From owner-freebsd-stable@freebsd.org Wed Feb 15 15:18:01 2017 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id BE8A4CE03C9 for ; Wed, 15 Feb 2017 15:18:01 +0000 (UTC) (envelope-from vangyzen@FreeBSD.org) Received: from smtp.vangyzen.net (hotblack.vangyzen.net [IPv6:2607:fc50:1000:7400:216:3eff:fe72:314f]) by mx1.freebsd.org (Postfix) with ESMTP id A906B1EBF for ; Wed, 15 Feb 2017 15:18:01 +0000 (UTC) (envelope-from vangyzen@FreeBSD.org) Received: from ford.home.vangyzen.net (unknown [76.164.15.242]) by smtp.vangyzen.net (Postfix) with ESMTPSA id E4067564DF; Wed, 15 Feb 2017 09:18:00 -0600 (CST) Subject: Re: net.inet.udp.log_in_vain strange syslog reports To: Mark Martinec , freebsd-stable@freebsd.org References: <76681a24b7935674585b5ac585f4575c@ijs.si> <667fa3e1dd8e7cebbf4566467a7987bf@ijs.si> <7dca33f9-e817-7d79-bddd-332e745a1c05@FreeBSD.org> <318110819f687c06e6d412955bbac6b1@ijs.si> From: Eric van Gyzen Message-ID: <57f7fe65-c854-c52d-ce33-3a2a919d0ce9@FreeBSD.org> Date: Wed, 15 Feb 2017 09:17:54 -0600 User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:45.0) Gecko/20100101 Thunderbird/45.6.0 MIME-Version: 1.0 In-Reply-To: <318110819f687c06e6d412955bbac6b1@ijs.si> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Feb 2017 15:18:01 -0000 On 02/15/2017 08:56, Mark Martinec wrote: > In a similar vein, I noticed also the following in our logs, > with net.inet.tcp.log_in_vain=1. > > Looks like messages got concatenated somehow: > > Jan 25 01:37:53 mildred kernel: TCP: [2607:ff10:c5:509a::10]:26459 to > [2001:1470:ff80::80:16]:4911 tcpflags 0x2; tcp_input: Connection attempt to > closed TCP: [2607:ff10:c5:509a::10]:14898 to [2001:1470:ff80::80:16]:5222 > tcpflags 0x2; tcp_input: Connection attempt to closed port The length of the truncated "TCP:...closed" message is just under 128, which is the PRINTF_BUFR_SIZE as defined in sys/amd64/conf/GENERIC. You could try increasing this value and rebuilding your kernel to see if that fixes the truncation. Don't increase it very much, since it's used to declare a buffer on the stack, and stack space is quite limited. For this case, 180 should be enough. Eric