet.max_chain_len: 16 > net.inet.ip.dummynet.expire: 1 > net.inet.ip.dummynet.search_steps: 1882134 > net.inet.ip.dummynet.searches: 1871939 > net.inet.ip.dummynet.extract_heap: 0 > net.inet.ip.dummynet.ready_heap: 48 > net.inet.ip.dummynet.curr_time: 138373128 > net.inet.ip.dummynet.hash_size: 512 > > dummynet cpu load now - 56% As i can see things looks normal except high cpu usage. Though i think it's not dummynet's problem - i guess most cpu cycles wasted outside dummynet's code. Could you do some hwpmc profiling? (short how-to: http://freebsd.rambler.ru/bsdmail/freebsd-current_2006/msg01582.html) -- Oleg. ================================================================ === Oleg Bulyzhin -- OBUL-RIPN -- OBUL-RIPE -- oleg@rinet.ru === ================================================================