From owner-freebsd-pf@FreeBSD.ORG Sat Jun 16 13:25:37 2007 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id C5C7616A46D for ; Sat, 16 Jun 2007 13:25:37 +0000 (UTC) (envelope-from rmiranda@digitalrelay.ca) Received: from pd7mo2no.prod.shaw.ca (idcmail-mo2no.cg.shawcable.net [64.59.134.9]) by mx1.freebsd.org (Postfix) with ESMTP id A3D5F13C45B for ; Sat, 16 Jun 2007 13:25:37 +0000 (UTC) (envelope-from rmiranda@digitalrelay.ca) Received: from pd7mr2no.prod.shaw.ca (pd7mr2no-qfe3.prod.shaw.ca [10.0.144.129]) by l-daemon (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0JJQ00KDNDAQW980@l-daemon> for freebsd-pf@freebsd.org; Sat, 16 Jun 2007 07:25:38 -0600 (MDT) Received: from pn7ml3no.prod.shaw.ca ([10.0.149.112]) by pd7mr2no.prod.shaw.ca (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0JJQ00IS1DAP3350@pd7mr2no.prod.shaw.ca> for freebsd-pf@freebsd.org; Sat, 16 Jun 2007 07:25:38 -0600 (MDT) Received: from [192.168.200.107] ([24.76.253.150]) by l-daemon (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0JJQ00034DANFD90@l-daemon> for freebsd-pf@freebsd.org; Sat, 16 Jun 2007 07:25:37 -0600 (MDT) Date: Sat, 16 Jun 2007 08:26:15 -0500 From: Roger Miranda In-reply-to: <46715C7F.4060602@vwsoft.com> To: volker@vwsoft.com Message-id: <200706160826.16372.rmiranda@digitalrelay.ca> Organization: Digital Relay Inc. MIME-version: 1.0 Content-type: text/plain; charset=iso-8859-1 Content-transfer-encoding: 7bit Content-disposition: inline References: <200706140833.50583.rmiranda@digitalrelay.ca> <200706140921.53115.rmiranda@digitalrelay.ca> <46715C7F.4060602@vwsoft.com> User-Agent: KMail/1.9.4 Cc: freebsd-pf@freebsd.org Subject: Re: PF error message looping on screen. System Locked. X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Jun 2007 13:25:37 -0000 On Thursday 14 June 2007 10:19, Volker wrote: > [re-added cc:pf to have a wider audience, please keep this] > > On 06/14/07 16:21, Roger Miranda wrote: > >> I remember a discussion about your machine in stable@ some time ago. > > > > Yes. I have come a bit further. Generally I would get nothing on the > > screen. I just started getting this. > > > >>> We have transfered 150GB (+/-) > >> > >> Using sftp, ftp, http or ...? > > > > http / NFS / SMB > > > >> Are you by any chance being able to get a photopicture (with fast > >> shutter time) of the debug messages? Do you have anything in > >> /var/log/debug.log /var/log/messages which might be useful? > > > > I do not have nothing with that fast of a shutter. I looked in the logs > > the message the loops is not there. But I did find the follwoing: > > > > Jun 13 10:22:32 kernel: pf: dropping packet with ip options > > Jun 13 10:22:33 last message repeated 5 times > > Roger, > > I don't think this message is related to your trouble. I think you can > also avoid these messages by adding 'no scrub' to your pf.conf (I'm > currently not aware of any side effects by adding this). > > Probably Max has some more suggestions on not scrubbing packets. > > You should get a debugger into your kernel (like Max suggested) and > probably also use `pfctl -x loud' or `pfctl -x misc' to get more > messages out of pf. If these messages are popping up again, break the > system into the debugger and look for the messages (using 'scroll > lock' to scroll back some pages), ps and a backtrace. > > HTH > > Volker Alright, I have encoutered the loop messages again today. I have debug set to loud and "no scrub" is in pf.conf. I managed to get a 5 sec. video of the loop. Get it at: http://64.201.181.165:82/pfloop.avi Any help would be appreciated. Roger