From nobody Tue Aug 27 21:44:22 2024 X-Original-To: stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Wtgzy40cSz5MSDq for ; Tue, 27 Aug 2024 21:44:30 +0000 (UTC) (envelope-from mirror176@hotmail.com) Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12olkn2069.outbound.protection.outlook.com [40.92.21.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Wtgzx2NvKz51KL for ; Tue, 27 Aug 2024 21:44:29 +0000 (UTC) (envelope-from mirror176@hotmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=hotmail.com header.s=selector1 header.b=YPLP0bCJ; dmarc=pass (policy=none) header.from=hotmail.com; spf=pass (mx1.freebsd.org: domain of mirror176@hotmail.com designates 40.92.21.69 as permitted sender) smtp.mailfrom=mirror176@hotmail.com; arc=pass ("microsoft.com:s=arcselector10001:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=U0MUG61JPCt92YpodPLmXxskv0fGiEovPxKCZ4ySXeLEeD36APjFdar6J2c7iMLYafGEGUOqsNQa37Gfdsad6oqhjcTy5stFmkftwgECKtKUvR9EOiRazfxQx2lxgtDXkTvV7G0zbrgJNP9DmoAWr1oDFsS81pnutF71WehGyCH8dROzJKhS1YV/GgMJ6hhu89ob2mJhYfb/zEM6PfIfAG6/aZv3ZDhcNKSItd9if9JiqdRbcDSBanJfcRtimkIyOF2ZZX+ERs/SukqdihK5aIyPWPzOqM+qPJVJr9bgzAB25+9X3PkMQPSiI6OZt1ftqs9VzVLRAPXdjxMNETmGAw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=7jdxm4sFYpRQLi3eiea6li5eNfi5pT2G/0d1PYtzwGg=; b=yfw092qmltN+CFULqjFeA8zd7oX65NdTVroEb56stjk6wM+q0o16giArT9lHGWE7t0SzAn2paHlFHzLt6Exn1KuCSy2S8o1TlgXRXlPwSulEYLTjhK7Sk0glhPCfHpsiuy85kqUwhdZacZ82uTOBldvg8/+jN4GHQ5LX4FEBIHmiqBWpirD1poEeKPzMu+cXRf5WeZHYOpsQ66shfUVyOzF8+KZx7be3v0waAEWK9RF4U4XIxS0i/MFD0j/mGCeH6RjCf3JisP4ni/cPbmwXpDERsp/GCm1u0F+wqAJ0BwzaAGZIw8YpSiQQ7srF+gDy+1DBsxxgQ/Lalwf3AEIShA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none; dkim=none; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7jdxm4sFYpRQLi3eiea6li5eNfi5pT2G/0d1PYtzwGg=; b=YPLP0bCJONctDmUFBkW/6nC2Yn6JqWOSQBTCjsUwpfRFoqaandHJC4rp3V9GRy60HcJh1OSHA2zRGHb25c0NJOC9hzxbE88piDRdYn3vPwjJ9ZW/pY7ZzDfgRc2pPnnxHxIswvS9maXdIW8kOLo8SYkATSzvoA46TKG+ZxpNyfmfvubmDcct87nLERfD7xhU//r4Wy160AzQuLPyNHPNSYDAL4qVGbbO+umCTOgF209ZPWYaaR5zlpPFKX+BCn5slpsc8c+Z5/DRmgQtt+uj8mEcmzLJPgQZC6f7lG3jKCcSa0d12RNLaigXZwHyCTdRZee7CZG1h05Q3g3f2kB43w== Received: from CO1PR11MB4770.namprd11.prod.outlook.com (2603:10b6:303:94::19) by DM4PR11MB7400.namprd11.prod.outlook.com (2603:10b6:8:100::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7897.25; Tue, 27 Aug 2024 21:44:26 +0000 Received: from CO1PR11MB4770.namprd11.prod.outlook.com ([fe80::bffd:9e35:4afa:a747]) by CO1PR11MB4770.namprd11.prod.outlook.com ([fe80::bffd:9e35:4afa:a747%6]) with mapi id 15.20.7897.021; Tue, 27 Aug 2024 21:44:26 +0000 Message-ID: Date: Tue, 27 Aug 2024 14:44:22 -0700 User-Agent: Mozilla Thunderbird Subject: Re: delete zfs and snapshots from upgrade process? To: stable@freebsd.org References: Content-Language: en-US From: "Edward Sanford Sutton, III" In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-TMN: [B0DkzuYHlHaGzbk/HfHiEkuAaorzLG3n] X-ClientProxiedBy: BL0PR0102CA0063.prod.exchangelabs.com (2603:10b6:208:25::40) To CO1PR11MB4770.namprd11.prod.outlook.com (2603:10b6:303:94::19) X-Microsoft-Original-Message-ID: <8a384b9d-af50-4d75-a8ea-fd85c70deeef@hotmail.com> List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: CO1PR11MB4770:EE_|DM4PR11MB7400:EE_ X-MS-Office365-Filtering-Correlation-Id: d879aeb2-5fa5-4988-02fa-08dcc6e16ba9 X-Microsoft-Antispam: BCL:0;ARA:14566002|6090799003|19110799003|5072599009|461199028|15080799006|8060799006|440099028|3412199025; X-Microsoft-Antispam-Message-Info: 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 X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?RStBTW9pSS9PRWVxU01pK0ptc0NYcUx3ZFlueTFSb3lqMmd4QlQwaFBrdkJ2?= =?utf-8?B?Z1NndDRzMStJSTZhR3NKZ2RLYWhsUjVBd1g0MytMSU9ZOEExL2FnNm55TDJF?= =?utf-8?B?OU1kam5lYksxY1lHYzRCcjBZMGJOSXVhYnU5WFE1KzRmSE5KZ0dEY3dOc3Np?= =?utf-8?B?dUpRMS9oZEFNUTlMSjZLRU9uNmQwUWlRWEc0Mjg4OUNnVHMyVll4OS9TQ1VU?= =?utf-8?B?eVAzOVFPbnZqbU5lSWRwVWdVbndhc2NsWTJLTlFwYkxyK2dVR29mWGwreVNX?= =?utf-8?B?aGxtdVVOb002aXp5SXhTekcvQUJJWitiMm8wTUJFVklucDZaQWx5Q3VHcmlG?= =?utf-8?B?VGdaR2hlcGR2byszUXZDL05XWisra3VDV0p3b2NTRlBsUmRWaTdIVElGaG81?= =?utf-8?B?UkxwWE90T1VOU1JEMVE4NE02ZXZFNGpLL0l2eHNVK3NiMHhHSDBBQ1VyUC9M?= =?utf-8?B?bDNvNFMvbEVTZUMwRjQ5b1JYYU84alNKTDlUcUhHUkpGS2tNTHQwdW4wenpT?= =?utf-8?B?OTF3VWtWUDVGWUJLR3gvV2dPaGJKSXMra0hrbHFERVRqTURoSnIrV3RRVHNW?= =?utf-8?B?eUdwTHpOZGhiWUgyVmJqczYvOU5oeE1YMkpFeUtHeUtmU0RqdlRpTmVyRXNM?= =?utf-8?B?TmUrQWlDZ3I4NlFzUlFPS0h2NWRSSUc0RnFTaWhaWDYwL3EwL05JMFJEcG5J?= =?utf-8?B?cUFyeC9DeW45by9zYXNKbjVjOEVtelF0SDBhSElPUjVqem1hUHB0a2VLTXdn?= =?utf-8?B?eVZ6elBzd3U2dys2bHZYOXVmcVp1dS9tK050TURYSlpzUk1FeVVoQzJubk5q?= =?utf-8?B?WVdweCttU293Ym1Gc3R2RmNkbjNSdGJUdUtqZU1meURsZU03RDBpRzdMY2Z1?= =?utf-8?B?UURZdGRUL1YySWZRWE9kOGlZNnNoajl4S0I1NXErOXVVSGlvbmRIUGhZMmFV?= =?utf-8?B?UzN5TFVGL3lTcWdnb0hqbmdZcDBabjVEcm9WWGpLcGYvdldGeEdGNnhYdGNx?= =?utf-8?B?MzBCcW5qaytLS011NDI3R3AxRkVIWEg5UDIwUU9qeGJ3cDE3eUphMjdyK1J6?= =?utf-8?B?OHIrUW0rMTdxUFd4KzloQ0l1a0Q2d3FoSkp0ZTNXdVoyMkZGYzY0WU4zcXF0?= =?utf-8?B?c0ttMlVXeWttbmdRdTJvV1JHdjZaMkx5RXVUZi80bHlRV1VyNW5xU0FYNU4x?= =?utf-8?B?Z0VnVnozeEdlMEI4cldjWXFxUGNRV3FpWnJFb0l0N1hSaDhyems3SXMrRXZy?= =?utf-8?B?TFNLcnNZMEhmNUZ2cXpOWlRhekluRmZOT1cwamF2KzNjR1FMNlU1UlZWUDM4?= =?utf-8?B?V3dhY202N3E2eDlNMWJ2OTMrcDFHVjlTdzRPZkpodnhqeVJJVG1UVEpkaEZn?= =?utf-8?B?Q0VacjlaRDVtZ2ZoRGZsL3NFMTZIdG82dVhkS1BPb0dqK3k3OGZWdkNrRDNE?= =?utf-8?B?NWVXbFRmMlRpeWE2T3haTmdZbXFBZXZmNHZHbzJ5SUROdmZ6d2Exb2t5ZmFy?= =?utf-8?B?TGIwT1RMcHN2d3ZVNUFSUTg1Q2RDZjY0WXJvWDl1MGNOVCtGSHVQb2hKVDJM?= =?utf-8?B?V2VVQ1RUTDdJOXJlTzVSMG9hNHFIT2k1NWdlRzQ5anJ4N0N5alBYR3J1aTkr?= =?utf-8?Q?/niokq7I6m9MBIKFOFHVkE/jk9eaXIdasZTmP+v7A/LI=3D?= X-OriginatorOrg: sct-15-20-7719-20-msonline-outlook-d1079.templateTenant X-MS-Exchange-CrossTenant-Network-Message-Id: d879aeb2-5fa5-4988-02fa-08dcc6e16ba9 X-MS-Exchange-CrossTenant-AuthSource: CO1PR11MB4770.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 27 Aug 2024 21:44:25.9221 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM4PR11MB7400 X-Spamd-Bar: - X-Spamd-Result: default: False [-1.37 / 15.00]; FORGED_MUA_THUNDERBIRD_MSGID_UNKNOWN(2.50)[]; SUBJECT_ENDS_QUESTION(1.00)[]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector10001:i=1]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.88)[-0.880]; DMARC_POLICY_ALLOW(-0.50)[hotmail.com,none]; R_SPF_ALLOW(-0.20)[+ip4:40.92.0.0/16]; R_DKIM_ALLOW(-0.20)[hotmail.com:s=selector1]; MIME_GOOD(-0.10)[text/plain]; XM_UA_NO_VERSION(0.01)[]; RCVD_TLS_LAST(0.00)[]; DWL_DNSWL_NONE(0.00)[hotmail.com:dkim]; FREEMAIL_FROM(0.00)[hotmail.com]; RCPT_COUNT_ONE(0.00)[1]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_TRACE(0.00)[0:+]; FROM_HAS_DN(0.00)[]; FREEMAIL_ENVFROM(0.00)[hotmail.com]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[hotmail.com:+]; TO_DN_NONE(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[40.92.21.69:from]; MLMMJ_DEST(0.00)[stable@freebsd.org]; ASN(0.00)[asn:8075, ipnet:40.80.0.0/12, country:US]; RCVD_IN_DNSWL_NONE(0.00)[40.92.21.69:from] X-Rspamd-Queue-Id: 4Wtgzx2NvKz51KL On 8/25/24 02:05, ft wrote: > Hello, > > I have make an upgrade from 13.1 to 14.1. > uname -a > FreeBSD ftc 14.1-RELEASE-p3 FreeBSD 14.1-RELEASE-p3 GENERIC amd64 > > Everything works fine. > > My question: > There are some zfs and some snapshots. Can I destroy them or are they > required? If the data is important, make sure your backups are in order. If worried about making undoable changes, create a pool checkpoint; `man zpoolconcepts` for details about checkpoints. If you are using ZFS boot environments (it looks like you are), those switchable states are created by snapshotting the relevant datasets and then turning the snapshot into a clone. Which ones are safe to remove should be determined by paying attention to the 'Active' field when listing them (bectl or sysutils/beadm). Your boot environment manager has commands to destroy boot environments; read its manpage to see if you also need to tell it to clean up a corresponding snapshot. Otherwise, snapshots are not needed as long as they do not have your only copy of data you need (accidental overwrite, delete, etc). If you perform a `zpool upgrade` then newer pool features may also break the ability to boot older setups; sometimes you can install sysutils/openzfs to bring a newer version than was included with base to further improve the compatibility range; easiest done before the pool upgrade. Removing snapshots removes the ability to use it as a reference point for an incremental replication (zfs send+recv). FreeBSD does not depend on those snapshots for its current operation. > Here is the list: > zfs: > zroot/ROOT/13.1-RELEASE-p9_2023-08-27_201128 > zroot/ROOT/13.1-RELEASE_2023-08-27_195317 > zroot/ROOT/13.2-RELEASE-p12_2024-08-24_192252 > zroot/ROOT/13.2-RELEASE-p2_2023-08-27_223329 > zroot/ROOT/13.2-RELEASE-p2_2024-08-24_185205 > zroot/ROOT/14.1-RELEASE-p3_2024-08-24_192543 > snapshots: > zroot/ROOT/default@2023-08-27-19:53:17-0 > zroot/ROOT/default@2023-08-27-20:11:28-0 > zroot/ROOT/default@2023-08-27-22:33:29-0 > zroot/ROOT/default@2024-08-24-18:52:05-0 > zroot/ROOT/default@2024-08-24-19:22:52-0 > zroot/ROOT/default@2024-08-24-19:25:43-0 > > Franz > > From nobody Sat Aug 31 14:32:08 2024 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WwyCS1pTnz5MSKN for ; Sat, 31 Aug 2024 14:32:20 +0000 (UTC) (envelope-from pete@twisted.org.uk) Received: from toybox.twisted.org.uk (toybox.twisted.org.uk [178.250.76.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4WwyCQ3jMpz47d6 for ; Sat, 31 Aug 2024 14:32:18 +0000 (UTC) (envelope-from pete@twisted.org.uk) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=twisted.org.uk header.s=tbx-short header.b=w+o3ucOJ; dmarc=pass (policy=none) header.from=twisted.org.uk; spf=pass (mx1.freebsd.org: domain of pete@twisted.org.uk designates 178.250.76.50 as permitted sender) smtp.mailfrom=pete@twisted.org.uk DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=twisted.org.uk; s=tbx-short; h=Content-Transfer-Encoding:Content-Type: Subject:From:To:MIME-Version:Date:Message-ID:Sender:Reply-To:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=jI2+vvToUhPdHLgV9ziokFAJhmpjlkr0mv9jTJfpUNw=; t=1725114738; x=1725978738; b=w+o3ucOJwplqG7Bs9/yQZPVYZA1YPEu9it/BSSwjsvk1NQ8RzbbsGncQuKqbMYvH5IpNvn8/Qnl shGXccxJtaIYZ5/vBa7QmcUGPpwafvoFMZ+U8IVsi4ExcEbiqdU5DWd8F7DslgbaHaGyZDkECym8d ACcE8jI0UoFM+F5vgdE=; Received: from mailnull by toybox.twisted.org.uk with spamc-scanned (Exim 4.96.2 (FreeBSD)) (envelope-from ) id 1skP96-00091T-2F for freebsd-stable@freebsd.org; Sat, 31 Aug 2024 14:32:09 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on toybox.twisted.org.uk X-Spam-Level: X-Spam-Status: No, score=-0.9 required=5.0 tests=ALL_TRUSTED,TW_PM, T_SCC_BODY_TEXT_LINE autolearn=unavailable autolearn_force=no version=4.0.0 X-Spam-Score: -0.9 () Received: from balta.twisted.org.uk ([2001:470:6cc4:1::57]) by toybox.twisted.org.uk with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.96.2 (FreeBSD)) (envelope-from ) id 1skP96-00091P-21 for freebsd-stable@freebsd.org; Sat, 31 Aug 2024 14:32:08 +0000 Message-ID: <27a993d5-c456-4add-8893-3e86af747ab1@twisted.org.uk> Date: Sat, 31 Aug 2024 15:32:08 +0100 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Beta Content-Language: en-GB To: FreeBSD Stable Mailing List From: Pete French Subject: How to diagnose "Limiting closed port RST response from 213 to 205 packets/sec" ? Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-spamc-toybox: true X-transport-toybox: lookuphost X-Spamd-Bar: -- X-Spamd-Result: default: False [-2.99 / 15.00]; SUBJECT_ENDS_QUESTION(1.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[twisted.org.uk,none]; R_DKIM_ALLOW(-0.20)[twisted.org.uk:s=tbx-short]; R_SPF_ALLOW(-0.20)[+ip4:178.250.76.50/32]; MIME_GOOD(-0.10)[text/plain]; XM_UA_NO_VERSION(0.01)[]; RCVD_VIA_SMTP_AUTH(0.00)[]; ASN(0.00)[asn:12290, ipnet:178.250.72.0/21, country:GB]; RCPT_COUNT_ONE(0.00)[1]; MIME_TRACE(0.00)[0:+]; MID_RHS_MATCH_FROM(0.00)[]; MLMMJ_DEST(0.00)[freebsd-stable@freebsd.org]; ARC_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_TLS_LAST(0.00)[]; RCVD_COUNT_TWO(0.00)[2]; TO_DN_ALL(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; DKIM_TRACE(0.00)[twisted.org.uk:+] X-Rspamd-Queue-Id: 4WwyCQ3jMpz47d6 So I am running some servers with 14.1-STABLE, pretty standard - Apache + mysql setup, and I am seeing a lot of the above messages. I have always seen these form time to time, but recently I have had compmnaits from a customer about the webservers being unavailable, and the times they give correspond to bursts of these errors. I dont see any other errors, and am wondering how to get more info about this message. Knowing if its IPv4 or IPv6 would be nice. Knowing the port that is closed would be ideal. I have a feeling that the closed port is the one which Apaxche is suppsoed to be listenin gon (I cant think of nay other ports which would get hammered), but that should never be closed. Any advice ? -pete. From nobody Sat Aug 31 19:02:11 2024 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Wx4CC1qrJz5MshM for ; Sat, 31 Aug 2024 19:02:31 +0000 (UTC) (envelope-from kob6558@gmail.com) Received: from mail-ot1-x333.google.com (mail-ot1-x333.google.com [IPv6:2607:f8b0:4864:20::333]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Wx4CB75Xdz4b8s for ; Sat, 31 Aug 2024 19:02:30 +0000 (UTC) (envelope-from kob6558@gmail.com) Authentication-Results: mx1.freebsd.org; none Received: by mail-ot1-x333.google.com with SMTP id 46e09a7af769-70f6cb5518aso973955a34.1 for ; Sat, 31 Aug 2024 12:02:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1725130948; x=1725735748; darn=freebsd.org; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=6o/7yNdm7jTJ3y/SR/QHnx2AdX93/494AAqT7lluRa8=; b=Sq4DVBMyrO2yw6PNKOXg3aGM5l4QiTYjbHKdfW3vxIcLT0/GwYQX+f39maFbhMmF9X rHbCUNZL8RKewXl5SGHR/0C6jb9rip3kGkxuDQqahBo5RiDJ07beGEuErkNFtwdk2gtG eC17YuMimM31Ye9k9ULulq+8GHcrbfsQuQlv/RVf2XGDspSRIHAoiECYkq9NQ+LqExz6 DxGboEP1U4FuhxYKVWzpw1lfTMhmfpoue6co70+rW0stjBLP18+7Moh3Cq/Ta54fenag NeUb5N1gInt46cSOYQvGe+sm7Y7s13p0BQQ/NtgNuLgqWRK38A4JvZ2uHFgGC0tmwKsw +tXQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1725130948; x=1725735748; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=6o/7yNdm7jTJ3y/SR/QHnx2AdX93/494AAqT7lluRa8=; b=rilhmReTDpKSEh4oSvIviO/5wTXOd+8b22luzjYGVcpL+8cwg9jgLmsQg/NAhtSB0J OaHvULcr3jzacsuWF6e26+gN8R5lM2BnHH57LFpMKzWH7aUbpc5TeUVl44XKy9pKdoAo XBi+gbbTCyXFrr6RaJWCQf8XhdfK4Pv9jX6VHNiGevj4Z8wskGCfOJsqSpuusrM1Z3kA /HPNtMKR8sA97KA83g0SgQ/ILKNfTt38oMRLFlLzW4NlRytWtFa9bx/Pevg2l3zsbelp OnIq+/j6YNaQQKr+c2Conb1htIaf3XbW4Fg3iHEg+ujKT6ttStlvvMZ2iQ8acGkK79LE cTZw== X-Gm-Message-State: AOJu0Yw9qGZmvdw33tk2HLU5hwto4o06Kg7r1HCD6VOp5ctYZ9AM3/H2 LHN4Vmc/oR0JxVngdHHRWJaEn9s7EF1qOPf8hplEnWI3HSk+NchBFq2AiekEwjCuLoXCXTFZcJ4 DhiYdS1hGSFrTndZdveGojNSpFok= X-Google-Smtp-Source: AGHT+IFIIeEWHP/oHSnuvqfqtkP9rMqKA4HUK6zh34LuOqXJIHdZfy1XzU9PSBTIWzWeySFmLlWmEnYJ0WZBME86tfE= X-Received: by 2002:a05:6830:3908:b0:704:45b5:6464 with SMTP id 46e09a7af769-70f71fc8134mr3279849a34.29.1725130947687; Sat, 31 Aug 2024 12:02:27 -0700 (PDT) List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org MIME-Version: 1.0 References: <27a993d5-c456-4add-8893-3e86af747ab1@twisted.org.uk> In-Reply-To: <27a993d5-c456-4add-8893-3e86af747ab1@twisted.org.uk> From: Kevin Oberman Date: Sat, 31 Aug 2024 12:02:11 -0700 Message-ID: Subject: Re: How to diagnose "Limiting closed port RST response from 213 to 205 packets/sec" ? To: Pete French Cc: FreeBSD Stable Mailing List Content-Type: multipart/alternative; boundary="00000000000053fd050620ff595a" X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:15169, ipnet:2607:f8b0::/32, country:US] X-Rspamd-Queue-Id: 4Wx4CB75Xdz4b8s --00000000000053fd050620ff595a Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, Aug 31, 2024 at 7:32=E2=80=AFAM Pete French w= rote: > So I am running some servers with 14.1-STABLE, pretty standard - Apache > + mysql setup, and I am seeing a lot of the above messages. I have > always seen these form time to time, but recently I have had compmnaits > from a customer about the webservers being unavailable, and the times > they give correspond to bursts of these errors. > > I dont see any other errors, and am wondering how to get more info about > this message. Knowing if its IPv4 or IPv6 would be nice. Knowing the > port that is closed would be ideal. I have a feeling that the closed > port is the one which Apaxche is suppsoed to be listenin gon (I cant > think of nay other ports which would get hammered), but that should > never be closed. > > Any advice ? > > -pete. > These are not errors. It is telling you that someone is likely doing something wrong, probably by error but possibly rudely. I believe that it means that a closed port is receiving a lot of SYNs. See the discussion on BSD forums . --=20 Kevin Oberman, Part time kid herder and retired Network Engineer E-mail: rkoberman@gmail.com PGP Fingerprint: D03FB98AFA78E3B78C1694B318AB39EF1B055683 --00000000000053fd050620ff595a Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
On Sat, Aug 31, 2024 at 7:32=E2= =80=AFAM Pete French <pete@twiste= d.org.uk> wrote:
So I am running some servers with 14.1= -STABLE, pretty standard - Apache
+ mysql setup, and I am seeing a lot of the above messages. I have
always seen these form time to time, but recently I have had compmnaits from a customer about the webservers being unavailable, and the times
they give correspond to bursts of these errors.

I dont see any other errors, and am wondering how to get more info about this message. Knowing if its IPv4 or IPv6 would be nice. Knowing the
port that is closed would be ideal. I have a feeling that the closed
port is the one which Apaxche is suppsoed to be listenin gon (I cant
think of nay other ports which would get hammered), but that should
never be closed.

Any advice ?

-pete.

These are not errors. It is= telling you that someone is likely doing something wrong, probably by erro= r but possibly rudely.

I believe that it= means that a closed port is receiving a lot of SYNs. See the discussion on= BSD forums.


--
<= div>
Kevin Oberman, Part time kid herder and retired Networ= k Engineer
E-mail: rkoberman@gmail.com
PGP Fingerprint: D03FB98AFA78E3B7= 8C1694B318AB39EF1B055683
--00000000000053fd050620ff595a-- From nobody Sat Aug 31 22:21:02 2024 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Wx8cG33Cpz5TN19; Sat, 31 Aug 2024 22:21:02 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2610:1c1:1:6074::16:84]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "freefall.freebsd.org", Issuer "R11" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Wx8cG2rB6z4tLq; Sat, 31 Aug 2024 22:21:02 +0000 (UTC) (envelope-from cperciva@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1725142862; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc; bh=Dw2tqk/3cwNwHrFwMId5iHUOhSF84SgTnZ9i7wOyzus=; b=SFDw0tGkK5yNYsEbc2XD01zyuductVoMmhHWoWpxdGw4Ef+wL/D4JQKwGl6CfBpHkZj7Zb W1WdGzx4hNdxQ6gQxA8IrBT3Ganfz5NCPfIIkaPGIfYFizvyXCmJTxl2rAP+D+EEq2WZSC 4LlO7cJdlXSB2Ix1WJbFW2jrs931mlvDiTk4tngwZFp44QbXQ0nVkPY3TKj9cSuc/vSBS0 LGgP3lN7lkAg/gPV7xej1kAI+HSh0l4V5hLLwQslpaG2XhdWw0syNU2srTtD8G6u2UwqSH vVrUcKlqrUCTr06bd8W9P57MDoJ5u9EI1uia4bkhANrLUN5UzwEfIrOxtBftew== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1725142862; a=rsa-sha256; cv=none; b=GMmg2/nehVH8/jBWE2nPCd+QRMDbbjf9MDJodehATkMB7DLc9ErFpAzbMcoLo3kOjztfkW pWY4dy/+Epn9yE3y18I6gvgYJ4wcsgOCh4zrRXX7xVyTLn3Kr5XTlzdraxtwq+aXeJ9UCd hhMuQVu6wQER1zInNJcZgTRnPjsTKniSl4IGMZK7HJfUUfErsnNNJqCYAMFtTQDg18fcLD gEpmlLORBmfQu0fFDWzas1H1SEMCFknS+zTy+yB1fV7c0Ee2xhN6y0mwrmbEhABJeS3Fw8 ZMER2ImpNMfDgMvlm1zmU6Ow5o84bIX0gqal9vNFgdabVY7lFUMmsRYh2mnzaQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1725142862; h=from:from:reply-to:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc; bh=Dw2tqk/3cwNwHrFwMId5iHUOhSF84SgTnZ9i7wOyzus=; b=jYzvrLaLXzk0ED6l/nEadiev8WmMVkuTh9LM/kG4IEvVyNp/ovLAyT7qCb4XEwnI6cEOBb tNuGG3GLOhLD9i0aMgGsrWlMPlfCZ8juoJ1hTn18Hf78Um/1m9hst3GiA0uBCY14XLpiqL KvijGEGTv+wAQqTkPB629n5Ee8wwEFXsgj3Ji+UdI7lRQC+gLrZpG+qm9dyh6c7ng9y+xX WfyCVKSomkKgDH0XwJB0VgxJtqcJzPfKneeWNhlGTnQjyxGbf7zPxiqEL4/2JmtrS/n6FP ugyRW1R0LwIhyDJ+MImzWidIMRBEmfYyFVcYJXizWG7ko4Qx2JEmx7tcC0BeqQ== Received: by freefall.freebsd.org (Postfix, from userid 1002) id 5989B18FC6; Sat, 31 Aug 2024 22:21:02 +0000 (UTC) To: freebsd-snapshots@FreeBSD.org, freebsd-stable@FreeBSD.org Cc: FreeBSD Release Engineering Team Reply-To: FreeBSD Release Engineering Team Subject: FreeBSD 13.4-RC2 Now Available Message-Id: <20240831222102.5989B18FC6@freefall.freebsd.org> Date: Sat, 31 Aug 2024 22:21:02 +0000 (UTC) From: Colin Percival List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The second RC build of the 13.4-RELEASE release cycle is now available. Installation images are available for: o 13.4-RC2 amd64 GENERIC o 13.4-RC2 i386 GENERIC o 13.4-RC2 powerpc GENERIC o 13.4-RC2 powerpc64 GENERIC64 o 13.4-RC2 powerpc64le GENERIC64LE o 13.4-RC2 powerpcspe MPC85XXSPE o 13.4-RC2 armv6 RPI-B o 13.4-RC2 armv7 GENERICSD o 13.4-RC2 aarch64 GENERIC o 13.4-RC2 aarch64 RPI o 13.4-RC2 aarch64 PINE64 o 13.4-RC2 aarch64 PINE64-LTS o 13.4-RC2 aarch64 PINEBOOK o 13.4-RC2 aarch64 ROCK64 o 13.4-RC2 aarch64 ROCKPRO64 o 13.4-RC2 riscv64 GENERIC o 13.4-RC2 riscv64 GENERICSD Note regarding arm SD card images: For convenience for those without console access to the system, a freebsd user with a password of freebsd is available by default for ssh(1) access. Additionally, the root user password is set to root. It is strongly recommended to change the password for both users after gaining access to the system. Installer images and memory stick images are available here: https://download.freebsd.org/releases/ISO-IMAGES/13.4/ The image checksums follow at the end of this e-mail. If you notice problems you can report them through the Bugzilla PR system or on the -stable mailing list. If you would like to use Git to do a source based update of an existing system, use the "releng/13.4" branch. A summary of changes since RC1 includes: o Support for AMD Ryzen 7 "Phoenix" processors in amdsmn and amdtemp. o Improved documentation for updating the UEFI boot loader. A list of changes since 13.3 is available in the releng/13.4 release notes: https://www.freebsd.org/releases/13.4R/relnotes/ Please note, the release notes page is not yet complete, and will be updated on an ongoing basis as the 13.4-RELEASE cycle progresses. === Virtual Machine Disk Images === VM disk images are available for the amd64, i386, aarch64, and riscv64 architectures. Disk images may be downloaded from the following URL (or any of the FreeBSD download mirrors): https://download.freebsd.org/releases/VM-IMAGES/13.4-RC2/ BASIC-CI images can be found at: https://download.freebsd.org/releases/CI-IMAGES/13.4-RC2/ The partition layout is: ~ 16 kB - freebsd-boot GPT partition type (bootfs GPT label) ~ 1 GB - freebsd-swap GPT partition type (swapfs GPT label) ~ 20 GB - freebsd-ufs GPT partition type (rootfs GPT label) The disk images are available in QCOW2, VHD, VMDK, and raw disk image formats. The image download size is approximately 135 MB and 165 MB respectively (amd64/i386), decompressing to a 21 GB sparse image. Note regarding arm64/aarch64 virtual machine images: a modified QEMU EFI loader file is needed for qemu-system-aarch64 to be able to boot the virtual machine images. See this page for more information: https://wiki.freebsd.org/arm64/QEMU To boot the VM image, run: % qemu-system-aarch64 -m 4096M -cpu cortex-a57 -M virt \ -bios QEMU_EFI.fd -serial telnet::4444,server -nographic \ -drive if=none,file=VMDISK,id=hd0 \ -device virtio-blk-device,drive=hd0 \ -device virtio-net-device,netdev=net0 \ -netdev user,id=net0 Be sure to replace "VMDISK" with the path to the virtual machine image. === Amazon EC2 AMI Images === FreeBSD/amd64 EC2 AMI IDs can be retrieved from the Systems Manager Parameter Store via the AWS CLI using the command % aws --region $REGION ssm get-parameter --name $KEY where $REGION is the desired region and $KEY is one of the following keys: /aws/service/freebsd/amd64/base/ufs/13.4/RC2 FreeBSD/aarch64 EC2 AMI IDs can be retrieved using the keys /aws/service/freebsd/arm64/base/ufs/13.4/RC2 === Vagrant Images === FreeBSD/amd64 images are available on the Hashicorp Atlas site, and can be installed by running: % vagrant init freebsd/FreeBSD-13.4-RC2 % vagrant up === Upgrading === The freebsd-update(8) utility supports binary upgrades of amd64, i386, and aarch64 systems running earlier FreeBSD releases. Systems running earlier FreeBSD releases can upgrade by first installing any updates for the currently running release: # freebsd-update fetch # freebsd-update install and then downloading the new release: # freebsd-update upgrade -r 13.4-RC2 During this process, freebsd-update(8) may ask the user to help by merging some configuration files or by confirming that the automatically performed merging was done correctly. # freebsd-update install The system must be rebooted with the newly installed kernel before continuing. # shutdown -r now After rebooting, freebsd-update needs to be run again to install the new userland components: # freebsd-update install It is recommended to rebuild and install all applications if possible, especially if upgrading from an earlier FreeBSD release, for example, FreeBSD 12.x. Alternatively, the user can install misc/compat12x and other compatibility libraries, afterwards the system must be rebooted into the new userland: # shutdown -r now Finally, after rebooting, freebsd-update needs to be run again to remove stale files: # freebsd-update install == ISO CHECKSUMS == o 13.4-RC2 amd64 GENERIC: SHA512 (FreeBSD-13.4-RC2-amd64-bootonly.iso) = 748bccddc2cdc3e12770617345e13aa5069c6ae5360efca21487bb98c196e0651a267aca1f6ee7b87762961fc698253dd44230ea5ab6b3eb336fb502b704e819 SHA512 (FreeBSD-13.4-RC2-amd64-bootonly.iso.xz) = fe699b25aecb4f82f29aee7d130f71f68073ef28d7b7b92c5087d8db070b61800b7822a1632c39a0b747de4b3253e52afa9b1e216c97538deb1e5f9593f78801 SHA512 (FreeBSD-13.4-RC2-amd64-disc1.iso) = a1c0a8772e50841f4602eb53833efef68d126f1009de7789006852c00fda18088fb84ef0ff0b574c84e9fe22fd88d8f54533a58d9dfd799ffd4bb5cfdf73dc33 SHA512 (FreeBSD-13.4-RC2-amd64-disc1.iso.xz) = b227a11f6c4542a85d75be7e0ec2bd5d5201c337b08313441b01342e96b485a50f4fec334b09f882d018d360e4083647790b24a4ca461fb1d63672b93bd1d8ef SHA512 (FreeBSD-13.4-RC2-amd64-dvd1.iso) = 52b11990bc8712bb684acaf9a77750c84642cb201462f8bb46e3c56db23f0efc23e87a65dce39274685be7fec55140cc60c9c131be28d3b327bbd5517de4ea9f SHA512 (FreeBSD-13.4-RC2-amd64-dvd1.iso.xz) = a907a3b9917c32aa63d91cf4ba94ae035844cfa542fdd7f29dee0d2f56d63eb1babcab513604e0c0e6ccbcee8be4f8e99232abe54ff5c2ef266707d710180bf4 SHA512 (FreeBSD-13.4-RC2-amd64-memstick.img) = 4e775fc82d2b555a81a6b060cd2bebda25babde472b19d7803ca754ef1aa3745546f5ccb9fa374b0a8e0bf77a259c57a5111bd98aaa738192b4d801bb1cdbf76 SHA512 (FreeBSD-13.4-RC2-amd64-memstick.img.xz) = ec3e3fddc6c589d29a5b22dc098524e462c3482645e5ad703d712f1855a16108ba14a87f2539d50444cf3118af611688d1d4b5c40d1ff831ca14e8be3a01c551 SHA512 (FreeBSD-13.4-RC2-amd64-mini-memstick.img) = 33444cf8728b23390cb037242851ad89750df38f3aa9c6b48367bf5f13007928e37707447cd78aef5e894252c65c89494781700fb2e70eb41e9a1e26fdae85ae SHA512 (FreeBSD-13.4-RC2-amd64-mini-memstick.img.xz) = 677bbb57060f071230f8c27d4b47dee816535998845fa0f2a9402499dbf9f9ccae30f0780d28d95a94065305dc66bec910302c0952987bc145421660bf0c039a SHA256 (FreeBSD-13.4-RC2-amd64-bootonly.iso) = f0cdc8243bd69dc8913cc30158fe54a66a0dc838ff3ba443ad32a6eb7eb19ff7 SHA256 (FreeBSD-13.4-RC2-amd64-bootonly.iso.xz) = 0116d9b9973096d7ad9e88a65b514d391a46a7075222b54acd3b1a5316c5d61e SHA256 (FreeBSD-13.4-RC2-amd64-disc1.iso) = c0aa88070c9848b2e25086ee07c502203818b11f031b97c8248e7d2122f7ae42 SHA256 (FreeBSD-13.4-RC2-amd64-disc1.iso.xz) = df3dec18d710f7866faa42a03a4d8bdcc158209c91ce3c676e7deef77784fb88 SHA256 (FreeBSD-13.4-RC2-amd64-dvd1.iso) = e526fe201b307b75104ff91c97e9c45394c60f763dc2500b060f71e747082232 SHA256 (FreeBSD-13.4-RC2-amd64-dvd1.iso.xz) = 0512efc26f994c9b8c30daf570311dbe55a619c8dfba8ce75cd3dad9f0de5928 SHA256 (FreeBSD-13.4-RC2-amd64-memstick.img) = 90916a172fb24de5016f326d9219f40258fec54733307a585a7a364918aaf344 SHA256 (FreeBSD-13.4-RC2-amd64-memstick.img.xz) = 2868af8bad38b561c8326271557127839eaafc000f556c345812a380b1e25eae SHA256 (FreeBSD-13.4-RC2-amd64-mini-memstick.img) = ed19a85b32350d220b899134b2a3eb3d8a647cbfb29c6c2c58323f8ff1d09890 SHA256 (FreeBSD-13.4-RC2-amd64-mini-memstick.img.xz) = a53e83dd97e3a027b79ace3c9cb8c662b8b04864e8cdcb11581fc098ed524087 o 13.4-RC2 i386 GENERIC: SHA512 (FreeBSD-13.4-RC2-i386-bootonly.iso) = 2150c64badce03f41739b682de369a0710d929c9aab7e2bca1b4445b594d71c1c003f5ae088defd01d6060991fa4a1c49c668877fc59bc4bb093e9af74b87ccb SHA512 (FreeBSD-13.4-RC2-i386-bootonly.iso.xz) = 3882358c091f1b8d8a02edd172c1fd93a4228970f7a7206e113ba5fb33d88e150ca5e08a2b19261e21a804262359bd297fa91c31b3ee24fd8fc7ab4a96f39e06 SHA512 (FreeBSD-13.4-RC2-i386-disc1.iso) = 10383e85abc5c067d7a82709deaacecc410cf300864ac5adea0db07965c4925d2239a4658c19eb40654b97ba97bf210f426253c91671c44ed5204e7b63e727fe SHA512 (FreeBSD-13.4-RC2-i386-disc1.iso.xz) = 306c85350becd6a7c3dfddb23f9783780fb881d767bdd24e6217446cc145100e440278cf204159858c31ad04db84ddfcc1a6ef157a5cb35b267d9118fe7d0efb SHA512 (FreeBSD-13.4-RC2-i386-dvd1.iso) = f6b5f4582155acb729ee6a7608db285774c0a400a07b062a5f7112eb2da4350ce9cdf7d42d311247a1b22fa7f843e3b013553ae2682ad566caf630c714a039cd SHA512 (FreeBSD-13.4-RC2-i386-dvd1.iso.xz) = 4bab36a19a5a8984bc92970b3e3b58ac9e9b301d13b7fa27e966e0aed115ea5efe9979ce079e4608c4e362b99eb949a9407f97b402e450619bda72672689fef6 SHA512 (FreeBSD-13.4-RC2-i386-memstick.img) = b7b80c30fb1e7dccf4544028ef325880293132b0d2b382d55c4b2eb4d422ac3b0b87c2c6ac5f45319a04fef72a8381078be257d9d3f6b2e45acebcc1658c3a2e SHA512 (FreeBSD-13.4-RC2-i386-memstick.img.xz) = a32b8a9a64ed41f91061a7d8ed45f380511bc64a13fb616c093a869e352383178c9bf2a11474c29bf46ac8d6597d9bebd9452aa6dc7d8f072b30a9b8aae6cace SHA512 (FreeBSD-13.4-RC2-i386-mini-memstick.img) = 08e13c8b945516860ec3b4a338c37638f5e315af101e59d2681e458827c14b22fa9e6b4f2f24bf084d2fc761581f59e60f0fc62edd464cfdf071c2a7162efa9a SHA512 (FreeBSD-13.4-RC2-i386-mini-memstick.img.xz) = 30acc89fe7ba42cab0c66dc148e81b95647814f7b585d47ab3656b64c230b1bd7f0390078c6a2230a8fc574954f1466791a700d0ae8edc32794c5101775dc202 SHA256 (FreeBSD-13.4-RC2-i386-bootonly.iso) = 485573c878e1d7577ebbe9333b33101c17ad9414987e99b1d571bfa0b268f188 SHA256 (FreeBSD-13.4-RC2-i386-bootonly.iso.xz) = 32e7ea192bb835f8d5c33d072f396089ee0512279a1705431b04534df17e3253 SHA256 (FreeBSD-13.4-RC2-i386-disc1.iso) = 20b128b1d800e1c4c96d4b99ae3dcfdbdb093dea9b44352cfea1e5c0d7948666 SHA256 (FreeBSD-13.4-RC2-i386-disc1.iso.xz) = be06db2d6f00017f94bb3bacd22099ff0b7e1da17a446af813483bb820bbccdb SHA256 (FreeBSD-13.4-RC2-i386-dvd1.iso) = 15187367f26acf1d73024aac2d9b24a17ea880b6f6ccb7d7aad65d2eed88c1fa SHA256 (FreeBSD-13.4-RC2-i386-dvd1.iso.xz) = 278d526714949a26b7f5c11c820e96ff7d7ff03c056c8d89f594ca63666c7c26 SHA256 (FreeBSD-13.4-RC2-i386-memstick.img) = 0d7d062fa31dcb86d6c5f9d66ce165317ba9ca40094986e8af22e70e1d5c21af SHA256 (FreeBSD-13.4-RC2-i386-memstick.img.xz) = d7533929d0c538ecfbc4052a9ed8359aba729637abc7085ecd3d0313a20791d8 SHA256 (FreeBSD-13.4-RC2-i386-mini-memstick.img) = 9ce1128423947edb45c129a2dadc09bdbd57a5bc3696532a0dd2bbaeba514805 SHA256 (FreeBSD-13.4-RC2-i386-mini-memstick.img.xz) = 9259014ce7005e6cb0822b0f0fc51e7133588b7372318d41b81b0a7f347f59df o 13.4-RC2 powerpc GENERIC: SHA512 (FreeBSD-13.4-RC2-powerpc-bootonly.iso) = 16e2c101c89a58e68f17cf82268704862ef6f28d596fab6e20aa79999230c439b6b4b56cbf00c641a5e18190db3a109b314d286de9a9e26bdc7acf3fb708cb55 SHA512 (FreeBSD-13.4-RC2-powerpc-bootonly.iso.xz) = 0037bd325dd4228f3b365e03d7c0d3c4bed5613d829b7a88235feb11f44773d15cd36abaf24c428a7a8b68dc217b381987ce76969a306e0ff4866c1766b4fcf1 SHA512 (FreeBSD-13.4-RC2-powerpc-disc1.iso) = 8e85ef6e14e92a518e2fabd19395980d0efa618a87c6f10297fb86dbe8a9612ec713e1a0ebaa31c89db919218445854e55fc7b6afae00591a41d1c5fe20d865a SHA512 (FreeBSD-13.4-RC2-powerpc-disc1.iso.xz) = 76f97813a1c353f37ce82b787d11c85668fefb8e78ad0d742a3196cbfeef06eb68e88e61bb91374f8cd7bae97ad7533e354411b83e68f3e189dee4fab0cbb6c5 SHA256 (FreeBSD-13.4-RC2-powerpc-bootonly.iso) = 37433666bf14eff5466852ad3327ba371a896017c19f37c7cecde0f140272c75 SHA256 (FreeBSD-13.4-RC2-powerpc-bootonly.iso.xz) = 64fa5177daa76318a65cf71bed663fb63ce53ef8e16162430eabf80fc9f935a7 SHA256 (FreeBSD-13.4-RC2-powerpc-disc1.iso) = 39f4d8e448dff01fd2c8c18964e4d0a55a8ae347a2e13e7778ff5b3946ee08fe SHA256 (FreeBSD-13.4-RC2-powerpc-disc1.iso.xz) = ff88e176e03d63bd29d9767711ff6bbec0f6a1cd97aff58979dd3502cf9cc709 o 13.4-RC2 powerpc64 GENERIC64: SHA512 (FreeBSD-13.4-RC2-powerpc-powerpc64-bootonly.iso) = 1b5d4806c09bebe59fdc9a31fa8ee6c3503ccca302a7cbbc4bed1d09d5d02f6543998f71a558da6108904394cdf33b76fe868821f6c7748789fa428f298b7556 SHA512 (FreeBSD-13.4-RC2-powerpc-powerpc64-bootonly.iso.xz) = 9b190c71624a7ee91cd015350dde407b8d4be7370b6b94112093ebe3bb51f4c7f4e15c1f0670ecc7df73ef4c399332e557f285ef8478f19136a7233f4f877170 SHA512 (FreeBSD-13.4-RC2-powerpc-powerpc64-disc1.iso) = 31f86be2874bffe0b252166c0f775114961582225848eef42948940744d259ee0900cb71bcafc84cdb72244bfe0c9c58e0e997cfccbe304645a160572cca25b7 SHA512 (FreeBSD-13.4-RC2-powerpc-powerpc64-disc1.iso.xz) = 42a7d380307273e29d223d23ce5e78da575b0fcd5951938667466bca74f6e926c5c8c4ae67e9aea9f477524ca9429c7ff1e8aefdccc66534ea4f1209f351231b SHA256 (FreeBSD-13.4-RC2-powerpc-powerpc64-bootonly.iso) = 756aa2f05b4ba29793ce12d54eaab7e64efa98f44f069227d440603ac8ff8adf SHA256 (FreeBSD-13.4-RC2-powerpc-powerpc64-bootonly.iso.xz) = 8112c27072914cd79aba5f970986ab3d193cb20ae08238f1319552a544d3f72f SHA256 (FreeBSD-13.4-RC2-powerpc-powerpc64-disc1.iso) = 171c2a1f195f1e1bbf65ca6616a94242bff4b3bdaa5fb5d922076e71923791e3 SHA256 (FreeBSD-13.4-RC2-powerpc-powerpc64-disc1.iso.xz) = 24bf5f53982d5f9f81a31f6c22c2e3d6d522ca2050ba10ff994d31aaed3df949 o 13.4-RC2 powerpc64le GENERIC64LE: SHA512 (FreeBSD-13.4-RC2-powerpc-powerpc64le-bootonly.iso) = d350299151e863fbe1a5bff2819d3692d16542a5166d911cf36651692aa7660e2c9ead10dc774e18f93b5bd5a382e50f72491bd8c762ce1e2385af449e3b74c4 SHA512 (FreeBSD-13.4-RC2-powerpc-powerpc64le-bootonly.iso.xz) = 8712bb48259ed405c30456378e00ae341d09995d57ab2dcafaa28768cf5659317dcf159c2697fb501d9bce8bdcad58866cf7a3d9357b45a69320076eb00b6b5e SHA512 (FreeBSD-13.4-RC2-powerpc-powerpc64le-disc1.iso) = ee3b27ffda73a5386a5e1928382c5a2f16c3b1d96c37c5f90abd8f1a71bef508632bf0f3a672b951597e50705e8a29b74cb67a6bc5b09a70fda055620fec1dc8 SHA512 (FreeBSD-13.4-RC2-powerpc-powerpc64le-disc1.iso.xz) = 3e59f0e534308b5d8340cd7a3c74bbed7d837c4c4f512c3d9431ed6f99269bbe5035fac93f21b0a17e64a1b6bdd3a2b6c68921a3efb225eaf701de7b355ec661 SHA256 (FreeBSD-13.4-RC2-powerpc-powerpc64le-bootonly.iso) = ad416d38940c7d4d95d10a82f908f04751ed82f1870f130a3369871803173b65 SHA256 (FreeBSD-13.4-RC2-powerpc-powerpc64le-bootonly.iso.xz) = 27296e38d5a7d21abc24596759e70bdca30a635a30f508be3799d920594a1a74 SHA256 (FreeBSD-13.4-RC2-powerpc-powerpc64le-disc1.iso) = 01771d0ab92da889e98b76256f7b406b7453ce98482a75054b8dc67ee0d84b5b SHA256 (FreeBSD-13.4-RC2-powerpc-powerpc64le-disc1.iso.xz) = 66396f082a352f1e884b66736b35b97fb077b5f61121f239b9936bfc314ef577 o 13.4-RC2 powerpcspe MPC85XXSPE: SHA512 (FreeBSD-13.4-RC2-powerpc-powerpcspe-bootonly.iso) = 2e611a1ca76652d8dd84543d0329500a458d20d7947d161621d715e3565abe7d5f0c97661f42cb3a607672c7792a7cdc0e0cc3e6d75f90f995c3b492eff4ac77 SHA512 (FreeBSD-13.4-RC2-powerpc-powerpcspe-bootonly.iso.xz) = 8d57681ffc9c3f8c650bea20574aafa6a0f19cd524a98163dff9b16f5b67df124bb6040f10246836ac5bb233fd54ce4c3994a274998b45431f868e28a0366c32 SHA512 (FreeBSD-13.4-RC2-powerpc-powerpcspe-disc1.iso) = 1a644614b09af1b070a80cfa6fd2e4d2dc6e6ca422d1c11aae128811156ae6a1515e5b989786f23d353ca70e4ef83e596add5fc7f9551ebaf067fce781824ae9 SHA512 (FreeBSD-13.4-RC2-powerpc-powerpcspe-disc1.iso.xz) = a192504667dc7e6b79564499427b5be95ecd158e96975d759f20f192216e731f5ae5a679102ac6069358c7bc53e4100aa6a8e3fd2b03b798baafc88728f17220 SHA256 (FreeBSD-13.4-RC2-powerpc-powerpcspe-bootonly.iso) = 82d0cc533b99328d0b5a0f7d5f167f282f5d9124b2a80c2b4a89df475df48d59 SHA256 (FreeBSD-13.4-RC2-powerpc-powerpcspe-bootonly.iso.xz) = d112aae4f22b36755dff99972550da054174a0996058bce8509b2082e5d06288 SHA256 (FreeBSD-13.4-RC2-powerpc-powerpcspe-disc1.iso) = 4196613e06d0dcfae655048395de8fa6848426134b17702916f193938e45b94c SHA256 (FreeBSD-13.4-RC2-powerpc-powerpcspe-disc1.iso.xz) = 167b4411c24871efcdbfc1f67d800e7b65b8782589419ebc51e3c402debcc520 o 13.4-RC2 armv6 RPI-B: SHA512 (FreeBSD-13.4-RC2-arm-armv6-RPI-B.img.xz) = f58238365db2854eeca0d7ad0b97b091fe3dbba0eef51370aa0a7cf725d610f74acf738542f002af53c5607a6aa0368c59aaf1c0a2c4e64940234b8edb8295b8 SHA256 (FreeBSD-13.4-RC2-arm-armv6-RPI-B.img.xz) = 9bea5f91613ecf753b264cc56f53389937741ba157aa06b8a2fb7cffab5f8c9b o 13.4-RC2 armv7 GENERICSD: SHA512 (FreeBSD-13.4-RC2-arm-armv7-GENERICSD.img.xz) = 8fe8f3217f4a1786044ddd1405e2aa8c99584899b449b92f1effcbf1223917d3f8cb91d25c0f2cfcc01d8fb9a85a936e1178bc44a05b028d70e4011e639c4522 SHA256 (FreeBSD-13.4-RC2-arm-armv7-GENERICSD.img.xz) = d522d4f230f306bc418b6182489b12b4ebd14599f33f6e45a19d06248e4e41fe o 13.4-RC2 aarch64 GENERIC: SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-bootonly.iso) = 428ccecd5f2bb34e6c154c20ec858729820650fcf44573636a590bb6f7f0b2b9c9d4960ccd1667f95cb6809822cf416a0296e5abe0b5694e8da4f35ba5c034c0 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-bootonly.iso.xz) = d5553b8f59a4233fc3d49bd8e522f489554d986585c14948081f88b2ba270c7df661b090de45dba00f6370c34be8adabf0b8e54eedc84270c7bc541d12adcf38 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-disc1.iso) = 94d1c2d00ffb80f7361a15efbb28fd8a73b1eb9eda676438f30070ff9c252539385f5135da10002e53391ffb99d29291c071ba5699895a0ac84654af35000465 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-disc1.iso.xz) = 532434feb8488dd4073fd1b27f6b1b4f7c66296d457997a59f27e52c05f929d62e0e91c292e4d7bfd154e28702753483e0e642ac3216717ef497200b08415ed0 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-dvd1.iso) = 36436d7eb2fa36edff07d5fd04f94cd117591a01c2a4f938fe241b6c5e1e944c33aa01fab5bd1b9df96b1290852165de3099268d5d2f602adbfadddf96af9277 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-dvd1.iso.xz) = 3482c28754907460fbfd7e088a112cad82d2b580786fdb615de21f10e705b3c2a6318b793b1d4ea7882eaddc7e58f6f4a68b29e320ad54a657bad150ea030b60 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-memstick.img) = 151bd7df8b11aed9afacbc9a5f78bd5daf8b87ea83ba2cb0b4a2fd2eee1dfc921d2cfb207e742ca6b2618f2b4f1b1b818d2863a1cfa0a88d0a01295aa5fbef87 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-memstick.img.xz) = 5ef651ef44a6a4d7127069c4b4d4b1b23720790ee1e1596d9262160e212b1549e3ccba5712d116652870ad1fe3573da5571f0d1228c38943fd082a4f19f2b6bd SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-mini-memstick.img) = 77dede404c421aca180fc744e817303fa0ac47766c921bc73ff9233aac0371c2275c9f73a171f69c8c39c5bea6b0ac8e0cafd9079309de5435b2cce1095495f1 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-mini-memstick.img.xz) = 2daf14589154973feba42cbf40fe0e31db78f9c52d10179149efd58d58de6c82cd18e91bcaa30a554255c31faa34655a4a9611b39ab7347b03972a983cc5adb4 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-bootonly.iso) = bd32aa61a8cd0663f815d2428e705c0878f9a25883e4747dae4567610454d68b SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-bootonly.iso.xz) = 743b481a9f88d981a8b46dd51f95256360861fdc1094776d5a06b608e5210fc4 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-disc1.iso) = 103d03779d492318fb2f9e7805a3a4713f51487087daebe206b9e7c2d2cb5341 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-disc1.iso.xz) = d7dcd4a6b27adaede0c3f095a46a424e0b8cd2426aa1b3ff20bdce220e687882 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-dvd1.iso) = dcfda81a2b162c966b197382d0120ee2ae5b61a308a73f09fb59cf70be6a2cd2 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-dvd1.iso.xz) = dc62c908e048a15e3e389e4e708718a1b8d4d7cd8025806dfc9aa3dd69629d28 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-memstick.img) = 720a58806e0ff913c02b84aa7b10ada443a4beff13a5bbd35432fe2908e9e31b SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-memstick.img.xz) = a75022268c37935b9e0937bea4db410566bfed08cdbdda322affb068dc5a06c5 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-mini-memstick.img) = a37fed7dcb733a6f2afea2d202bc354e8885600672e614227a949a25050b8d85 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-mini-memstick.img.xz) = 3b4be05aaf25d35340891f90d1281df1daacf3c2bf10c044003382d6a5021a2c o 13.4-RC2 aarch64 RPI: SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-RPI.img.xz) = 11e66bb909710f296491a81a5be1f81e9a7c2b8df2190bc74ed0220df3f89467d04905e8dd795b57de353506b5bdf193b4a48e9ca6a4504eac0e66c2d307fd11 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-RPI.img.xz) = 2e3c21549e73b80f1815d778818b734bc9c7d828bbc364b68464eef3ec000bac o 13.4-RC2 aarch64 PINE64: SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-PINE64.img.xz) = 9c7cb52d1cabd66f19d8535f05362aefee031fc099c9525c1dfe332a4d64a55faa1c54e3ccf0ba845cb9e973eb0a547ca6f3bc6007a8a5571a532874a0002ccf SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-PINE64.img.xz) = 13330fa7dc7d240fc35d998f1077da2f107b44c3dd840ccc9c346546e110acdf o 13.4-RC2 aarch64 PINE64-LTS: SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-PINE64-LTS.img.xz) = 399f51ac270bf56faed5473d2a3bfd63f3353dd4b645287f547391c0b8c872db218545994c5eb379edfa07ed8f910019ca840358aee8ce9bf63fb688667d56ca SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-PINE64-LTS.img.xz) = 358cd2fd4ae162b94a023023845d690c2cddaf14aa3b5703957b54cba7436ef9 o 13.4-RC2 aarch64 PINEBOOK: SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-PINEBOOK.img.xz) = 932fcdddd224fa2b31117d4dbf9dcd5213425b205ca7078f2d377f18d23b70d130f6d9a6283680dffc511191d4b04073b70af90fd25c0d62aa2d8a411a2a0ac8 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-PINEBOOK.img.xz) = 6f5364fa92620a3e4425b2a52b2ce26577b2914b8808657dc21b1130f7c63345 o 13.4-RC2 aarch64 ROCK64: SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-ROCK64.img.xz) = 3a71657d4fae9fe2fe4a65785ca9f8600db32d6b3ab776a92359815ebcbe481a141f754a479b57f3f5c4d1168bb7b170787efbe887e4d3060b128713517bfe6b SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-ROCK64.img.xz) = 495dcf75a5ccc3c8d3341a2e6acbc0d87bb7e9ca0bdaa6f661e900bd8821f85c o 13.4-RC2 aarch64 ROCKPRO64: SHA512 (FreeBSD-13.4-RC2-arm64-aarch64-ROCKPRO64.img.xz) = 6e9f72d3cf66c6e13afe5de1108210ad6c0b5fa7f8001f6b04f0119420a5c3b2a640beec36e74216924b0fff9c811db73de26c9575c0e59db7ad7e86a58544d2 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64-ROCKPRO64.img.xz) = 39874791507f9ef1998c6320ee75203f7afc941246c5acc4631e9c18cbac2414 o 13.4-RC2 riscv64 GENERIC: SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-bootonly.iso) = 4126d8aa636d09589ff744bf9071a5106af416f505b687759ff2f941fc50bd7be6573f469c3fd5194bfc7352dd0d86b5554d282d4ba0b1b0675265414dab3921 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-bootonly.iso.xz) = efbe075ad41a537296f33b5af48e69f37aab450a7ea255465147afa8a8290b69341312a9b8ac159facd5f9d4bcee3b14fedf6f3f0477f4e7b663f10021120074 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-disc1.iso) = 8dd527f60c6906f1b9c02fb1795688bfcaab2e81226b201c3efef8bae2af8682ad1da0dda3053a61db30ff785c2ae9b79ac62358ea5361244ab2e3c623eed2ab SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-disc1.iso.xz) = 2ec2cc477100089a41a042bbe4c07af5634c6e56c52078462f59c12cb6aa3a7ce860f604e51801f2786a589c9372465e8675bf98c2a486dbc327fa5e3119a718 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-memstick.img) = 814db7a5e6496bab4cd7eb70709f82032e92290f3fd32a0d397ff3e5bcb0e38181e5c6efdc0f47018a895f6c11756470444fcbafe01d7dfc5b4d4e98c7c50fc2 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-memstick.img.xz) = a42816c22be4debbc7e4e012e040850f6166d91384b27df12f11cd763344d6def225b2e03f61c4768eb2087cd291fc4680b88f8e6d329b142e9af8e0b95ce797 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-mini-memstick.img) = 14045d5ed7286f03bc5ce9e1e89e3dad66ea33c17f2492c409d378c1ab2d97ef3f15631b940a03b6d9809f12f3a85f63494db4460ba215c3d8e408b670053786 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-mini-memstick.img.xz) = 218bc046fe6077608e92ad3a322d5ca176c53e53fdb826cba7a1789a70e7cf5630ff27af6fff298ac52924bde306cdd1c99ea864b6ef1a99c5238d45d45965c6 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-bootonly.iso) = 592ae1248e937de2d223006cdd5b8411a022307fc7617fd869322da945836210 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-bootonly.iso.xz) = 136bdac7a20853d209a2b041e58397dec046b10e8f29532a035ed9527162ab18 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-disc1.iso) = 5bbdccbb815b6175e3458c7a51b4f0b3a8d3ab0e3fb538d3aa8a3b68d67c9f35 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-disc1.iso.xz) = 4a8423d6dacd5748daa634fa1c3cceb21cef78d7b065fc5cd59f65ed50bb39c9 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-memstick.img) = 54eccdf0cef7e15cdaf84c8c19901d812b58eb9bf2c7c2ea6b63cdca05b67699 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-memstick.img.xz) = 1112eba3da6b90570a6ecc7574ce25ce4d060372cfb89195617a3affeca58cb9 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-mini-memstick.img) = 52647a854ff8f7e825ea697fb8c12eae1e572cf31ab29075c6f1cd04ebffdc7d SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-mini-memstick.img.xz) = a995ee74b3abca2431e1b1790b8b94544b887a8745850f96588c753600a39983 o 13.4-RC2 riscv64 GENERICSD: SHA512 (FreeBSD-13.4-RC2-riscv-riscv64-GENERICSD.img.xz) = 9d9f8bc300a49af181f7e77249cbb4384ae703522170e90d53069adbff46b450ac0ea028eea9e07176b332e87b13294505c9180a0ce5c32b1d5b182e214443f6 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64-GENERICSD.img.xz) = a78740a81e62084de8b5d31554edf7643660a75954fab34915fcfceefecd298d == VM IMAGE CHECKSUMS == o 13.4-RC2 amd64: SHA512 (FreeBSD-13.4-RC2-amd64.qcow2.xz) = 4125609883c9d230c4fc511b9aaada8460e9686953fc35bf509b268d89e16ec234e9a8d761b83de9df44d6e01570902ba26a897424cadcc54abdf9abb3c92d36 SHA512 (FreeBSD-13.4-RC2-amd64.raw.xz) = 5918952238606c3efe75186a05c4a98a00d50f4cb07a4028fa5f7fb8c70f94fecd8933d063d5b0e48fc4bc4ed9523879f5db2a59b1319fc4816152a41d8ae64c SHA512 (FreeBSD-13.4-RC2-amd64.vhd.xz) = b6927b759ef0b8bd0534281cdcb8661d1a87cae66afd5bb453e94c1d6fd931a0b3482bef5aba637e02d5d4b0c3bf40767c37d53604c9308bbafa42a6434a69e6 SHA512 (FreeBSD-13.4-RC2-amd64.vmdk.xz) = 1589fec3b23d6df99f7bd87b8d6a1f83faafb5204d4505a449a77b76bb24400cf615ae51be0d8ba7ce44a2e9efaa65dde048ae8728b941e3f28383d42a8bec5e SHA256 (FreeBSD-13.4-RC2-amd64.qcow2.xz) = 143aaebb5993510e04bc2b7bd329304347b65aa7cb8d57e0d6ae938c7c3fb4b8 SHA256 (FreeBSD-13.4-RC2-amd64.raw.xz) = 00a5c90ac1749ba23fcc2ad2eda3166a7ccc2e268d58e999af0a20dd1d4d4c20 SHA256 (FreeBSD-13.4-RC2-amd64.vhd.xz) = e339d9bb1599b29070f0bd43220d8c0071111a390a524a14acfcad5a0fd0979e SHA256 (FreeBSD-13.4-RC2-amd64.vmdk.xz) = 21ea90e047028830115c479e36af1d11146293d154ecd57b64682b31528cbc76 o 13.4-RC2 i386: SHA512 (FreeBSD-13.4-RC2-i386.qcow2.xz) = 4fb7921755294248e33687144a5706d0a619c2da9db2d5fd19fec46be53c537b1294859ac18703ebbc92ea90caf417bea0ed63e4e3f8aca93aba9a428f669074 SHA512 (FreeBSD-13.4-RC2-i386.raw.xz) = 392dea8b3a4bdf548f52efec7e8d5ce982ec9eb4180a4c8a2f1278fc080512da8fe5e675710407f0078d0f6c9d5ea7a537d18638947b435e09d4f2952c3dd01e SHA512 (FreeBSD-13.4-RC2-i386.vhd.xz) = c14c444a2434f005cd1aed723cda56a5254aa44985fe9d51b8ba5cc093a78e72e3d7e8dc08f71f6616e1604f401d1fa41ad5f6c247595f1a8c78284d481968cb SHA512 (FreeBSD-13.4-RC2-i386.vmdk.xz) = 8e48df5f154b7d97a2fbd81c2bd0fe781b32371effb50febf6586e4dd628a67b57fd3a6352fdd5b40fea52f6ce2d21f38acc454fef99d404a62389514d15d987 SHA256 (FreeBSD-13.4-RC2-i386.qcow2.xz) = 7aedf77306382f6a61b454f71ee1c49179608fd79b81842102888143fe4cec5c SHA256 (FreeBSD-13.4-RC2-i386.raw.xz) = cf5c260f0529fed118326388c423a5fd9b91c2c537164d5278b6906747734b55 SHA256 (FreeBSD-13.4-RC2-i386.vhd.xz) = a3c7003edbf63a2809d0da0be1085d6f68b632d6e0575b46fb36b4d0ca63499d SHA256 (FreeBSD-13.4-RC2-i386.vmdk.xz) = fdc4175d9f82e68b8a32aecb0f30a8a24d7ce20f77b2d6715f6761164f1caf34 o 13.4-RC2 aarch64: SHA512 (FreeBSD-13.4-RC2-arm64-aarch64.qcow2.xz) = f99ee9175ae3f485c271df05e1d4733464d267822da2869bfa3c9b8911686f2b36037762d39f56f0eea1ddc5f70427e5d904b7e51e9c8d4ae30e2181c7226de8 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64.raw.xz) = bf4767bae1597b5249ed7225dac7129978c5e312d3ce03a016bfdc8de4a55c98ccc287d0ceffc85c588c4f8f02c280c9db527e0f342cafd72fa6c07bb6b045d0 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64.vhd.xz) = 9fa579389f5c005708c31b0df6fa5a5dc7b4ff7157c3da0751b14febdef664cd5a183e436d2647b3077e367421a364d2faa61643d8afa5e4bbbc58f875e45b00 SHA512 (FreeBSD-13.4-RC2-arm64-aarch64.vmdk.xz) = 6777bf9d9f78182d5d02a0fb10ec8097fc431091357cf336eb70058b0cd7909acbb3c9d9272ba1b4457a499de6bb20aa24b1a7528b22222062f925442ba1b292 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64.qcow2.xz) = cc114754ae0dbd7f2b58d52f0b56101c4b9704040d99a60343b629fd7dbc8ddb SHA256 (FreeBSD-13.4-RC2-arm64-aarch64.raw.xz) = 0c0eb4bb1fcbd1b5e6957b38226c67846ed3d9e50623f8dbddf201bf54607341 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64.vhd.xz) = 7d9aed6ec21b08f559f91b164089f37b1a9d6f1884473fe46cbe4ab301d68f28 SHA256 (FreeBSD-13.4-RC2-arm64-aarch64.vmdk.xz) = 585b43dd8a6282439c3f3638639b4e440589bdf9b96eb6722b70a4c4cc8142e7 o 13.4-RC2 riscv64: SHA512 (FreeBSD-13.4-RC2-riscv-riscv64.qcow2.xz) = 034b32f1138322638c7a5b7949a3b184c6a4cdfd003360a496c08c56c2cc645c94fbe9cdf9d84c963af6dda6c442717cd61d7e1cecf7024bd463f6f5196c5527 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64.raw.xz) = 034b32f1138322638c7a5b7949a3b184c6a4cdfd003360a496c08c56c2cc645c94fbe9cdf9d84c963af6dda6c442717cd61d7e1cecf7024bd463f6f5196c5527 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64.vhd.xz) = 034b32f1138322638c7a5b7949a3b184c6a4cdfd003360a496c08c56c2cc645c94fbe9cdf9d84c963af6dda6c442717cd61d7e1cecf7024bd463f6f5196c5527 SHA512 (FreeBSD-13.4-RC2-riscv-riscv64.vmdk.xz) = 034b32f1138322638c7a5b7949a3b184c6a4cdfd003360a496c08c56c2cc645c94fbe9cdf9d84c963af6dda6c442717cd61d7e1cecf7024bd463f6f5196c5527 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64.qcow2.xz) = 0040f94d11d0039505328a90b2ff48968db873e9e7967307631bf40ef5679275 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64.raw.xz) = 0040f94d11d0039505328a90b2ff48968db873e9e7967307631bf40ef5679275 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64.vhd.xz) = 0040f94d11d0039505328a90b2ff48968db873e9e7967307631bf40ef5679275 SHA256 (FreeBSD-13.4-RC2-riscv-riscv64.vmdk.xz) = 0040f94d11d0039505328a90b2ff48968db873e9e7967307631bf40ef5679275 Love FreeBSD? Support this and future releases with a donation to the FreeBSD Foundation! https://www.freebsdfoundation.org/donate/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEglY7hNBiDtwN+4ZBOJfy4i5lrT8FAmbTlywACgkQOJfy4i5l rT8vpA/+JLtUpw9OtREl3y/wf+HZvlkcfEB+QJDBHpmHsIG0pEeCnv4qEjeLYZWg jmqwK4qNcjRebYrqm2LI7Uorl5s8dliPeVYu6pNsFHes3izmLj8WheM3u2y6VgzG bIXOs/pfjgQ95B3T2eAS2o23CHLPXwWOqMeql3pGvl0szQq5ebmQzTSJnokeyg7m uti6NOaZQ+gLlOUjzCtd3noQgFIlgUPzSJaYf0x63tSbSO2RnmyYRRZ6fIkkXgBC 00rkEUTz1dwAMIBUOXwBsyLI3Kf5MiEKcZnrKRS/s0uFAOg+t1HyvgiEm38/3FZ3 TBFNk6R2+N3nDruTxSssmxbH4e10grZu9ffKBCyacka3CTICpoFdHj4nb37RzCLp XKhN3k7WsB9Xn/tu8W/d+s9DeQVTXU0g41S1co+buzOkFGg7JgJIkHhgo9D1F9+j vyWQ3R1Bf28fVA5wPTbPCPDFsocboNTxWqV3iH0+D3AHmmJ4+zkRkhI0Fm1AfEee 6/UlliN55chXci28MAF+ujmR7qYO5XegFbrbtGB+LnKG1NeAJK9qg//hyHfiCosP 8WDz0/F3+JN7b2ixdre3+DxB9fqWnVb9pGXUqoNxsGILvYpUJ7IytANqHjYOYt2J sxHT95JNU8J4Bf+NIn1n0jomrUR6W+lg6lcn9qtBAVQYo9OaeCU= =1hI3 -----END PGP SIGNATURE----- From nobody Sun Sep 1 00:05:11 2024 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WxBwg1hW4z5TWnr for ; Sun, 01 Sep 2024 00:05:23 +0000 (UTC) (envelope-from list_freebsd@bluerosetech.com) Received: from echo.brtsvcs.net (echo.brtsvcs.net [IPv6:2607:f740:c::4ae]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4WxBwd61ynz45hg for ; Sun, 1 Sep 2024 00:05:21 +0000 (UTC) (envelope-from list_freebsd@bluerosetech.com) Authentication-Results: mx1.freebsd.org; none Received: from chombo.houseloki.net (65-100-43-2.dia.static.qwest.net [65.100.43.2]) by echo.brtsvcs.net (Postfix) with ESMTPS id 6C40438D43; Sun, 01 Sep 2024 00:05:12 +0000 (UTC) Received: from [10.26.25.100] (ivy.pas.ds.pilgrimaccounting.com [10.26.25.100]) by chombo.houseloki.net (Postfix) with ESMTPSA id A8C044F564; Sat, 31 Aug 2024 17:05:11 -0700 (PDT) Message-ID: <52218a81-0bb2-41bd-f66c-138d57c43359@bluerosetech.com> Date: Sat, 31 Aug 2024 17:05:11 -0700 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.15.1 Subject: Re: How to diagnose "Limiting closed port RST response from 213 to 205 packets/sec" ? To: Pete French , FreeBSD Stable Mailing List References: <27a993d5-c456-4add-8893-3e86af747ab1@twisted.org.uk> Content-Language: en-US From: list_freebsd@bluerosetech.com In-Reply-To: <27a993d5-c456-4add-8893-3e86af747ab1@twisted.org.uk> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:36236, ipnet:2607:f740:c::/48, country:US] X-Rspamd-Queue-Id: 4WxBwd61ynz45hg On 2024-08-31 7:32, Pete French wrote: > So I am running some servers with 14.1-STABLE, pretty standard - Apache > + mysql setup, and I am seeing a lot of the above messages. I have > always seen these form time to time, but recently I have had compmnaits > from a customer about the webservers being unavailable, and the times > they give correspond to bursts of these errors. > > I dont see any other errors, and am wondering how to get more info about > this message. Knowing if its IPv4 or IPv6 would be nice. Knowing the > port that is closed would be ideal. I have a feeling that the closed > port is the one which Apaxche is suppsoed to be listenin gon (I cant > think of nay other ports which would get hammered), but that should > never be closed. > > Any advice ? Mass portscanners like shodan usually are the cause of this. If you want to stop them from hitting your servers, you need an upstream packet filter that blocks an IP after it tries too many closed ports. From nobody Sun Sep 1 08:32:25 2024 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WxQ9z30Y4z5TnXj for ; Sun, 01 Sep 2024 08:32:39 +0000 (UTC) (envelope-from bsd-lists@bsdforge.com) Received: from udns.ultimatedns.net (udns.ultimatedns.net [24.113.41.81]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "ultimatedns.net", Issuer "R10" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WxQ9z00M6z4rqj for ; Sun, 1 Sep 2024 08:32:38 +0000 (UTC) (envelope-from bsd-lists@bsdforge.com) Authentication-Results: mx1.freebsd.org; none Received: from ultimatedns.net (localhost [127.0.0.1]) by udns.ultimatedns.net (8.16.1/8.16.1) with ESMTP id 4818WPJ5050292; Sun, 1 Sep 2024 01:32:32 -0700 (PDT) (envelope-from bsd-lists@bsdforge.com) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=ultimatedns.net; s=mx99; t=1725179552; x=1725180152; r=y; bh=1PvsevkGSC1zADK7jktwzRYKJwLKM18U3q90peo32K8=; h=Date:From:To:Cc:Subject:In-Reply-To:References; b=vn82GYRZP1Niatb9g4/G7I2Uu6xrop9+iXN0IrJ9Uwu5771mkrAWmSnCz/VBUmPwU YGyNHxXDTRoum6vaybzmMJAdJnRQj586jRWi5xuS3xhJWm14diVyyZNPmWfvxjds4k dFW5OuNJ1r8HvkTCc4RZuvtnDy1ChlqRabcHCkoCQhl6OK74NOl1GpHekaIDWlz2b5 igfosXRrc+c62HqrT0iY9NmA6NI4afob/U5mQtlFH+Za+6sXfZlemS/1Uw17zDdgSK N9WkNYXD29anOftwAy49+xRw9nuVzWp7OFNPMK3jE27ucA0SPQqBVuMslFP/qNAhVc e/99PgSfc2CMA== List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org MIME-Version: 1.0 Date: Sun, 01 Sep 2024 01:32:25 -0700 From: Chris To: Pete French Cc: FreeBSD Stable Mailing List Subject: Re: How to diagnose "Limiting closed port RST response from 213 to 205 packets/sec" ? In-Reply-To: <27a993d5-c456-4add-8893-3e86af747ab1@twisted.org.uk> References: <27a993d5-c456-4add-8893-3e86af747ab1@twisted.org.uk> User-Agent: UDNSMS/17.0 Message-ID: <97fa5fe2037829e34e51d7132e627c65@bsdforge.com> X-Sender: bsd-lists@bsdforge.com Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:11404, ipnet:24.113.0.0/16, country:US] X-Rspamd-Queue-Id: 4WxQ9z00M6z4rqj On 2024-08-31 07:32, Pete French wrote: > So I am running some servers with 14.1-STABLE, pretty standard - Apache + > mysql > setup, and I am seeing a lot of the above messages. I have always seen these > form > time to time, but recently I have had compmnaits from a customer about the > webservers being unavailable, and the times they give correspond to bursts > of > these errors. > > I dont see any other errors, and am wondering how to get more info about > this > message. Knowing if its IPv4 or IPv6 would be nice. Knowing the port that is > closed would be ideal. I have a feeling that the closed port is the one > which > Apaxche is suppsoed to be listenin gon (I cant think of nay other ports > which > would get hammered), but that should never be closed. Check the www logs against the same times you're seeing these in messages. Bad bots "search engines" will often flood your server(s). It can also be the result of local scripts making massive queries outbound (a script running on a [local] customer web server?). Lastly, someone pounding on your box either directly, or by way of deflected queries (harder to track). Some ways to track; check all your other logs against the same times those messages show up in messages. Crank up verbosity in logs. Lastly; you might be able to better ferret some additional clues in sysctl.conf(5) by tweaking the net.inet.tcp.log_in_vain setting; from tcp(4): log_in_vain Log any connection attempts to ports where there is no socket accepting connections. The value of 1 limits the logging to SYN (connection establishment) packets only. A value of 2 results in any TCP packets to closed ports being logged. Any value not listed above disables the logging (default is 0, i.e., the logging is disabled). Warning, you'll see a good number of entries many (most) are innocent/harmless. You'll of course only be interested in those corresponding with the messages you're receiving. You'll probably only want to use this during the periods your concerned with. As this is a pretty noisy log. I see these messages all the time, and managed to track the offending IP using at least one of the above. I run pf(4). So add the offending IP to a block table, and am never forced to deal with them again. :) HTH --Chris > > Any advice ? > > -pete. From nobody Sun Sep 1 22:24:13 2024 X-Original-To: freebsd-stable@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4Wxmdt3mN4z5PbWx for ; Sun, 01 Sep 2024 22:24:34 +0000 (UTC) (envelope-from pete@twisted.org.uk) Received: from toybox.twisted.org.uk (toybox.twisted.org.uk [178.250.76.50]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4Wxmdt1vWFz4LQD for ; Sun, 1 Sep 2024 22:24:34 +0000 (UTC) (envelope-from pete@twisted.org.uk) Authentication-Results: mx1.freebsd.org; none DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=twisted.org.uk; s=tbx-short; h=Content-Transfer-Encoding:Content-Type: In-Reply-To:From:References:Cc:To:Subject:MIME-Version:Date:Message-ID:Sender :Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=NIMN0alZfy8lM0gseNazmcZNPWG60LI9kqv6KQ+nVh4=; t=1725229474; x=1726093474; b=Jwo/L/kRHnAb2iAwwFN9NDCS6CSA3O60/Ca8LdVQYg8p5G30k0jy10DccMsFAxb/EZ83KqGVV50 GvOWKaU/yxv8Faqkiyfoh03ssWLfnss+P3uU/Zvzq6lZBeMICe24xbDlr+XPJPGB4LwFpZlzzqg7U ISW/Mo79oV1pp6N1CIE=; Received: from mailnull by toybox.twisted.org.uk with spamc-scanned (Exim 4.96.2 (FreeBSD)) (envelope-from ) id 1skszg-0001Ng-0A for freebsd-stable@freebsd.org; Sun, 01 Sep 2024 22:24:24 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-14) on toybox.twisted.org.uk X-Spam-Level: X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED, T_SCC_BODY_TEXT_LINE autolearn=unavailable autolearn_force=no version=4.0.0 X-Spam-Score: -1.0 () Received: from balta.twisted.org.uk ([2001:470:6cc4:1::57]) by toybox.twisted.org.uk with esmtpsa (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.96.2 (FreeBSD)) (envelope-from ) id 1skszW-0001ND-0o; Sun, 01 Sep 2024 22:24:14 +0000 Message-ID: <2fb2df3c-34ee-407d-993f-e2a5e97facad@twisted.org.uk> Date: Sun, 1 Sep 2024 23:24:13 +0100 List-Id: Production branch of FreeBSD source code List-Archive: https://lists.freebsd.org/archives/freebsd-stable List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-stable@freebsd.org Sender: owner-freebsd-stable@FreeBSD.org MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Beta Subject: Re: How to diagnose "Limiting closed port RST response from 213 to 205 packets/sec" ? To: Chris Cc: FreeBSD Stable Mailing List References: <27a993d5-c456-4add-8893-3e86af747ab1@twisted.org.uk> <97fa5fe2037829e34e51d7132e627c65@bsdforge.com> Content-Language: en-GB From: Pete French In-Reply-To: <97fa5fe2037829e34e51d7132e627c65@bsdforge.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-spamc-toybox: true X-transport-toybox: lookuphost X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:12290, ipnet:178.250.72.0/21, country:GB] X-Rspamd-Queue-Id: 4Wxmdt1vWFz4LQD On 01/09/2024 09:32, Chris wrote: > times those messages show up in messages. Crank up verbosity in logs. > Lastly; you might > be able to better ferret some additional clues in sysctl.conf(5) by > tweaking the > net.inet.tcp.log_in_vain setting; from tcp(4): > > log_in_vain >     Log any connection attempts to ports where there >     is  no  socket accepting connections.  The value >     of 1 limits the logging to SYN  (connection >     establishment) packets only.  A value of 2 results >     in any TCP packets to closed ports being logged. >     Any  value not listed above disables the logging >     (default is 0, i.e., the logging is disabled). Ahhhhh.... thankyou for this! This is exactly what I needed. And it turns out that what I see is a lot of this... Sep 1 22:15:05.982 turpentine kernel: TCP: [127.0.0.1]:24224 to [127.0.0.1]:36784 tcpflags 0x12; tcp_input_with_port: Connection attempt to closed port Sep 1 22:15:06.393 turpentine kernel: TCP: [127.0.0.1]:24224 to [127.0.0.1]:54024 tcpflags 0x12; tcp_input_with_port: Connection attempt to closed port Sep 1 22:15:06.595 turpentine kernel: TCP: [127.0.0.1]:24224 to [127.0.0.1]:30857 tcpflags 0x12; tcp_input_with_port: Connection attempt to closed port Sep 1 22:15:07.198 turpentine kernel: TCP: [127.0.0.1]:24224 to [127.0.0.1]:34060 tcpflags 0x12; tcp_input_with_port: Connection attempt to closed port Sep 1 22:15:07.650 turpentine kernel: TCP: [127.0.0.1]:24224 to [127.0.0.1]:13537 tcpflags 0x12; tcp_input_with_port: Connection attempt to closed port Sep 1 22:15:07.851 turpentine kernel: TCP: [127.0.0.1]:24224 to [127.0.0.1]:31788 tcpflags 0x12; tcp_input_with_port: Connection attempt to closed port Sep 1 22:15:09.506 turpentine kernel: TCP: [127.0.0.1]:24224 to [127.0.0.1]:53517 tcpflags 0x12; tcp_input_with_port: Connection attempt to closed port Which is the SYN/ACK for a connection to 24224 - the fluentd on the local host. I have a good idea whats causing this too. My libraries will, if they find a hostname resolves to multiple IP addresses, try to connect to all of them, preferring IPv6, and uses the first one which gets accepted, and closes the others. A connection to 'localhost' will resolve to ::1 and 127.0.0.1, and I bet ::1 works first, so my side closes 127.0.0.1, which the explains the above. So, give that, these are therefore happening all the time. Which implies that the fact the only get rate limited at certain points, corresponding to connection difficulties, indicates its to do with load on the machines. Someone is hammering mt webserver at those times. I can go find out who that is now I think. Thanks to all who replied BTW, this has been really useful! I did also wonder if it was a port scan - but all of these machines are runnign pf and only alowing 443 in, as well as being behind a firewall+nat at the edge that only forwards 443, so nothing should be able to scan them. -pete.