Date: Thu, 16 Sep 2004 03:55:58 -0000 From: "Florian C. Smeets" <flo@kasimir.com> To: pf4freebsd@freelists.org Subject: [pf4freebsd] Re: nfsd send error 1 probably caused by pf ? Message-ID: <3FB2B5AB.50601@kasimir.com> In-Reply-To: <3FB2B203.1030704@kasimir.com> References: <3FB2ACA6.7030302@kasimir.com> <20031112220709.GO17343@insomnia.benzedrine.cx> <3FB2B203.1030704@kasimir.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Florian C. Smeets wrote: > Daniel Hartmeier wrote: > > >>If that doesn't solve it, add 'log' to all block rules and watch pflog >>for blocked packets. Enable debug logging (pfctl -xm) and watch >>/var/log/messages for pf related messages. Do you see fragment >>reassembly there? > I get a lot of these BAD state messages with debug leve misc: Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 172.30.1.1:2049 172.30.1.2:1021 [lo=2879006265 high=2879023465 win=16588 modulator=0] [lo=1139973024 high=1139974122 win=17200 modulator=0] 4:4 A seq=1139974472 ack=2879006265 len=1448 ackskew=0 pkts=406886:392362 dir=in,rev Nov 12 23:32:25 bender kernel: pf: State failure on: 1 | Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 172.30.1.1:2049 172.30.1.2:1021 [lo=2879006265 high=2879023465 win=16588 modulator=0] [lo=1139974472 high=1139974846 win=17200 modulator=0] 4:4 A seq=1139974472 ack=2879006265 len=1448 ackskew=0 pkts=406889:392365 dir=in,rev Nov 12 23:32:25 bender kernel: pf: State failure on: 1 | Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369 win=16588 modulator=0] [lo=1140040480 high=1140041578 win=17200 modulator=0] 4:4 A seq=1140040480 ack=2879074169 len=1448 ackskew=0 pkts=406979:392451 dir=in,rev Nov 12 23:32:27 bender kernel: pf: State failure on: 1 | Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369 win=16588 modulator=0] [lo=1140040480 high=1140041578 win=17200 modulator=0] 4:4 A seq=1140041928 ack=2879074169 len=1448 ackskew=0 pkts=406979:392451 dir=in,rev Nov 12 23:32:27 bender kernel: pf: State failure on: 1 | Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369 win=16588 modulator=0] [lo=1140041928 high=1140042302 win=17200 modulator=0] 4:4 A seq=1140041928 ack=2879074169 len=1448 ackskew=0 pkts=406982:392454 dir=in,rev Nov 12 23:32:27 bender kernel: pf: State failure on: 1 | Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273 win=16588 modulator=0] [lo=1140107936 high=1140109034 win=17200 modulator=0] 4:4 A seq=1140107936 ack=2879142073 len=1448 ackskew=0 pkts=407072:392539 dir=in,rev Nov 12 23:32:30 bender kernel: pf: State failure on: 1 | Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273 win=16588 modulator=0] [lo=1140107936 high=1140109034 win=17200 modulator=0] 4:4 A seq=1140109384 ack=2879142073 len=1448 ackskew=0 pkts=407072:392539 dir=in,rev Nov 12 23:32:30 bender kernel: pf: State failure on: 1 | Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049 172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273 win=16588 modulator=0] [lo=1140109384 high=1140109758 win=17200 modulator=0] 4:4 A seq=1140109384 ack=2879142073 len=1448 ackskew=0 pkts=407075:392542 dir=in,rev Nov 12 23:32:30 bender kernel: pf: State failure on: 1 | Regards, flo
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3FB2B5AB.50601>