From owner-freebsd-net@FreeBSD.ORG Tue Sep 30 10:21:07 2014 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id AA52CE65; Tue, 30 Sep 2014 10:21:07 +0000 (UTC) Received: from mail-wi0-x235.google.com (mail-wi0-x235.google.com [IPv6:2a00:1450:400c:c05::235]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 1BBDAEA; Tue, 30 Sep 2014 10:21:06 +0000 (UTC) Received: by mail-wi0-f181.google.com with SMTP id n3so4019267wiv.8 for ; Tue, 30 Sep 2014 03:21:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=hFARJahobUKFOgLnhR4/76ypxolUjHInGg9lPhO3vLk=; b=jl/ZG3vMgehxYZNb/1guYGxaWIakxoYgLNhgQk0n3P8Ohk2ViBmBqa/Cc3zZhOx3O2 mrkpICwemUDUMvtJ7+xFQb3krUfj5j0cJjssYYBWkmPOUPf/reyB62vogRL0/df58R/W 0a+vgdodBfW5YnfFyHgHWkciyPj7uZnpoH+ukLBAp0OYqYxor5vur2TjddnBZtrBQDeO mNN2LnI8SkwIQHV1jvWaholeXp7r4F/s1ZTtrXXZDLltFWw949y4657Xo7HToKp+DcD1 EamN94tPvkzuy3M/NrOYHi46FhmpYyJt/4D1xIOI/f1XwXGjByIBWg6O9j/QkWndCv6M RrmQ== X-Received: by 10.194.184.111 with SMTP id et15mr32369453wjc.14.1412072465393; Tue, 30 Sep 2014 03:21:05 -0700 (PDT) Received: from [192.168.2.30] ([2.176.158.152]) by mx.google.com with ESMTPSA id a2sm9180871wic.19.2014.09.30.03.21.03 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 30 Sep 2014 03:21:04 -0700 (PDT) Message-ID: <542A8411.1060608@gmail.com> Date: Tue, 30 Sep 2014 13:51:05 +0330 From: Hooman Fazaeli User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130215 Thunderbird/17.0.3 MIME-Version: 1.0 To: Andrea Venturoli Subject: Re: pf stuck References: <542997C3.5090004@netfence.it> <5429C424.9060400@netfence.it> In-Reply-To: <5429C424.9060400@netfence.it> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Cc: freebsd-net , "freebsd-pf@freebsd.org" X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Sep 2014 10:21:07 -0000 On 9/30/2014 12:12 AM, Andrea Venturoli wrote: > On 09/29/14 20:21, Ermal Luçi wrote: >> Probably is better you ask this on freebsd-pf@. > > Thanks, I see you have already cc:ed it. > > > >> Though this sounds like state limit reached. > > Can this happen even if all my pf rules have "no state"? No. Anyway, you can check state statistics with: pfctl -s i ; pfctl -s m -- Best regards. Hooman Fazaeli