From owner-freebsd-pf@FreeBSD.ORG Thu Sep 16 03:56:18 2004 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: by hub.freebsd.org (Postfix, from userid 674) id D285516A58E; Thu, 16 Sep 2004 03:56:18 +0000 (GMT) Delivered-To: mlaier@vampire.homelinux.org Received: (qmail 39960 invoked by uid 1005); 13 Nov 2003 21:06:05 -0000 Delivered-To: max@vampire.homelinux.org Received: (qmail 39957 invoked from network); 13 Nov 2003 21:06:05 -0000 Received: from moutng.kundenserver.de (212.227.126.183) by pd9530b6c.dip.t-dialin.net with SMTP; 13 Nov 2003 21:06:05 -0000 Received: from [212.227.126.139] (helo=mxng12.kundenserver.de) by moutng.kundenserver.de with esmtp (Exim 3.35 #1) id 1AKOcH-0002t9-00 for max@vampire.homelinux.org; Thu, 13 Nov 2003 22:03:01 +0100 Received: from [206.53.239.180] (helo=turing.freelists.org) by mxng12.kundenserver.de with esmtp (Exim 3.35 #1) id 1AKOcE-0001OX-00 for max@love2party.net; Thu, 13 Nov 2003 22:03:00 +0100 Received: from turing (localhost [127.0.0.1])ESMTP id C46EF393CE7; Thu, 13 Nov 2003 15:39:07 -0500 (EST) Received: with ECARTIS (v1.0.0; list pf4freebsd); Thu, 13 Nov 2003 15:38:58 -0500 (EST) X-Original-To: pf4freebsd@freelists.org Delivered-To: pf4freebsd@freelists.org Received: from kundenserver16.yws-admin.de (kundenserver16.yws-admin.de [217.115.154.106])ESMTP id 918FD391745 for ; Thu, 13 Nov 2003 15:26:54 -0500 (EST) Received: from kasimir.com (pD9E1D729.dip.t-dialin.net [217.225.215.41]) by kundenserver16.yws-admin.de (Postfix) with ESMTP id BD4C0352587 for ; Thu, 13 Nov 2003 21:38:18 +0100 (CET) Message-ID: <3FB3EBBA.5070405@kasimir.com> From: "Florian C. Smeets" User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.5) Gecko/20031021 Thunderbird/0.3 X-Accept-Language: en-us, en MIME-Version: 1.0 To: pf4freebsd@freelists.org References: <3FB2ACA6.7030302@kasimir.com> <20031112220709.GO17343@insomnia.benzedrine.cx> <3FB2B203.1030704@kasimir.com> <3FB2B5AB.50601@kasimir.com> <20031113163911.GR17343@insomnia.benzedrine.cx> In-Reply-To: <20031113163911.GR17343@insomnia.benzedrine.cx> Content-type: text/plain; charset=us-ascii X-archive-position: 215 X-ecartis-version: Ecartis v1.0.0 Sender: pf4freebsd-bounce@freelists.org Errors-To: pf4freebsd-bounce@freelists.org X-original-sender: flo@kasimir.com Precedence: normal X-list: pf4freebsd Content-Transfer-Encoding: quoted-printable X-Provags-Forward: ad1e83286d02b5e55817d47b0d69ba84 X-UID: 331 X-Length: 3752 X-Mailman-Approved-At: Thu, 16 Sep 2004 03:59:49 +0000 Subject: [pf4freebsd] Re: nfsd send error 1 probably caused by pf ? X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.1 Reply-To: pf4freebsd@freelists.org List-Id: Technical discussion and general questions about packet filter (pf) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Date: Thu, 16 Sep 2004 03:56:19 -0000 X-Original-Date: Thu, 13 Nov 2003 21:38:18 +0100 X-List-Received-Date: Thu, 16 Sep 2004 03:56:19 -0000 Daniel Hartmeier wrote: > On Wed, Nov 12, 2003 at 11:35:23PM +0100, Florian C. Smeets wrote: >=20 >=20 >>I get a lot of these BAD state messages with debug leve misc: >> >>Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 >>172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879006265 high=3D2879023465=20 >>win=3D16588 modulator=3D0] [lo=3D1139973024 high=3D1139974122 win=3D172= 00=20 >>modulator=3D0] 4:4 A >> seq=3D1139974472 ack=3D2879006265 len=3D1448 ackskew=3D0 pkts=3D40688= 6:392362=20 >>dir=3Din,rev >=20 >=20 > To prove this theory, you'd need a tcpdump -nvvvS of the entire > connection (or at least a couple of packets before the first BAD state > message). The connection doesn't use window scaling, so either the peer > is at fault or pf saw a packet reducing your window size which got lost > before the peer saw it. How regularly does this occur? >=20 I'm going to test this in the weekend. I don't have much time at the mome= nt. If i get the time i'm going to try to reproduce this at work tomorrow. Thanks alot for your help, flo