From owner-freebsd-net@FreeBSD.ORG  Wed Mar  6 08:45:27 2013
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.FreeBSD.org [8.8.178.115])
 by hub.freebsd.org (Postfix) with ESMTP id 5C7D311C;
 Wed,  6 Mar 2013 08:45:27 +0000 (UTC)
 (envelope-from krzysiek@airnet.opole.pl)
Received: from base.airnet.opole.pl (ns2.airmax.pl [176.111.128.3])
 by mx1.freebsd.org (Postfix) with ESMTP id 1AE26A53;
 Wed,  6 Mar 2013 08:45:25 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by base.airnet.opole.pl (Postfix) with ESMTP id 036B87FF059;
 Wed,  6 Mar 2013 09:38:47 +0100 (CET)
Received: from base.airnet.opole.pl ([127.0.0.1])
 by localhost (mail.airnet.opole.pl [127.0.0.1]) (maiad, port 10024)
 with ESMTP id 66913-06; Wed,  6 Mar 2013 09:38:46 +0100 (CET)
Received: from [10.10.11.223] (unknown [176.111.138.12])
 (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits))
 (No client certificate requested)
 (Authenticated sender: krzysiek@airnet.opole.pl)
 by base.airnet.opole.pl (Postfix) with ESMTPSA id 1C8E87FF04D;
 Wed,  6 Mar 2013 09:38:44 +0100 (CET)
Message-ID: <51370093.40009@airnet.opole.pl>
Date: Wed, 06 Mar 2013 09:38:43 +0100
From: Krzysztof Barcikowski <krzysiek@airnet.opole.pl>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64;
 rv:17.0) Gecko/20130215 Thunderbird/17.0.3
MIME-Version: 1.0
To: Andre Oppermann <andre@freebsd.org>
Subject: Re: Default route changes unexpectedly
References: <CAKOb=YYGu6mr-3nyydBi9K-FHPnEx-fKSZ2=r_uDVeY9pvrqtQ@mail.gmail.com>
 <5136FD71.6000408@freebsd.org>
In-Reply-To: <5136FD71.6000408@freebsd.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 06 Mar 2013 08:45:27 -0000

W dniu 2013-03-06 09:25, Andre Oppermann pisze:
> Can you describe your traffic forwarding setup in more detail?
> Is it only pf, or do you run netgraph, or other things as well?
> Do you use flow routing?
>
> How frequent does this happen?
>
> I'm trying to create a stack graph to see which parts of the network
> stack are involved in handling your packet.
>

Hi,
In my case, I do use PF for filtering and NAT (without routing options 
like 'route-to' or 'reply-to') together with ALTQ (PRIQ).
I also use IPFW+Dummynet combo for shaping.

net.inet.ip.sourceroute: 0
net.inet.ip.accept_sourceroute: 0

Router traffic is about 300Mb/s in peak.

Frequency:
Wed Oct 3 14:19:15 CEST 2012
Thu Dec 13 04:39:43 CET 2012
Thu Dec 13 04:39:46 CET 2012
Thu Dec 13 04:39:47 CET 2012
Thu Dec 13 04:39:50 CET 2012
Thu Dec 13 04:39:53 CET 2012
Thu Dec 13 04:39:59 CET 2012
Thu Dec 13 04:40:11 CET 2012
Fri Jan 4 07:47:00 CET 2013
Mon Jan 28 18:35:43 CET 2013
Sat Feb 2 22:43:01 CET 2013

I do only monitor default route change, but this bug also affects static 
routes (i.e. I have one static route and it changes more frequently that 
default route).

Please let me know if I can provide any more feedback.

Krzysiek