From owner-freebsd-pf@FreeBSD.ORG Tue Aug 28 04:14:09 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3D01F16A417 for ; Tue, 28 Aug 2007 04:14:09 +0000 (UTC) (envelope-from bill.marquette@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.189]) by mx1.freebsd.org (Postfix) with ESMTP id B0F5D13C457 for ; Tue, 28 Aug 2007 04:14:08 +0000 (UTC) (envelope-from bill.marquette@gmail.com) Received: by nf-out-0910.google.com with SMTP id b2so1370972nfb for ; Mon, 27 Aug 2007 21:14:07 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=nHmptyqIBpgNeC1kEAPcR1JBaCFrZ8ko13Ms446D2+ES+7Hct+tnek/DOA5b/4C96/LjDTX5xAGzfqIajQ0282sERCCV88lJT7Eao2zjVNN1dVPgo6p5Kv/Q3QJOA6LK3KcDoOlEW6yjbLO22EQJPk5Lj0xmwiXG+c208jtA7XU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=pkOYReLEUs/QhK3CNxT+NeIsJ1znjen1G9jnciHJQj59LVvV9F/rEf8QeQsZHgwA5JvWCTBA8keGuqT8FytqeTqytccQ8nATNU5PDx3Fwa70dQS41WBY6pBJ2tsoMq8SVjoHc0oZJetyfxWbLICt+rziLj+SSmn9CVx8x+L4FLw= Received: by 10.78.200.3 with SMTP id x3mr4507474huf.1188274446265; Mon, 27 Aug 2007 21:14:06 -0700 (PDT) Received: by 10.78.15.17 with HTTP; Mon, 27 Aug 2007 21:14:06 -0700 (PDT) Message-ID: <55e8a96c0708272114n42c0d9e7h675d1a9043bf3d80@mail.gmail.com> Date: Mon, 27 Aug 2007 23:14:06 -0500 From: "Bill Marquette" To: "Max Laier" In-Reply-To: <200708280223.27279.max@love2party.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <55e8a96c0708221242h2d5e7d15q847e6fac7cf60554@mail.gmail.com> <200708230006.32294.max@love2party.net> <55e8a96c0708271710n82428eet8c714b9e8d30a3aa@mail.gmail.com> <200708280223.27279.max@love2party.net> Cc: freebsd-pf@freebsd.org Subject: Re: pfsync errors X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2007 04:14:09 -0000 On 8/27/07, Max Laier wrote: > On Tuesday 28 August 2007, Bill Marquette wrote: > > On 8/22/07, Max Laier wrote: > > > There are two reasons why we increase the send error counter. Either > > > the internal deferred work queue is full or ip_output fails. Could > > > you locate "pfsyncstats.pfsyncs_oerrors++" in your source code and > > > replace either occurrence with a printf(). Maybe use the attached. > > > This way we will know what exactly fails and if it is ip_output, why. > > > > Here's what we get with the patch: > > pfsync_senddef: ip_output 64 > > that's EHOSTDOWN ... that's strange. Are you using syncpeer? I'll double check this, but with the reboot this box shouldn't be. I had configured them to use syncpeer during troubleshooting (we'd had issues prior to setting this). > But since the send error still increases it seems as if the internal queue > is overflowing, too. This is something that must be fixed as well, but I > think the EHOSTDOWN from ip_output is more serious. OK, I'll spend some more time on this in the morning and confirm all our settings. It's most interesting to me that those stats came from the secondary unit, not the primary (which isn't quite as easy to take down - even more so with our state tables not quite in sync). --Bill