From owner-freebsd-questions Tue May 8 12:13: 2 2001 Delivered-To: freebsd-questions@freebsd.org Received: from silver.teardrop.org (silver.teardrop.org [205.181.101.128]) by hub.freebsd.org (Postfix) with ESMTP id 5123337B422 for ; Tue, 8 May 2001 12:13:00 -0700 (PDT) (envelope-from snow@teardrop.org) Received: (from snow@localhost) by silver.teardrop.org (8.11.3/8.11.1) id f48JCxR61395 for freebsd-questions@freebsd.org; Tue, 8 May 2001 15:12:59 -0400 (EDT) (envelope-from snow@teardrop.org) Date: Tue, 8 May 2001 15:12:59 -0400 From: James Snow To: freebsd-questions@freebsd.org Subject: ipfw issues with large packet counts? Message-ID: <20010508151240.C60585@teardrop.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Does this ring any bells for anyone? I have a 4.2-S box running in transparent bridging mode (options BRIDGE and options IPSTEALTH). This has worked marvelously for the last 65 days. Today, however, we began to get complaints that our website was loading very slowly. We poked and prodded and were able to reproduce this via lynx, w3m and telnet on remote shells. A simple 'GET /' did indeed seem to hang or just plain die without returning any data. But from our workstations inside the firewall, things seemed peachy. On a whim, I reset the counters in ipfw and the problem ceased. Customers were happy again and I was more puzzled than ever. Are there any known issues with large (101859482388, AKA one hundred one billion, eight hundred fifty-nine million, four hundred eighty-two thousand, three hundred eighty-eight) packet counts in ipfw? Any input would be appreciated. Thanks in advance, -Snow To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message