From owner-freebsd-ipfw@FreeBSD.ORG Fri Mar 14 18:16:11 2008 Return-Path: Delivered-To: freebsd-ipfw@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 874B6106566B for ; Fri, 14 Mar 2008 18:16:11 +0000 (UTC) (envelope-from oleg@lath.rinet.ru) Received: from lath.rinet.ru (lath.rinet.ru [195.54.192.90]) by mx1.freebsd.org (Postfix) with ESMTP id F24268FC2D for ; Fri, 14 Mar 2008 18:16:09 +0000 (UTC) (envelope-from oleg@lath.rinet.ru) Received: from lath.rinet.ru (localhost [127.0.0.1]) by lath.rinet.ru (8.14.2/8.14.2) with ESMTP id m2EHwZ8B062727 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 14 Mar 2008 20:58:35 +0300 (MSK) (envelope-from oleg@lath.rinet.ru) Received: (from oleg@localhost) by lath.rinet.ru (8.14.2/8.14.2/Submit) id m2EHwZBP062726; Fri, 14 Mar 2008 20:58:35 +0300 (MSK) (envelope-from oleg) Date: Fri, 14 Mar 2008 20:58:35 +0300 From: Oleg Bulyzhin To: "Vladimir V. Kobal" Message-ID: <20080314175835.GA62177@lath.rinet.ru> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.15 (2007-04-06) Cc: freebsd-ipfw@freebsd.org Subject: Re: Dummynet causes kernel trap and system freeze X-BeenThere: freebsd-ipfw@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: IPFW Technical Discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 14 Mar 2008 18:16:11 -0000 On Fri, Mar 14, 2008 at 12:48:43PM +0200, Vladimir V. Kobal wrote: > The system is PPTP NAS (mpd5) with NAT (ng_nat), firewall (ipfw2) and > shaping (dummynet). FreeBSD 7.0-RELEASE, Quad-Core AMD Phenom, AMD 690V > chipset, two em interfaces (EXPI9400PT 82572GI). On high load there are > about 500 simultaneous PPTP users snd 50Mbps/15Mbps of downlink/uplink > traffic going through. > > Kernel is patched against rtfree problem. We've replaced rtfree to > RTFREE_LOCKED at > net/route.c > netinet/if_ether.c > > Sometimes immediately after boot, sometimes after 10 hours of work, we get a > kernel trap because of the page fault and system freeze. The first few > seconds or minutes after the trap there is a possibility to Scroll Lock and > go through debug console. Then the system hangs totally and can be rebooted > only by hardware reset. The current process on kernel trap is always > dummynet. > > Rarely we get a series of four sequential kernel traps and automatic > reboots. > > Today the following happened: the dummynet pipes just stoped working but > other traffic flows worked well and the system console had been freezed. > > Without a load the system runs for days. > > We've tryed to: > apply patch-2 from kern/113548 > apply patch-3 from kern/113548 > change NICs to bge, mks, rl > change processor to Dual-Core AMD 64 x2 > use motherboard with Nvidia chipset > > We always get the same symptoms. > > Backtrace and appropriate dummynet source file are attached. > > We have in production the same system on FreeBSD 6.1-RELEASE. We have never > had traps on it, but the load on it wasn't more than 400 PPTP users and > 30Mbps/10Mbps because of lack of CPU resources. > > The problem looks rather like mentioned in kern/118128, kern/113548, > kern/106534 but there are no working solutions. Could someone help to solve > the problem with dummynet? > > Best regards, > Vladimir Kobal > [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"] > GNU gdb 6.1.1 [FreeBSD] > Copyright 2004 Free Software Foundation, Inc. > GDB is free software, covered by the GNU General Public License, and you are > welcome to change it and/or distribute copies of it under certain conditions. > Type "show copying" to see the conditions. > There is absolutely no warranty for GDB. Type "show warranty" for details. > This GDB was configured as "amd64-marcel-freebsd". > > Unread portion of the kernel message buffer: > Copyright (c) 1992-2008 The FreeBSD Project. > Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 > The Regents of the University of California. All rights reserved. > FreeBSD is a registered trademark of The FreeBSD Foundation. > FreeBSD 7.0-RELEASE #12: Thu Mar 13 12:27:02 EET 2008 > natalie@firewall.prokk.net:/usr/src/sys/amd64/compile/FIREWALL > Timecounter "i8254" frequency 1193182 Hz quality 0 > CPU: AMD Phenom(tm) 9600 Quad-Core Processor (2305.24-MHz K8-class CPU) > Origin = "AuthenticAMD" Id = 0x100f22 Stepping = 2 > Features=0x178bfbff > Features2=0x802009> > AMD Features=0xee500800,RDTSCP,LM,3DNow!+,3DNow!> > AMD Features2=0x7ff,,,Prefetch,,> > Cores per package: 4 > usable memory = 2105335808 (2007 MB) > avail memory = 2031869952 (1937 MB) > ACPI APIC Table: > FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs > cpu0 (BSP): APIC ID: 0 > cpu1 (AP): APIC ID: 1 > cpu2 (AP): APIC ID: 2 > cpu3 (AP): APIC ID: 3 > ioapic0: Changing APIC ID to 2 > ioapic0 irqs 0-23 on motherboard > kbd1 at kbdmux0 > acpi0: on motherboard > acpi0: [ITHREAD] > acpi0: Power Button (fixed) > acpi0: reservation of 0, a0000 (3) failed > acpi0: reservation of 100000, 7dde0000 (3) failed > Timecounter "ACPI-safe" frequency 3579545 Hz quality 850 > acpi_timer0: <32-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0 > acpi_hpet0: iomem 0xfed00000-0xfed003ff on acpi0 > acpi_hpet0: HPET never increments, disabling > device_attach: acpi_hpet0 attach returned 6 > cpu0: on acpi0 > cpu1: on acpi0 > cpu2: on acpi0 > cpu3: on acpi0 > acpi_button0: on acpi0 > pcib0: port 0xcf8-0xcff on acpi0 > pci0: on pcib0 > pcib1: at device 1.0 on pci0 > pci1: on pcib1 > vgapci0: port 0xce00-0xceff mem 0xfa000000-0xfbffffff,0xfdcf0000-0xfdcfffff,0xfdb00000-0xfdbfffff irq 18 at device 5.0 on pci1 > pcib2: at device 2.0 on pci0 > pci2: on pcib2 > em0: port 0xef00-0xef1f mem 0xfdae0000-0xfdafffff,0xfdac0000-0xfdadffff irq 18 at device 0.0 on pci2 > em0: Using MSI interrupt > em0: Ethernet address: 00:15:17:68:58:84 > em0: [FILTER] > pcib3: at device 4.0 on pci0 > pci3: on pcib3 > em1: port 0xdf00-0xdf1f mem 0xfdee0000-0xfdefffff,0xfdec0000-0xfdedffff irq 16 at device 0.0 on pci3 > em1: Using MSI interrupt > em1: Ethernet address: 00:15:17:67:49:49 > em1: [FILTER] > atapci0: port 0xff00-0xff07,0xfe00-0xfe03,0xfd00-0xfd07,0xfc00-0xfc03,0xfb00-0xfb0f mem 0xfe02f000-0xfe02f3ff irq 22 at device 18.0 on pci0 > atapci0: [ITHREAD] > ata2: on atapci0 > ata2: [ITHREAD] > ata3: on atapci0 > ata3: [ITHREAD] > pci0: at device 20.0 (no driver attached) > atapci1: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf900-0xf90f at device 20.1 on pci0 > ata0: on atapci1 > ata0: [ITHREAD] > isab0: at device 20.3 on pci0 > isa0: on isab0 > pcib4: at device 20.4 on pci0 > pci4: on pcib4 > re0: port 0xbe00-0xbeff mem 0xfd9ff000-0xfd9ff0ff irq 23 at device 15.0 on pci4 > miibus0: on re0 > rgephy0: PHY 1 on miibus0 > rgephy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto > re0: Ethernet address: 00:1a:4d:f6:aa:4a > re0: [FILTER] > atkbdc0: port 0x60,0x64 irq 1 on acpi0 > atkbd0: irq 1 on atkbdc0 > kbd0 at atkbd0 > atkbd0: [GIANT-LOCKED] > atkbd0: [ITHREAD] > psm0: irq 12 on atkbdc0 > psm0: [GIANT-LOCKED] > psm0: [ITHREAD] > psm0: model Generic PS/2 mouse, device ID 0 > acpi_hpet0: iomem 0xfed00000-0xfed003ff on acpi0 > acpi_hpet0: HPET never increments, disabling > device_attach: acpi_hpet0 attach returned 6 > sc0: at flags 0x100 on isa0 > sc0: VGA <16 virtual consoles, flags=0x300> > vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 > Timecounters tick every 1.000 msec > ipfw2 initialized, divert enabled, rule-based forwarding enabled, default to accept, logging limited to 100 packets/entry by default > ad4: 76318MB at ata2-master UDMA33 > SMP: AP CPU #3 Launched! > SMP: AP CPU #1 Launched! > SMP: AP CPU #2 Launched! > Trying to mount root from ufs:/dev/ad4s1a > <118>Loading configuration files. > <118>kernel dumps on /dev/ad4s1b > <118>Entropy harvesting: > <118> interrupts > <118> ethernet > <118> point_to_point > <118> kickstart > <118>. > <118>swapon: adding /dev/ad4s1b as swap device > <118>Starting file system checks: > <118>/dev/ad4s1a: FILE SYSTEM CLEAN; SKIPPING CHECKS > <118>/dev/ad4s1a: clean, 35547366 free (100502 frags, 4430858 blocks, 0.3% fragmentation) > <118>Setting hostuuid: 42c32a0e-ef7a-11dc-b498-001517685884. > <118>Setting hostid: 0x5e99e61e. > <118>Mounting local file systems: > <118>. > <118>Setting hostname: firewall.prokk.net. > <118>net.inet.ip.fastforwarding: > <118>0 > <118> -> > <118>1 > <118> > <118>lo0: flags=8049 metric 0 mtu 16384 > <118>inet 127.0.0.1 netmask 0xff000000 > <118>em0: flags=8843 metric 0 mtu 1500 > <118>options=19b > <118>ether 00:15:17:68:58:84 > <118>inet 195.16.76.6 netmask 0xfffffff8 broadcast 195.16.76.7 > <118>inet 195.16.77.2 netmask 0xfffffff0 broadcast 195.16.77.15 > <118>inet 10.100.1.1 netmask 0xfffffffc broadcast 10.100.1.3 > <118>inet 10.100.2.1 netmask 0xfffffff0 broadcast 10.100.2.15 > <118>inet 217.119.114.186 netmask 0xfffffffc broadcast 217.119.114.187 > <118>inet 195.16.77.33 netmask 0xfffffff8 broadcast 195.16.77.39 > <118>inet 10.110.1.17 netmask 0xfffffff0 broadcast 10.110.1.31 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>em1: flags=8843 metric 0 mtu 1500 > <118>options=19b > <118>ether 00:15:17:67:49:49 > <118>inet 192.168.99.1 netmask 0xffffc000 broadcast 192.168.127.255 > <118>inet 195.16.76.129 netmask 0xffffffe0 broadcast 195.16.76.159 > <118>inet 192.168.2.1 netmask 0xffffff00 broadcast 192.168.2.255 > <118>inet 192.168.4.33 netmask 0xfffffffc broadcast 192.168.4.35 > <118>inet 192.168.5.1 netmask 0xfffffff8 broadcast 192.168.5.7 > <118>inet 192.168.11.1 netmask 0xfffffff8 broadcast 192.168.11.7 > <118>inet 192.168.129.1 netmask 0xffffff00 broadcast 192.168.129.255 > <118>inet 192.168.250.1 netmask 0xfffffff8 broadcast 192.168.250.7 > <118>inet 192.168.231.1 netmask 0xffffff00 broadcast 192.168.231.255 > <118>inet 195.16.76.225 netmask 0xffffffe0 broadcast 195.16.76.255 > <118>inet 10.1.1.1 netmask 0xffffff00 broadcast 10.1.1.255 > <118>inet 195.16.76.29 netmask 0xfffffffc broadcast 195.16.76.31 > <118>inet 195.16.76.9 netmask 0xfffffff8 broadcast 195.16.76.15 > <118>inet 195.16.76.17 netmask 0xfffffffc broadcast 195.16.76.19 > <118>inet 10.2.1.1 netmask 0xfffffff0 broadcast 10.2.1.15 > <118>inet 10.2.2.1 netmask 0xffffff00 broadcast 10.2.2.255 > <118>inet 195.16.76.93 netmask 0xfffffffc broadcast 195.16.76.95 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>vlan2: flags=8843 metric 0 mtu 1500 > <118>options=3 > <118>ether 00:15:17:67:49:49 > <118>inet 192.168.11.241 netmask 0xfffffff8 broadcast 192.168.11.247 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>vlan: 2 parent interface: em1 > <118>vlan3: flags=8843 metric 0 mtu 1500 > <118>options=3 > <118>ether 00:15:17:67:49:49 > <118>inet 192.168.11.20 netmask 0xfffffff0 broadcast 192.168.11.31 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>vlan: 3 parent interface: em1 > <118>vlan4: flags=8843 metric 0 mtu 1500 > <118>options=3 > <118>ether 00:15:17:67:49:49 > <118>inet 192.168.11.249 netmask 0xfffffff8 broadcast 192.168.11.255 > <118>inet 192.168.20.1 netmask 0xffffff00 broadcast 192.168.20.255 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>vlan: 4 parent interface: em1 > <118>vlan5: flags=8843 metric 0 mtu 1500 > <118>options=3 > <118>ether 00:15:17:67:49:49 > <118>inet 192.168.19.1 netmask 0xffffff00 broadcast 192.168.19.255 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>vlan: 5 parent interface: em1 > <118>vlan6: flags=8843 metric 0 mtu 1500 > <118>options=3 > <118>ether 00:15:17:67:49:49 > <118>inet 192.168.11.33 netmask 0xffffffe0 broadcast 192.168.11.63 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>vlan: 6 parent interface: em1 > <118>vlan7: flags=8843 metric 0 mtu 1500 > <118>options=3 > <118>ether 00:15:17:67:49:49 > <118>inet 192.168.230.1 netmask 0xffffff00 broadcast 192.168.230.255 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>vlan: 7 parent interface: em1 > <118>vlan8: flags=8843 metric 0 mtu 1500 > <118>options=3 > <118>ether 00:15:17:67:49:49 > <118>inet 195.16.76.209 netmask 0xfffffff0 broadcast 195.16.76.223 > <118>inet 10.1.5.1 netmask 0xffffff00 broadcast 10.1.5.255 > <118>inet 10.2.5.1 netmask 0xffffff00 broadcast 10.2.5.255 > <118>media: Ethernet autoselect > <118>status: no carrier > <118>vlan: 8 parent interface: em1 > <118>add net default: gateway 217.119.114.185 > <118>Additional routing options: > <118> IP gateway=YES > <118> ARP proxyall=YES > <118>. > <118>Starting devd. > <118>re0: flags=8843 metric 0 mtu 1500 > <118>options=9b > <118>ether 00:1a:4d:f6:aa:4a > <118>inet 195.16.77.4 netmask 0xfffffff0 broadcast 195.16.77.15 > <118>media: Ethernet autoselect (none) > <118>status: no carrier > <118>route: > <118>writing to routing socket > <118>: > <118>File exists > <118>add net default: gateway 217.119.114.185: route already in table > <118>hw.acpi.cpu.cx_lowest: > <118>C1 > <118> -> > <118>C1 > <118> > <118>Flushed all rules. > <118>Flushed all pipes. > <118>00020 deny tcp from any 2022,2023 to any > <118>00020 deny tcp from any to any dst-port 2022,2023 > <118>00047 deny ip from 10.5.0.0/24 to any > <118>00047 deny ip from any to 10.5.0.0/24 > <118>00049 deny ip from 60.48.0.0/13 to any > <118>00049 deny ip from 60.240.195.0/24 to any > <118>00049 deny ip from 192.168.0.0/24 to any > <118>00049 deny ip from any to 169.254.0.0/16 > <118>00049 deny ip from 169.254.0.0/16 to any > <118>00050 allow ip from 195.16.77.5 to any dst-port 25 via em0 > <118>00050 allow ip from any 25 to 195.16.77.5 via em0 > <118>00050 pipe 5362 ip from any 25 to { 195.16.76.32/27 or dst-ip 195.16.76.64/30 or dst-ip 195.16.76.68/30 } > <118>00050 pipe 5367 ip from { 195.16.76.32/27 or 195.16.76.64/30 or 195.16.76.68/30 } to any dst-port 25 > <118>00050 pipe 5212 ip from any 25 to 194.60.77.0/24 > <118>00050 pipe 5217 ip from 194.60.77.0/24 to any dst-port 25 > <118>00050 allow ip from 195.16.76.208/28 to any dst-port 25 > <118>00050 allow ip from any 25 to 195.16.76.208/28 > <118>00050 allow ip from 195.16.76.86 to any dst-port 25 > <118>00050 allow ip from any 25 to 195.16.76.86 > <118>00050 pipe 5172 ip from 195.16.76.232 to any dst-port 25 > <118>00050 pipe 5177 ip from any 25 to 195.16.76.232 > <118>00050 pipe 5552 ip from 195.16.76.253 to any dst-port 25 > <118>00050 pipe 5557 ip from any 25 to 195.16.76.253 > <118>00050 pipe 5152 ip from 195.16.76.137 to any dst-port 25 > <118>00050 pipe 5157 ip from any 25 to 195.16.76.137 > <118>00050 pipe 5182 ip from 195.16.76.140 to any dst-port 25 > <118>00050 pipe 5187 ip from any 25 to 195.16.76.140 > <118>00050 pipe 5492 ip from 195.16.76.134 to any dst-port 25 > <118>00050 pipe 5497 ip from any 25 to 195.16.76.134 > <118>00050 pipe 5212 ip from 194.0.157.100 to any dst-port 25 > <118>00050 pipe 5217 ip from any 25 to 194.0.157.100 > <118>00050 pipe 5212 ip from 194.0.157.1 to any dst-port 25 > <118>00050 pipe 5217 ip from any 25 to 194.0.157.1 > <118>00050 pipe 5212 ip from 194.60.77.0/24 to any dst-port 25 > <118>00050 pipe 5217 ip from any 25 to 194.60.77.0/24 > <118>00051 deny ip from not table(1) 25 to any > <118>00051 deny ip from any to not table(1) dst-port 25 > <118>00053 allow icmp from 195.16.77.7 to any > <118>00053 allow icmp from any to 195.16.77.7 > <118>00053 allow icmp from 195.16.77.2 to any > <118>00053 allow icmp from any to 195.16.77.2 > <118>00054 allow udp from 195.16.77.0/28 to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,30001,57030 > <118>00054 allow tcp from 195.16.76.0/23 to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,30001,57030 > <118>00054 allow tcp from 192.168.0.0/16 to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,57030 > <118>00054 allow tcp from 10.0.0.0/8 to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,57030 > <118>00055 deny tcp from any to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,30001,57030 > <118>00056 allow tcp from 192.168.0.0/16 to 195.16.77.3 dst-port 20,21 > <118>00056 allow tcp from 172.16.0.0/16 to 195.16.77.3 dst-port 20,21 > <118>00056 allow tcp from 195.16.76.0/23 to 195.16.77.3 dst-port 20,21 > <118>00056 allow ip from 194.88.220.30 to 195.16.77.3 dst-port 20,21 > <118>00056 allow ip from 195.16.77.3 20,21 to 194.88.220.30 > <118>00056 deny tcp from any to 195.16.77.3 dst-port 20,21 > <118>00057 allow tcp from 192.168.0.0/16 to 195.16.77.1 dst-port 53 > <118>00057 allow udp from 192.168.0.0/16 to 195.16.77.1 dst-port 53 > <118>00057 allow tcp from 195.16.77.1 53 to 192.168.0.0/16 > <118>00057 allow udp from 195.16.77.1 53 to 192.168.0.0/16 > <118>00058 allow udp from 195.16.77.0/28 to me dst-port 5005 > <118>00059 deny udp from any to me dst-port 5005 > <118>00062 count ip from 195.16.76.208/30 to any > <118>00063 count ip from any to 195.16.76.208/30 > <118>00065 allow ip from 10.100.2.0/24 to 195.16.77.0/28 > <118>00065 allow ip from 195.16.77.0/28 to 10.100.2.0/24 > <118>00065 allow ip from 10.100.2.0/24 to me > <118>00065 allow ip from me to 10.100.2.0/24 > <118>00065 allow ip from 10.2.5.0/24 to 195.16.77.0/28 > <118>00065 allow ip from 195.16.77.0/28 to 10.2.5.0/24 > <118>00066 allow ip from 195.16.77.7 69 to 192.168.230.0/24 > <118>00066 allow ip from 192.168.230.0/24 to 195.16.77.7 dst-port 69 > <118>00075 allow tcp from 195.16.76.212 to 195.16.77.7 dst-port 3389 > <118>00075 allow tcp from 195.16.77.7 3389 to 195.16.76.212 > <118>00076 allow tcp from 192.168.2.65 to 195.16.77.7 dst-port 3389,137,138,139,445 > <118>00076 allow tcp from 192.168.99.65 to 195.16.77.7 dst-port 3389,137,138,139,445 > <118>00076 allow tcp from 195.16.76.152 to 195.16.77.7 dst-port 3389,137,138,139,445 > <118>00076 allow tcp from 195.16.77.7 3389,137,138,139,445 to 192.168.2.65 > <118>00076 allow tcp from 195.16.77.7 3389,137,138,139,445 to 192.168.99.65 > <118>00076 allow tcp from 195.16.77.7 3389,137,138,139,445 to 195.16.76.152 > <118>00076 allow tcp from 195.16.76.152 to 195.16.77.2 > <118>00076 allow tcp from 195.16.77.2 to 195.16.76.152 > <118>00076 allow tcp from 195.16.76.99 to 195.16.77.2 > <118>00076 allow tcp from 195.16.77.2 to 195.16.76.99 > <118>00076 allow tcp from 195.16.76.99 to 195.16.77.7 dst-port 3389,137,138,139,445 > <118>00076 allow tcp from 195.16.77.7 3389,137,138,139,445 to 195.16.76.99 > <118>00076 allow tcp from 195.234.148.238 to 195.16.77.7 > <118>00076 allow tcp from 195.16.77.7 to 195.234.148.238 > <118>00077 allow tcp from 192.168.99.235 to 195.16.77.7 dst-port 3389 > <118>00077 allow tcp from 172.16.1.235 to 195.16.77.7 dst-port 3389 > <118>00077 allow tcp from 195.16.77.7 3389 to 192.168.99.235 > <118>00077 allow tcp from 195.16.77.7 3389 to 172.16.1.235 > <118>00077 allow tcp from 192.168.97.91 to 195.16.77.7 dst-port 3389 > <118>00077 allow tcp from 172.16.3.91 to 195.16.77.7 dst-port 3389 > <118>00077 allow tcp from 192.168.96.2 to 195.16.77.7 dst-port 3389 > <118>00077 allow tcp from 195.16.77.7 3389 to 192.168.96.2 > <118>00077 allow tcp from 195.16.77.7 3389 to 192.168.97.91 > <118>00077 allow tcp from 195.16.77.7 3389 to 172.16.3.91 > <118>00077 allow tcp from 192.168.99.61 to 195.16.77.7 dst-port 3389 > <118>00077 allow tcp from 172.16.1.61 to 195.16.77.7 dst-port 3389 > <118>00077 allow tcp from 195.16.77.7 3389 to 192.168.99.61 > <118>00077 allow tcp from 195.16.77.7 3389 to 172.16.1.61 > <118>00079 allow tcp from 195.16.76.144 to 195.16.77.7 dst-port 3389 > <118>00079 allow tcp from 195.16.77.7 3389 to 195.16.76.144 > <118>00080 allow tcp from 195.16.76.145 to 195.16.77.7 dst-port 3389 > <118>00080 allow tcp from 195.16.77.7 3389 to 195.16.76.145 > <118>00080 allow tcp from 192.168.94.165 to 195.16.77.7 dst-port 3389 > <118>00080 allow tcp from 195.16.77.7 3389 to 192.168.94.165 > <118>00080 allow tcp from 192.168.92.49 to 195.16.77.7 dst-port 3389 > <118>00080 allow tcp from 195.16.77.7 3389 to 192.168.92.49 > <118>00081 allow tcp from 192.168.99.252 to 195.16.77.7 dst-port 3389 > <118>00081 allow tcp from 172.16.1.252 to 195.16.77.7 dst-port 3389 > <118>00081 allow tcp from 195.16.76.146 to 195.16.77.7 dst-port 3389 > <118>00081 allow tcp from 195.16.76.98 to 195.16.77.7 dst-port 3389 > <118>00081 allow tcp from 195.16.77.7 3389 to 192.168.99.252 > <118>00081 allow tcp from 195.16.77.7 3389 to 172.16.1.252 > <118>00081 allow tcp from 195.16.77.7 3389 to 195.16.76.146 > <118>00081 allow tcp from 195.16.77.7 3389 to 195.16.76.98 > <118>00081 allow tcp from 195.16.76.146 to 195.16.77.0/28 dst-port 22 > <118>00081 allow tcp from 192.168.99.252 to 195.16.77.0/28 dst-port 22 > <118>00081 allow tcp from 172.16.1.252 to 195.16.77.0/28 dst-port 22 > <118>00081 allow tcp from 195.16.76.98 to 195.16.77.0/28 dst-port 22 > <118>00081 allow tcp from 195.16.77.0/28 22 to 195.16.76.146 > <118>00081 allow tcp from 195.16.77.0/28 22 to 192.168.99.252 > <118>00081 allow tcp from 195.16.77.0/28 22 to 172.16.1.252 > <118>00081 allow tcp from 195.16.77.0/28 22 to 195.16.76.98 > <118>00082 allow tcp from 192.168.96.1 to 195.16.77.7 dst-port 3389 > <118>00082 allow tcp from 172.16.4.1 to 195.16.77.7 dst-port 3389 > <118>00082 allow tcp from 195.16.77.7 3389 to 192.168.96.1 > <118>00082 allow tcp from 195.16.77.7 3389 to 172.16.4.1 > <118>00082 allow tcp from 192.168.91.60 to 195.16.77.7 dst-port 3389 > <118>00082 allow tcp from 195.16.77.7 3389 to 192.168.91.60 > <118>00082 allow tcp from 172.16.9.60 to 195.16.77.7 dst-port 3389 > <118>00082 allow tcp from 195.16.77.7 3389 to 172.16.9.60 > <118>00082 allow tcp from 10.10.133.3 to 195.16.77.7 dst-port 3389 > <118>00082 allow tcp from 172.16.6.8 to 195.16.77.7 dst-port 3389 > <118>00082 allow tcp from 195.16.77.7 3389 to 10.10.133.3 > <118>00082 allow tcp from 195.16.77.7 3389 to 172.16.6.8 > <118>00083 allow tcp from 192.168.92.160 to 195.16.77.7 dst-port 3389 > <118>00083 allow tcp from 195.16.77.7 3389 to 192.168.92.160 > <118>00083 allow tcp from 172.16.8.160 to 195.16.77.7 dst-port 3389 > <118>00083 allow tcp from 195.16.77.7 3389 to 172.16.8.160 > <118>00086 allow tcp from 192.168.97.116 to 195.16.77.7 dst-port 3389 > <118>00086 allow tcp from 195.16.77.7 3389 to 192.168.97.116 > <118>00086 allow tcp from 172.16.3.116 to 195.16.77.7 dst-port 3389 > <118>00086 allow tcp from 195.16.77.7 3389 to 172.16.3.116 > <118>00087 allow tcp from 192.168.99.2 to 195.16.77.7 dst-port 3389 > <118>00087 allow tcp from 192.168.96.1 to 195.16.77.7 dst-port 3389 > <118>00087 allow tcp from 192.168.99.9 to 195.16.77.7 dst-port 3389 > <118>00087 allow tcp from 192.168.97.7 to 195.16.77.7 dst-port 3389 > <118>00087 allow tcp from 192.168.99.2 to 195.16.77.7 dst-port 3389 > <118>00087 allow tcp from 195.16.77.7 3389 to 192.168.99.9 > <118>00087 allow tcp from 195.16.77.7 3389 to 192.168.97.7 > <118>00087 allow tcp from 195.16.77.7 3389 to 192.168.99.2 > <118>00087 allow tcp from 195.16.77.7 3389 to 192.168.96.1 > <118>00088 deny tcp from any to 195.16.77.7 dst-port 3389,137,138,139,445 > <118>00088 deny udp from any to 195.16.77.7 dst-port 3389,137,138,139,445 > <118>00088 deny tcp from 195.16.77.7 3389,137,138,139,445 to any > <118>00088 deny udp from 195.16.77.7 3389,137,138,139,445 to any > <118>00088 deny udp from any 1433,1434 to not 195.16.76.34 > <118>00088 deny udp from any to not 195.16.76.34 dst-port 1433,1434 > <118>00089 allow ip from 10.0.0.0/8 to 195.16.77.0/24 > <118>00089 allow ip from 195.16.76.0/22 to 195.16.77.7 > <118>00089 allow icmp from any to 195.16.77.7 icmptypes 0 > <118>00090 pipe 7 ip from 195.16.76.0/22 to 195.16.77.7 in recv em0 > <118>00090 pipe 90 ip from any to 195.16.77.7 in recv em0 > <118>00091 count ip from 195.16.77.7 to any out via em0 > <118>00092 pipe 92 ip from 195.16.77.3 to any out via em0 > <118>00096 pipe 96 ip from 10.100.2.6 to 10.100.2.1 > <118>00096 pipe 96 ip from 10.100.2.7 to 10.100.2.1 > <118>00096 pipe 96 ip from 10.100.2.1 to 10.100.2.6 > <118>00096 pipe 96 ip from 10.100.2.1 to 10.100.2.7 > <118>00096 pipe 96 ip from 192.168.98.169 to 10.100.2.6 > <118>00096 pipe 96 ip from 192.168.98.169 to 10.100.2.7 > <118>00096 pipe 96 ip from 10.100.2.6 to 192.168.98.169 > <118>00096 pipe 96 ip from 10.100.2.7 to 192.168.98.169 > <118>00096 pipe 96 ip from 172.16.2.169 to 10.100.2.6 > <118>00096 pipe 96 ip from 172.16.2.169 to 10.100.2.7 > <118>00096 pipe 96 ip from 10.100.2.6 to 172.16.2.169 > <118>00096 pipe 96 ip from 10.100.2.7 to 172.16.2.169 > <118>00096 pipe 96 ip from 10.100.2.6 to 10.100.2.7 > <118>00096 pipe 96 ip from 10.100.2.7 to 10.100.2.6 > <118>00097 deny ip from any to 10.100.2.6 > <118>00097 deny ip from any to 10.100.2.7 > <118>00097 deny ip from 10.100.2.6 to any > <118>00097 deny ip from 10.100.2.7 to any > <118>00098 netgraph 60 ip from 192.168.200.0/24 to any out recv em0 xmit em0 > <118>00098 allow ip from any to 192.168.200.0/24 recv em0 > <118>00099 allow ip from me to 10.110.1.0/27 > <118>00100 deny ip from any to 10.0.0.0/8 out via em0 > <118>00101 deny ip from any to 172.16.0.0/16 out via em0 > <118>00102 deny ip from any to 192.168.0.0/16 out via em0 > <118>00109 allow ip from any to 195.16.77.3 > <118>00109 allow ip from 195.16.77.3 to any > <118>00120 allow tcp from 195.16.77.7 to me dst-port 22 > <118>00120 allow tcp from 195.16.77.12 to me dst-port 22 > <118>00120 allow tcp from 195.16.76.144 to me dst-port 22 > <118>00120 allow tcp from 195.16.76.99 to me dst-port 22 > <118>00120 allow tcp from 195.16.77.11 to me dst-port 22 > <118>00121 deny tcp from any to 195.16.77.0/28 dst-port 22 > <118>00123 deny ip from any to 195.16.78.0/24 > <118>00123 deny ip from any to 195.16.79.0/24 > <118>00123 deny ip from any to 195.16.77.128/25 > <118>00123 deny ip from any to 195.16.77.64/26 > <118>00123 deny ip from any to 195.16.77.48/28 > <118>00123 deny ip from any to 195.16.77.40/29 > <118>00123 deny ip from any to 195.16.77.16/28 > <118>00129 allow udp from any to any dst-port 137,138,139,445 via em1 > <118>00129 allow udp from any 137,138,139,445 to any via em1 > <118>00130 allow tcp from any to any dst-port 137,138,139,445 via em1 > <118>00130 allow tcp from any 137,138,139,445 to any via em1 > <118>00131 deny tcp from any to any dst-port 69,135,136,137,138,139,445 > <118>00131 deny udp from any to any dst-port 69,135,136,445 > <118>00131 deny tcp from any 69,135,136,137,138,139,445 to any > <118>00131 deny udp from any 69,135,136,445 to any > <118>00142 deny ip from any to 224.0.0.0/12 > <118>00143 deny ip from 224.0.0.0/12 to any > <118>00144 deny ip from any to 225.0.0.0/12 > <118>00145 deny ip from 225.0.0.0/12 to any > <118>00146 deny ip from any to 255.0.0.0/8 > <118>00147 deny ip from 255.0.0.0/8 to any > <118>00148 deny ip from any to 255.255.255.255 > <118>00149 deny ip from 255.255.255.255 to any > <118>00159 deny igmp from any to any > <118>00192 pipe 192 icmp from 195.16.77.0/28 to any > <118>00192 pipe 192 icmp from any to 195.16.77.0/28 > <118>00200 count ip from 192.168.19.0/24 to any > <118>00210 count ip from any to 192.168.19.0/24 > <118>00220 count ip from 192.168.20.0/24 to any > <118>00230 count ip from any to 192.168.20.0/24 > <118>04000 netgraph 60 ip from 172.16.0.0/18 to any out xmit em0 > <118>04010 netgraph 61 ip from any to me in via em0 > <118>04100 skipto 20000 ip from 172.16.0.0/18 to any > <118>04100 skipto 20000 ip from any to 172.16.0.0/18 > <118>64500 pipe 192 icmp from any to any via em0 > <118>65000 pipe 65000 log ip from any to 172.16.0.0/18 > <118>65050 skipto 65500 ip from any to any > <118>65100 pipe 65100 ip from any to any > <118>65101 skipto 65500 ip from any to any > <118>65110 pipe 65110 ip from any to any > <118>65111 skipto 65500 ip from any to any > <118>00196 deny ip from 192.168.64.0/18 to any via em0 > <118>00196 deny ip from any to 192.168.64.0/18 via em0 > <118>00199 deny ip from 192.168.152.0/22 to any > <118>00199 deny ip from any to 192.168.152.0/22 > <118>00202 count ip from any to 192.168.2.0/24 via em1 > <118>00521 deny udp from any 520 to 195.16.76.0/22 > <118>65530 allow ip from any to 192.168.2.0/24 via em1 > <118>65530 allow ip from 192.168.2.0/24 to any via em1 > <118>65530 allow ip from any to 192.168.3.0/24 via em1 > <118>65530 allow ip from 192.168.3.0/24 to any via em1 > <118>65530 allow ip from any to 192.168.4.0/24 via em1 > <118>65530 allow ip from 192.168.4.0/24 to any via em1 > <118>65530 allow ip from any to 192.168.5.0/29 via em1 > <118>65530 allow ip from 192.168.5.0/29 to any via em1 > <118>65530 allow ip from any to 192.168.11.0/24 via em1 > <118>65530 allow ip from 192.168.11.0/24 to any via em1 > <118>65530 allow ip from any to 192.168.129.0/24 via em1 > <118>65530 allow ip from 192.168.129.0/24 to any via em1 > <118>65530 allow ip from any to 192.168.230.0/24 via em1 > <118>65530 allow ip from 192.168.230.0/24 to any via em1 > <118>65530 allow ip from any to 192.168.231.0/24 via em1 > <118>65530 allow ip from 192.168.231.0/24 to any via em1 > <118>65530 allow ip from any to 10.1.1.0/24 via em1 > <118>65530 allow ip from 10.1.1.0/24 to any via em1 > <118>65530 allow ip from any to 192.168.13.0/24 via em1 > <118>65530 allow ip from 192.168.13.0/24 to any via em1 > <118>65531 allow ip from any to 195.16.76.0/22 via em1 > <118>65531 allow ip from 195.16.76.0/22 to any via em1 > <118>65532 allow ip from any to 195.16.77.32/29 via em1 > <118>65532 allow ip from 195.16.77.32/29 to any via em1 > <118>65533 allow ip from any to 192.168.64.0/18 via em1 > <118>65533 allow ip from 192.168.64.0/18 to any via em1 > <118>65534 deny ip from any to any via em1 > <118>15032 pipe 15032 ip from any to 192.168.2.4 via em1 > <118>15033 skipto 65100 ip from any to 192.168.2.4 via em1 > <118>15037 netgraph 60 ip from 192.168.2.4 to any out recv em1 xmit em0 > <118>15038 pipe 15037 ip from 192.168.2.4 to any via em1 > <118>15039 skipto 65110 ip from 192.168.2.4 to any via em1 > <118>15042 pipe 15042 ip from any to 192.168.2.31 via em1 > <118>15043 skipto 65100 ip from any to 192.168.2.31 via em1 > <118>15047 netgraph 60 ip from 192.168.2.31 to any out recv em1 xmit em0 > <118>15048 pipe 15047 ip from 192.168.2.31 to any via em1 > <118>15049 skipto 65110 ip from 192.168.2.31 to any via em1 > <118>15052 pipe 15052 ip from any to 192.168.2.32 via em1 > <118>15053 skipto 65100 ip from any to 192.168.2.32 via em1 > <118>15057 netgraph 60 ip from 192.168.2.32 to any out recv em1 xmit em0 > <118>15058 pipe 15057 ip from 192.168.2.32 to any via em1 > <118>15059 skipto 65110 ip from 192.168.2.32 to any via em1 > <118>15062 pipe 15062 ip from any to 192.168.2.35 via em1 > <118>15063 skipto 65500 ip from any to 192.168.2.35 via em1 > <118>15067 netgraph 60 ip from 192.168.2.35 to any out recv em1 xmit em0 > <118>15068 pipe 15067 ip from 192.168.2.35 to any via em1 > <118>15069 skipto 65510 ip from 192.168.2.35 to any via em1 > <118>15072 pipe 15072 ip from any to 192.168.2.37 via em1 > <118>15073 skipto 65100 ip from any to 192.168.2.37 via em1 > <118>15077 netgraph 60 ip from 192.168.2.37 to any out recv em1 xmit em0 > <118>15078 pipe 15077 ip from 192.168.2.37 to any via em1 > <118>15079 skipto 65110 ip from 192.168.2.37 to any via em1 > <118>15092 pipe 15092 ip from any to 192.168.2.7 via em1 > <118>15093 skipto 65500 ip from any to 192.168.2.7 via em1 > <118>15097 netgraph 60 ip from 192.168.2.7 to any out recv em1 xmit em0 > <118>15098 pipe 15097 ip from 192.168.2.7 to any via em1 > <118>15099 skipto 65510 ip from 192.168.2.7 to any via em1 > <118>15102 pipe 15102 ip from any to 192.168.2.8 via em1 > <118>15103 skipto 65100 ip from any to 192.168.2.8 via em1 > <118>15107 netgraph 60 ip from 192.168.2.8 to any out recv em1 xmit em0 > <118>15108 pipe 15107 ip from 192.168.2.8 to any via em1 > <118>15109 skipto 65110 ip from 192.168.2.8 to any via em1 > <118>15112 pipe 15112 ip from any to 192.168.2.52 via em1 > <118>15113 skipto 65100 ip from any to 192.168.2.52 via em1 > <118>15117 netgraph 60 ip from 192.168.2.52 to any out recv em1 xmit em0 > <118>15118 pipe 15117 ip from 192.168.2.52 to any via em1 > <118>15119 skipto 65110 ip from 192.168.2.52 to any via em1 > <118>15122 pipe 15122 ip from any to 192.168.2.9 via em1 > <118>15123 skipto 65100 ip from any to 192.168.2.9 via em1 > <118>15127 netgraph 60 ip from 192.168.2.9 to any out recv em1 xmit em0 > <118>15128 pipe 15127 ip from 192.168.2.9 to any via em1 > <118>15129 skipto 65110 ip from 192.168.2.9 to any via em1 > <118>15132 pipe 15132 ip from any to 192.168.2.12 via em1 > <118>15133 skipto 65100 ip from any to 192.168.2.12 via em1 > <118>15137 netgraph 60 ip from 192.168.2.12 to any out recv em1 xmit em0 > <118>15138 pipe 15137 ip from 192.168.2.12 to any via em1 > <118>15139 skipto 65110 ip from 192.168.2.12 to any via em1 > <118>15142 pipe 15142 ip from any to 192.168.2.13 via em1 > <118>15143 skipto 65100 ip from any to 192.168.2.13 via em1 > <118>15147 netgraph 60 ip from 192.168.2.13 to any out recv em1 xmit em0 > <118>15148 pipe 15147 ip from 192.168.2.13 to any via em1 > <118>15149 skipto 65110 ip from 192.168.2.13 to any via em1 > <118>15152 pipe 15152 ip from any to 192.168.2.14 via em1 > <118>15153 skipto 65100 ip from any to 192.168.2.14 via em1 > <118>15157 netgraph 60 ip from 192.168.2.14 to any out recv em1 xmit em0 > <118>15158 pipe 15157 ip from 192.168.2.14 to any via em1 > <118>15159 skipto 65110 ip from 192.168.2.14 to any via em1 > <118>15162 pipe 15162 ip from any to 192.168.2.62 via em1 > <118>15163 skipto 65100 ip from any to 192.168.2.62 via em1 > <118>15167 netgraph 60 ip from 192.168.2.62 to any out recv em1 xmit em0 > <118>15168 pipe 15167 ip from 192.168.2.62 to any via em1 > <118>15169 skipto 65110 ip from 192.168.2.62 to any via em1 > <118>15172 pipe 15172 ip from any to 192.168.2.65 via em1 > <118>15173 skipto 65100 ip from any to 192.168.2.65 via em1 > <118>15177 netgraph 60 ip from 192.168.2.65 to any out recv em1 xmit em0 > <118>15178 pipe 15177 ip from 192.168.2.65 to any via em1 > <118>15179 skipto 65110 ip from 192.168.2.65 to any via em1 > <118>15182 pipe 15182 ip from any to 192.168.2.74 via em1 > <118>15183 skipto 65100 ip from any to 192.168.2.74 via em1 > <118>15187 netgraph 60 ip from 192.168.2.74 to any out recv em1 xmit em0 > <118>15188 pipe 15187 ip from 192.168.2.74 to any via em1 > <118>15189 skipto 65110 ip from 192.168.2.74 to any via em1 > <118>15192 pipe 15192 ip from any to 192.168.2.27 via em1 > <118>15193 skipto 65100 ip from any to 192.168.2.27 via em1 > <118>15197 netgraph 60 ip from 192.168.2.27 to any out recv em1 xmit em0 > <118>15198 pipe 15197 ip from 192.168.2.27 to any via em1 > <118>15199 skipto 65110 ip from 192.168.2.27 to any via em1 > <118>15202 pipe 15202 ip from any to 192.168.2.15 via em1 > <118>15203 skipto 65100 ip from any to 192.168.2.15 via em1 > <118>15207 netgraph 60 ip from 192.168.2.15 to any out recv em1 xmit em0 > <118>15208 pipe 15207 ip from 192.168.2.15 to any via em1 > <118>15209 skipto 65110 ip from 192.168.2.15 to any via em1 > <118>15212 pipe 15212 ip from any to 192.168.2.16 via em1 > <118>15213 skipto 65100 ip from any to 192.168.2.16 via em1 > <118>15217 netgraph 60 ip from 192.168.2.16 to any out recv em1 xmit em0 > <118>15218 pipe 15217 ip from 192.168.2.16 to any via em1 > <118>15219 skipto 65110 ip from 192.168.2.16 to any via em1 > <118>tokar4: not found > <118>15222 pipe 15222 ip from any to 192.168.2.17 via em1 > <118>15223 skipto 65100 ip from any to 192.168.2.17 via em1 > <118>15227 netgraph 60 ip from 192.168.2.17 to any out recv em1 xmit em0 > <118>15228 pipe 15227 ip from 192.168.2.17 to any via em1 > <118>15229 skipto 65110 ip from 192.168.2.17 to any via em1 > <118>15232 pipe 15232 ip from any to 192.168.2.18 via em1 > <118>15233 skipto 65100 ip from any to 192.168.2.18 via em1 > <118>15237 netgraph 60 ip from 192.168.2.18 to any out recv em1 xmit em0 > <118>15238 pipe 15237 ip from 192.168.2.18 to any via em1 > <118>15239 skipto 65110 ip from 192.168.2.18 to any via em1 > <118>15252 pipe 15252 ip from any to 192.168.2.20 via em1 > <118>15253 skipto 65100 ip from any to 192.168.2.20 via em1 > <118>15257 netgraph 60 ip from 192.168.2.20 to any out recv em1 xmit em0 > <118>15258 pipe 15257 ip from 192.168.2.20 to any via em1 > <118>15259 skipto 65110 ip from 192.168.2.20 to any via em1 > <118>15262 pipe 15262 ip from any to 192.168.2.19 via em1 > <118>15263 skipto 65100 ip from any to 192.168.2.19 via em1 > <118>15267 netgraph 60 ip from 192.168.2.19 to any out recv em1 xmit em0 > <118>15268 pipe 15267 ip from 192.168.2.19 to any via em1 > <118>15269 skipto 65110 ip from 192.168.2.19 to any via em1 > <118>15272 pipe 15272 ip from any to 192.168.2.21 via em1 > <118>15273 skipto 65100 ip from any to 192.168.2.21 via em1 > <118>15277 netgraph 60 ip from 192.168.2.21 to any out recv em1 xmit em0 > <118>15278 pipe 15277 ip from 192.168.2.21 to any via em1 > <118>15279 skipto 65110 ip from 192.168.2.21 to any via em1 > <118>15282 pipe 15282 ip from any to 192.168.2.115 via em1 > <118>15283 skipto 65100 ip from any to 192.168.2.115 via em1 > <118>15287 netgraph 60 ip from 192.168.2.115 to any out recv em1 xmit em0 > <118>15288 pipe 15287 ip from 192.168.2.115 to any via em1 > <118>15289 skipto 65110 ip from 192.168.2.115 to any via em1 > <118>15292 pipe 15292 ip from any to 192.168.2.116 via em1 > <118>15293 skipto 65100 ip from any to 192.168.2.116 via em1 > <118>15297 netgraph 60 ip from 192.168.2.116 to any out recv em1 xmit em0 > <118>15298 pipe 15297 ip from 192.168.2.116 to any via em1 > <118>15299 skipto 65110 ip from 192.168.2.116 to any via em1 > <118>15302 pipe 15302 ip from any to 192.168.2.22 via em1 > <118>15303 skipto 65100 ip from any to 192.168.2.22 via em1 > <118>15307 netgraph 60 ip from 192.168.2.22 to any out recv em1 xmit em0 > <118>15308 pipe 15307 ip from 192.168.2.22 to any via em1 > <118>15309 skipto 65110 ip from 192.168.2.22 to any via em1 > <118>15312 pipe 15312 ip from any to 192.168.2.23 via em1 > <118>15313 skipto 65100 ip from any to 192.168.2.23 via em1 > <118>15317 netgraph 60 ip from 192.168.2.23 to any out recv em1 xmit em0 > <118>15318 pipe 15317 ip from 192.168.2.23 to any via em1 > <118>15319 skipto 65110 ip from 192.168.2.23 to any via em1 > <118>15322 pipe 15322 ip from any to 192.168.2.24 via em1 > <118>15323 skipto 65100 ip from any to 192.168.2.24 via em1 > <118>15327 netgraph 60 ip from 192.168.2.24 to any out recv em1 xmit em0 > <118>15328 pipe 15327 ip from 192.168.2.24 to any via em1 > <118>15329 skipto 65110 ip from 192.168.2.24 to any via em1 > <118>15332 pipe 15332 ip from any to 192.168.2.25 via em1 > <118>15333 skipto 65100 ip from any to 192.168.2.25 via em1 > <118>15337 netgraph 60 ip from 192.168.2.25 to any out recv em1 xmit em0 > <118>15338 pipe 15337 ip from 192.168.2.25 to any via em1 > <118>15339 skipto 65110 ip from 192.168.2.25 to any via em1 > <118>15342 pipe 15342 ip from any to 192.168.2.90 via em1 > <118>15343 skipto 65100 ip from any to 192.168.2.90 via em1 > <118>15347 netgraph 60 ip from 192.168.2.90 to any out recv em1 xmit em0 > <118>15348 pipe 15347 ip from 192.168.2.90 to any via em1 > <118>15349 skipto 65110 ip from 192.168.2.90 to any via em1 > <118>15352 pipe 15352 ip from any to 192.168.2.245 via em1 > <118>15353 skipto 65500 ip from any to 192.168.2.245 via em1 > <118>15357 netgraph 60 ip from 192.168.2.245 to any out recv em1 xmit em0 > <118>15358 pipe 15357 ip from 192.168.2.245 to any via em1 > <118>15359 skipto 65510 ip from 192.168.2.245 to any via em1 > <118>15362 pipe 15362 ip from any to 192.168.4.0/27 via em1 > <118>15363 skipto 65100 ip from any to 192.168.4.0/27 via em1 > <118>15367 netgraph 60 ip from 192.168.4.0/27 to any out recv em1 xmit em0 > <118>15368 pipe 15367 ip from 192.168.4.0/27 to any via em1 > <118>15369 skipto 65110 ip from 192.168.4.0/27 to any via em1 > <118>15372 pipe 15372 ip from any to 192.168.5.2 via em1 > <118>15373 skipto 65100 ip from any to 192.168.5.2 via em1 > <118>15377 netgraph 60 ip from 192.168.5.2 to any out recv em1 xmit em0 > <118>15378 pipe 15377 ip from 192.168.5.2 to any via em1 > <118>15379 skipto 65110 ip from 192.168.5.2 to any via em1 > <118>15662 pipe 15372 ip from any to 192.168.5.3 via em1 > <118>15663 skipto 65100 ip from any to 192.168.5.3 via em1 > <118>15667 netgraph 60 ip from 192.168.5.3 to any out recv em1 xmit em0 > <118>15668 pipe 15377 ip from 192.168.5.3 to any via em1 > <118>15669 skipto 65110 ip from 192.168.5.3 to any via em1 > <118>15402 pipe 15412 ip from any to 192.168.11.21 via vlan3 > <118>15403 skipto 65100 ip from any to 192.168.11.21 via vlan3 > <118>15407 netgraph 60 ip from 192.168.11.21 to any out recv vlan3 xmit em0 > <118>15408 pipe 15417 ip from 192.168.11.21 to any via vlan3 > <118>15409 skipto 65110 ip from 192.168.11.21 to any via vlan3 > <118>15412 pipe 15412 ip from any to 192.168.11.18 via vlan3 > <118>15413 skipto 65100 ip from any to 192.168.11.18 via vlan3 > <118>15417 netgraph 60 ip from 192.168.11.18 to any out recv vlan3 xmit em0 > <118>15418 pipe 15417 ip from 192.168.11.18 to any via vlan3 > <118>15419 skipto 65110 ip from 192.168.11.18 to any via vlan3 > <118>15432 pipe 15432 ip from any to 192.168.11.36 via em1 > <118>15433 skipto 65100 ip from any to 192.168.11.36 via em1 > <118>15437 netgraph 60 ip from 192.168.11.36 to any out recv em1 xmit em0 > <118>15438 pipe 15437 ip from 192.168.11.36 to any via em1 > <118>15439 skipto 65110 ip from 192.168.11.36 to any via em1 > <118>15452 pipe 15452 ip from any to 192.168.129.4 via em1 > <118>15453 skipto 65100 ip from any to 192.168.129.4 via em1 > <118>15457 netgraph 60 ip from 192.168.129.4 to any out recv em1 xmit em0 > <118>15458 pipe 15457 ip from 192.168.129.4 to any via em1 > <118>15459 skipto 65110 ip from 192.168.129.4 to any via em1 > <118>15462 pipe 15462 ip from any to 192.168.129.10 via em1 > <118>15463 skipto 65100 ip from any to 192.168.129.10 via em1 > <118>15467 netgraph 60 ip from 192.168.129.10 to any out recv em1 xmit em0 > <118>15468 pipe 15467 ip from 192.168.129.10 to any via em1 > <118>15469 skipto 65110 ip from 192.168.129.10 to any via em1 > <118>15502 pipe 15502 ip from any to 192.168.129.205 via em1 > <118>15503 skipto 65100 ip from any to 192.168.129.205 via em1 > <118>15507 netgraph 60 ip from 192.168.129.205 to any out recv em1 xmit em0 > <118>15508 pipe 15507 ip from 192.168.129.205 to any via em1 > <118>15509 skipto 65110 ip from 192.168.129.205 to any via em1 > <118>15552 pipe 15552 ip from any to 192.168.129.26 via em1 > <118>15553 skipto 65100 ip from any to 192.168.129.26 via em1 > <118>15557 netgraph 60 ip from 192.168.129.26 to any out recv em1 xmit em0 > <118>15558 pipe 15557 ip from 192.168.129.26 to any via em1 > <118>15559 skipto 65110 ip from 192.168.129.26 to any via em1 > <118>15562 pipe 15562 ip from any to 192.168.129.85 via em1 > <118>15563 skipto 65100 ip from any to 192.168.129.85 via em1 > <118>15567 netgraph 60 ip from 192.168.129.85 to any out recv em1 xmit em0 > <118>15568 pipe 15567 ip from 192.168.129.85 to any via em1 > <118>15569 skipto 65110 ip from 192.168.129.85 to any via em1 > <118>15572 pipe 15572 ip from any to 192.168.129.173 via em1 > <118>15573 skipto 65100 ip from any to 192.168.129.173 via em1 > <118>15577 netgraph 60 ip from 192.168.129.173 to any out recv em1 xmit em0 > <118>15578 pipe 15577 ip from 192.168.129.173 to any via em1 > <118>15579 skipto 65110 ip from 192.168.129.173 to any via em1 > <118>15582 pipe 15582 ip from any to 192.168.11.19 via vlan3 > <118>15583 skipto 65100 ip from any to 192.168.11.19 via vlan3 > <118>15587 netgraph 60 ip from 192.168.11.19 to any out recv vlan3 xmit em0 > <118>15588 pipe 15587 ip from 192.168.11.19 to any via vlan3 > <118>15589 skipto 65110 ip from 192.168.11.19 to any via vlan3 > <118>15592 pipe 15592 ip from any to 192.168.129.215 via em1 > <118>15593 skipto 65100 ip from any to 192.168.129.215 via em1 > <118>15597 netgraph 60 ip from 192.168.129.215 to any out recv em1 xmit em0 > <118>15598 pipe 15597 ip from 192.168.129.215 to any via em1 > <118>15599 skipto 65110 ip from 192.168.129.215 to any via em1 > <118>15622 pipe 15622 ip from any to 192.168.2.239 via em1 > <118>15623 skipto 65100 ip from any to 192.168.2.239 via em1 > <118>15627 netgraph 60 ip from 192.168.2.239 to any out recv em1 xmit em0 > <118>15628 pipe 15627 ip from 192.168.2.239 to any via em1 > <118>15629 skipto 65110 ip from 192.168.2.239 to any via em1 > <118>15632 pipe 5232 ip from any to 192.168.2.10 via em1 > <118>15633 skipto 65100 ip from any to 192.168.2.10 via em1 > <118>15637 netgraph 60 ip from 192.168.2.10 to any out recv em1 xmit em0 > <118>15638 pipe 5237 ip from 192.168.2.10 to any via em1 > <118>15639 skipto 65110 ip from 192.168.2.10 to any via em1 > <118>15652 pipe 15652 ip from any to 192.168.2.100 via em1 > <118>15653 skipto 65100 ip from any to 192.168.2.100 via em1 > <118>15657 netgraph 60 ip from 192.168.2.100 to any out recv em1 xmit em0 > <118>15658 pipe 15657 ip from 192.168.2.100 to any via em1 > <118>15659 skipto 65110 ip from 192.168.2.100 to any via em1 > <118>15672 pipe 15672 ip from any to 192.168.2.5 via em1 > <118>15673 skipto 65500 ip from any to 192.168.2.5 via em1 > <118>15677 netgraph 60 ip from 192.168.2.5 to any out recv em1 xmit em0 > <118>15678 pipe 15677 ip from 192.168.2.5 to any via em1 > <118>15679 skipto 65510 ip from 192.168.2.5 to any via em1 > <118>15682 pipe 15682 ip from any to 192.168.129.112 via em1 > <118>15683 skipto 65100 ip from any to 192.168.129.112 via em1 > <118>15687 netgraph 60 ip from 192.168.129.112 to any out recv em1 xmit em0 > <118>15688 pipe 15687 ip from 192.168.129.112 to any via em1 > <118>15689 skipto 65110 ip from 192.168.129.112 to any via em1 > <118>15692 pipe 15692 ip from any to 192.168.129.55 via em1 > <118>15693 skipto 65100 ip from any to 192.168.129.55 via em1 > <118>15697 netgraph 60 ip from 192.168.129.55 to any out recv em1 xmit em0 > <118>15698 pipe 15697 ip from 192.168.129.55 to any via em1 > <118>15699 skipto 65110 ip from 192.168.129.55 to any via em1 > <118>15702 pipe 15702 ip from any to 192.168.129.129 via em1 > <118>15703 skipto 65100 ip from any to 192.168.129.129 via em1 > <118>15707 netgraph 60 ip from 192.168.129.129 to any out recv em1 xmit em0 > <118>15708 pipe 15707 ip from 192.168.129.129 to any via em1 > <118>15709 skipto 65110 ip from 192.168.129.129 to any via em1 > <118>15712 pipe 15712 ip from any to 192.168.2.26 via em1 > <118>15713 skipto 65100 ip from any to 192.168.2.26 via em1 > <118>15717 netgraph 60 ip from 192.168.2.26 to any out recv em1 xmit em0 > <118>15718 pipe 15717 ip from 192.168.2.26 to any via em1 > <118>15719 skipto 65110 ip from 192.168.2.26 to any via em1 > <118>17002 pipe 17002 ip from any to 192.168.2.30 via em1 > <118>17003 skipto 65100 ip from any to 192.168.2.30 via em1 > <118>17007 netgraph 60 ip from 192.168.2.30 to any out recv em1 xmit em0 > <118>17008 pipe 17009 ip from 192.168.2.30 to any via em1 > <118>17009 skipto 65110 ip from 192.168.2.30 to any via em1 > <118>05002 pipe 5002 ip from any to 195.16.76.10 in via em0 > <118>05003 skipto 65500 ip from any to 195.16.76.10 in via em0 > <118>05007 pipe 5007 ip from 195.16.76.10 to any out via em0 > <118>05008 skipto 65510 ip from 195.16.76.10 to any out via em0 > <118>05012 pipe 5012 ip from any to 195.16.76.14 in via em0 > <118>05013 skipto 65500 ip from any to 195.16.76.14 in via em0 > <118>05017 pipe 5017 ip from 195.16.76.14 to any out via em0 > <118>05018 skipto 65510 ip from 195.16.76.14 to any out via em0 > <118>05022 pipe 5022 ip from any to { 195.16.76.30 or dst-ip 195.16.76.18 } in via em0 > <118>05023 skipto 65500 ip from any to { 195.16.76.30 or dst-ip 195.16.76.18 } in via em0 > <118>05027 pipe 5027 ip from { 195.16.76.30 or 195.16.76.18 } to any out via em0 > <118>05028 skipto 65510 ip from { 195.16.76.30 or 195.16.76.18 } to any out via em0 > <118>05032 count ip from 213.70.83.33 to 195.16.76.32/27{34} in via em0 > <118>05033 skipto 65500 ip from 213.70.83.33 to 195.16.76.32/27{34} in via em0 > <118>05037 count ip from 195.16.76.32/27{34} to 213.70.83.33 out via em0 > <118>05038 skipto 65510 ip from 195.16.76.32/27{34} to 213.70.83.33 out via em0 > <118>05042 pipe 5042 ip from any to 195.16.76.156 in via em0 > <118>05043 skipto 65500 ip from any to 195.16.76.156 in via em0 > <118>05047 pipe 5047 ip from 195.16.76.156 to any out via em0 > <118>05048 skipto 65510 ip from 195.16.76.156 to any out via em0 > <118>05062 pipe 5062 ip from any to 195.16.76.12 in via em0 > <118>05063 skipto 65500 ip from any to 195.16.76.12 in via em0 > <118>05067 count ip from 195.16.76.12 to any out via em0 > <118>05069 pipe 5067 ip from 195.16.76.12 to any out via em0 > <118>05068 skipto 65510 ip from 195.16.76.12 to any out via em0 > <118>05072 pipe 5072 ip from any to 195.16.76.143 in via em0 > <118>05073 skipto 65100 ip from any to 195.16.76.143 in via em0 > <118>05077 pipe 5077 ip from 195.16.76.143 to any out via em0 > <118>05078 skipto 65110 ip from 195.16.76.143 to any out via em0 > <118>05082 pipe 5082 ip from any to 195.16.76.13 in via em0 > <118>05083 skipto 65500 ip from any to 195.16.76.13 in via em0 > <118>05087 pipe 5087 ip from 195.16.76.13 to any out via em0 > <118>05088 skipto 65510 ip from 195.16.76.13 to any out via em0 > <118>05092 pipe 5092 ip from any to 195.16.76.130 in via em0 > <118>05093 skipto 65500 ip from any to 195.16.76.130 in via em0 > <118>05097 pipe 5097 ip from 195.16.76.130 to any out via em0 > <118>05098 skipto 65510 ip from 195.16.76.130 to any out via em0 > <118>05102 pipe 5102 ip from any to 195.16.76.132 in via em0 > <118>05103 skipto 65100 ip from any to 195.16.76.132 in via em0 > <118>05107 pipe 5107 ip from 195.16.76.132 to any out via em0 > <118>05108 skipto 65110 ip from 195.16.76.132 to any out via em0 > <118>05112 pipe 5112 ip from any to 195.16.76.133 in via em0 > <118>05113 skipto 65100 ip from any to 195.16.76.133 in via em0 > <118>05117 pipe 5117 ip from 195.16.76.133 to any out via em0 > <118>05118 skipto 65110 ip from 195.16.76.133 to any out via em0 > <118>05122 pipe 5122 ip from any to 195.16.77.34 > <118>05123 skipto 65100 ip from any to 195.16.77.34 > <118>05127 pipe 5127 ip from 195.16.77.34 to any > <118>05128 skipto 65110 ip from 195.16.77.34 to any > <118>05132 pipe 5132 ip from any to 195.16.76.135 in via em0 > <118>05133 skipto 65100 ip from any to 195.16.76.135 in via em0 > <118>05137 pipe 5137 ip from 195.16.76.135 to any out via em0 > <118>05138 skipto 65110 ip from 195.16.76.135 to any out via em0 > <118>05142 pipe 5142 ip from any to 195.16.76.136 in via em0 > <118>05143 skipto 65500 ip from any to 195.16.76.136 in via em0 > <118>05147 pipe 5147 ip from 195.16.76.136 to any out via em0 > <118>05148 skipto 65510 ip from 195.16.76.136 to any out via em0 > <118>05152 pipe 5152 ip from any to 195.16.76.137 in via em0 > <118>05153 skipto 65500 ip from any to 195.16.76.137 in via em0 > <118>05157 pipe 5157 ip from 195.16.76.137 to any out via em0 > <118>05158 skipto 65510 ip from 195.16.76.137 to any out via em0 > <118>05162 pipe 5162 ip from any to 195.16.76.138 in via em0 > <118>05163 skipto 65500 ip from any to 195.16.76.138 in via em0 > <118>05167 pipe 5167 ip from 195.16.76.138 to any out via em0 > <118>05168 skipto 65510 ip from 195.16.76.138 to any out via em0 > <118>05172 pipe 5172 ip from any to 195.16.76.232 in via em0 > <118>05173 skipto 65500 ip from any to 195.16.76.232 in via em0 > <118>05177 pipe 5177 ip from 195.16.76.232 to any out via em0 > <118>05178 skipto 65510 ip from 195.16.76.232 to any out via em0 > <118>05182 pipe 5182 ip from any to 195.16.76.140 in via em0 > <118>05183 skipto 65500 ip from any to 195.16.76.140 in via em0 > <118>05187 pipe 5187 ip from 195.16.76.140 to any out via em0 > <118>05188 skipto 65510 ip from 195.16.76.140 to any out via em0 > <118>05212 count ip from any to 192.168.157.10 > <118>05213 pipe 5212 ip from { 192.168.11.0/30 or 195.16.76.0/29 or 195.16.77.0/28 } to 192.168.157.10 > <118>05214 skipto 65500 ip from { 192.168.11.0/30 or 195.16.76.0/29 or 195.16.77.0/28 } to 192.168.157.10 > <118>05217 count ip from 192.168.157.10 to any > <118>05218 pipe 5217 ip from 192.168.157.10 to { 192.168.11.0/30 or dst-ip 195.16.76.0/29 or dst-ip 195.16.77.0/28 } > <118>05219 skipto 65510 ip from 192.168.157.10 to { 192.168.11.0/30 or dst-ip 195.16.76.0/29 or dst-ip 195.16.77.0/28 } > <118>05222 pipe 5222 ip from any to 195.16.76.144 in via em0 > <118>05223 skipto 65500 ip from any to 195.16.76.144 in via em0 > <118>05227 pipe 5227 ip from 195.16.76.144 to any out via em0 > <118>05228 skipto 65510 ip from 195.16.76.144 to any out via em0 > <118>05232 pipe 5232 ip from any to 195.16.76.147 in via em0 > <118>05233 skipto 65100 ip from any to 195.16.76.147 in via em0 > <118>05237 pipe 5237 ip from 195.16.76.147 to any out via em0 > <118>05238 skipto 65110 ip from 195.16.76.147 to any out via em0 > <118>05252 pipe 5252 ip from any to 195.16.76.148 in via em0 > <118>05253 skipto 65100 ip from any to 195.16.76.148 in via em0 > <118>05257 pipe 5257 ip from 195.16.76.148 to any out via em0 > <118>05258 skipto 65110 ip from 195.16.76.148 to any out via em0 > <118>05262 pipe 5262 ip from any to 195.16.76.149 in via em0 > <118>05263 skipto 65100 ip from any to 195.16.76.149 in via em0 > <118>05267 pipe 5267 ip from 195.16.76.149 to any out via em0 > <118>05268 skipto 65110 ip from 195.16.76.149 to any out via em0 > <118>05272 pipe 5272 ip from any to 195.16.76.150 in via em0 > <118>05273 skipto 65100 ip from any to 195.16.76.150 in via em0 > <118>05277 pipe 5277 ip from 195.16.76.150 to any out via em0 > <118>05278 skipto 65110 ip from 195.16.76.150 to any out via em0 > <118>05282 pipe 5282 ip from any to 195.16.76.151 in via em0 > <118>05283 skipto 65100 ip from any to 195.16.76.151 in via em0 > <118>05287 pipe 5287 ip from 195.16.76.151 to any out via em0 > <118>05288 skipto 65110 ip from 195.16.76.151 to any out via em0 > <118>05292 pipe 5292 ip from any to 195.16.76.154 in via em0 > <118>05293 skipto 65100 ip from any to 195.16.76.154 in via em0 > <118>05297 pipe 5297 ip from 195.16.76.154 to any out via em0 > <118>05298 skipto 65110 ip from 195.16.76.154 to any out via em0 > <118>05302 pipe 5302 ip from any to 195.16.76.155 in via em0 > <118>05303 skipto 65500 ip from any to 195.16.76.155 in via em0 > <118>05307 pipe 5307 ip from 195.16.76.155 to any out via em0 > <118>05308 skipto 65510 ip from 195.16.76.155 to any out via em0 > <118>05312 pipe 5312 ip from any to 195.16.76.235 in via em0 > <118>05313 skipto 65500 ip from any to 195.16.76.235 in via em0 > <118>05317 pipe 5317 ip from 195.16.76.235 to any out via em0 > <118>05318 skipto 65510 ip from 195.16.76.235 to any out via em0 > <118>05322 pipe 5322 ip from any to 195.16.76.222 in via em0 > <118>05323 skipto 65500 ip from any to 195.16.76.222 in via em0 > <118>05327 pipe 5327 ip from 195.16.76.222 to any out via em0 > <118>05328 skipto 65510 ip from 195.16.76.222 to any out via em0 > <118>05332 pipe 5332 ip from any to 195.16.76.142 via em0 > <118>05333 skipto 65100 ip from any to 195.16.76.142 via em0 > <118>05337 pipe 5337 ip from 195.16.76.142 to any via em0 > <118>05338 skipto 65110 ip from 195.16.76.142 to any via em0 > <118>05342 pipe 5342 ip from any to 195.16.76.145 via em0 > <118>05343 skipto 65100 ip from any to 195.16.76.145 via em0 > <118>05347 count ip from 195.16.76.145 to any via em0 > <118>05348 pipe 5347 ip from 195.16.76.145 to any via em0 > <118>05349 skipto 65110 ip from 195.16.76.145 to any via em0 > <118>05352 pipe 5352 ip from any to 195.16.76.157 via em0 > <118>05353 skipto 65100 ip from any to 195.16.76.157 via em0 > <118>05357 pipe 5357 ip from 195.16.76.157 to any via em0 > <118>05358 skipto 65110 ip from 195.16.76.157 to any via em0 > <118>05362 pipe 5362 ip from any to { 195.16.76.32/27{33,35-63} or dst-ip 195.16.76.64/30 or dst-ip 195.16.76.68/30 } in via em0 > <118>05363 skipto 65500 ip from any to { 195.16.76.32/27{33,35-63} or dst-ip 195.16.76.64/30 or dst-ip 195.16.76.68/30 } in via em0 > <118>05367 pipe 5367 ip from { 195.16.76.32/27{33,35-63} or 195.16.76.64/30 or 195.16.76.68/30 } to any out via em0 > <118>05368 skipto 65510 ip from { 195.16.76.32/27{33,35-63} or 195.16.76.64/30 or 195.16.76.68/30 } to any out via em0 > <118>05372 pipe 5372 ip from any to 195.16.76.153 in via em0 > <118>05373 skipto 65100 ip from any to 195.16.76.153 in via em0 > <118>05377 pipe 5377 ip from 195.16.76.153 to any out via em0 > <118>05378 skipto 65110 ip from 195.16.76.153 to any out via em0 > <118>05382 pipe 15372 ip from any to 195.16.76.158 in via em0 > <118>05383 skipto 65100 ip from any to 195.16.76.158 in via em0 > <118>05387 pipe 15377 ip from 195.16.76.158 to any out via em0 > <118>05388 skipto 65110 ip from 195.16.76.158 to any out via em0 > <118>05392 pipe 5392 ip from 62.64.120.62 to 195.16.76.141 in via em0 > <118>05393 skipto 65500 ip from 62.64.120.62 to 195.16.76.141 in via em0 > <118>05394 deny ip from any to 195.16.76.141 in via em0 > <118>05397 pipe 5397 ip from 195.16.76.141 to 62.64.120.62 out via em0 > <118>05398 skipto 65510 ip from 195.16.76.141 to 62.64.120.62 out via em0 > <118>05399 deny ip from 195.16.76.141 to any out via em0 > <118>05402 pipe 5402 ip from any to 195.16.76.152 in via em0 > <118>05403 skipto 65100 ip from any to 195.16.76.152 in via em0 > <118>05407 pipe 5407 ip from 195.16.76.152 to any out via em0 > <118>05408 skipto 65110 ip from 195.16.76.152 to any out via em0 > <118>05412 pipe 5412 ip from any to 195.16.76.226 in via em0 > <118>05413 skipto 65500 ip from any to 195.16.76.226 in via em0 > <118>05417 pipe 5417 ip from 195.16.76.226 to any out via em0 > <118>05418 skipto 65510 ip from 195.16.76.226 to any out via em0 > <118>05432 pipe 5432 ip from any to 195.16.76.139 in via em0 > <118>05433 skipto 65500 ip from any to 195.16.76.139 in via em0 > <118>05437 pipe 5437 ip from 195.16.76.139 to any out via em0 > <118>05438 skipto 65510 ip from 195.16.76.139 to any out via em0 > <118>05462 pipe 5412 ip from any to 195.16.76.228 in via em0 > <118>05463 skipto 65100 ip from any to 195.16.76.228 in via em0 > <118>05467 pipe 5417 ip from 195.16.76.228 to any out via em0 > <118>05468 skipto 65110 ip from 195.16.76.228 to any out via em0 > <118>05482 pipe 5412 ip from any to 195.16.76.230 in via em0 > <118>05483 skipto 65100 ip from any to 195.16.76.230 in via em0 > <118>05487 pipe 5417 ip from 195.16.76.230 to any out via em0 > <118>05488 skipto 65110 ip from 195.16.76.230 to any out via em0 > <118>05492 pipe 5492 ip from any to 195.16.76.134 in via em0 > <118>05493 skipto 65500 ip from any to 195.16.76.134 in via em0 > <118>05497 pipe 5497 ip from 195.16.76.134 to any out via em0 > <118>05498 skipto 65510 ip from 195.16.76.134 to any out via em0 > <118>05512 pipe 5512 ip from any to 195.16.76.231 in via em0 > <118>05513 skipto 65100 ip from any to 195.16.76.231 in via em0 > <118>05517 pipe 5517 ip from 195.16.76.231 to any out via em0 > <118>05518 skipto 65110 ip from 195.16.76.231 to any out via em0 > <118>05522 pipe 5522 ip from any to 195.16.76.233 in via em0 > <118>05523 skipto 65500 ip from any to 195.16.76.233 in via em0 > <118>05527 pipe 5527 ip from 195.16.76.233 to any out via em0 > <118>05528 skipto 65510 ip from 195.16.76.233 to any out via em0 > <118>05532 pipe 5532 ip from any to 195.16.76.254 in via em0 > <118>05533 skipto 65500 ip from any to 195.16.76.254 in via em0 > <118>05537 pipe 5537 ip from 195.16.76.254 to any out via em0 > <118>05538 skipto 65510 ip from 195.16.76.254 to any out via em0 > <118>05542 pipe 5542 ip from any to 195.16.76.86 in via em0 > <118>05543 skipto 65500 ip from any to 195.16.76.86 in via em0 > <118>05547 pipe 5547 ip from 195.16.76.86 to any out via em0 > <118>05548 skipto 65510 ip from 195.16.76.86 to any out via em0 > <118>05552 pipe 5552 ip from any to 195.16.76.253 in via em0 > <118>05553 skipto 65500 ip from any to 195.16.76.253 in via em0 > <118>05557 pipe 5557 ip from 195.16.76.253 to any out via em0 > <118>05558 skipto 65510 ip from 195.16.76.253 to any out via em0 > <118>05562 pipe 5552 ip from any to 195.16.76.131 in via em0 > <118>05563 skipto 65100 ip from any to 195.16.76.131 in via em0 > <118>05567 pipe 5557 ip from 195.16.76.131 to any out via em0 > <118>05568 skipto 65110 ip from 195.16.76.131 to any out via em0 > <118>05572 pipe 5532 ip from any to 195.16.76.252 in via em0 > <118>05573 skipto 65200 ip from any to 195.16.76.252 in via em0 > <118>05577 pipe 5537 ip from 195.16.76.252 to any out via em0 > <118>05578 skipto 65210 ip from 195.16.76.252 to any out via em0 > <118>05582 pipe 5582 ip from any to 195.16.76.229 in via em0 > <118>05583 skipto 65100 ip from any to 195.16.76.229 in via em0 > <118>05587 pipe 5587 ip from 195.16.76.229 to any out via em0 > <118>05588 skipto 65110 ip from 195.16.76.229 to any out via em0 > <118>05592 pipe 5592 ip from any to 195.16.76.236 in via em0 > <118>05593 skipto 65100 ip from any to 195.16.76.236 in via em0 > <118>05597 pipe 5597 ip from 195.16.76.236 to any out via em0 > <118>05598 skipto 65110 ip from 195.16.76.236 to any out via em0 > <118>05602 pipe 5602 ip from any to 195.16.76.227 in via em0 > <118>05603 skipto 65500 ip from any to 195.16.76.227 in via em0 > <118>05607 pipe 5607 ip from 195.16.76.227 to any out via em0 > <118>05608 skipto 65510 ip from 195.16.76.227 to any out via em0 > <118>05612 pipe 5612 ip from any to 195.16.76.237 in via em0 > <118>05613 skipto 65100 ip from any to 195.16.76.237 in via em0 > <118>05617 pipe 5617 ip from 195.16.76.237 to any out via em0 > <118>05618 skipto 65110 ip from 195.16.76.237 to any out via em0 > <118>05622 pipe 5622 ip from any to 195.16.76.239 in via em0 > <118>05623 skipto 65500 ip from any to 195.16.76.239 in via em0 > <118>05627 pipe 5627 ip from 195.16.76.239 to any out via em0 > <118>05628 skipto 65510 ip from 195.16.76.239 to any out via em0 > <118>05632 pipe 5632 ip from any to 195.16.76.238 in via em0 > <118>05633 skipto 65100 ip from any to 195.16.76.238 in via em0 > <118>05637 pipe 5637 ip from 195.16.76.238 to any out via em0 > <118>05638 skipto 65110 ip from 195.16.76.238 to any out via em0 > <118>Firewall rules loaded. > <118>net.inet.ip.fw.enable: > <118>1 > <118> -> > <118>1 > <118> > <118>Additional IP options: > <118>. > <118>Mounting NFS file systems: > <118>. > > > Fatal trap 12: page fault while in kernel mode > cpuid = 1; apic id = 01 > fault virtual address= 0x28 > fault code= supervisor write data, page not present > instruction pointer= 0x8:0xffffffff803430b3 > stack pointer = 0x10:0xffffffffac0d6af0 > frame pointer = 0x10:0xffffff0001b7ba00 > code segment= base 0x0, limit 0xfffff, type 0x1b > = DPL 0, pres 1, long 1, def32 0, gran 1 > processor eflags= interrupt enabled, resume, IOPL = 0 > current process= 29 (dummynet) > trap number= 12 > panic: page fault > cpuid = 1 > Uptime: 6s > Physical memory: 2007 MB > Dumping 101 MB: 86 70 54 38 22 6 > > #0 doadump () at pcpu.h:194 > 194pcpu.h: No such file or directory. > in pcpu.h > (kgdb) bt > #0 doadump () at pcpu.h:194 > #1 0xffffff0001925000 in ?? () > #2 0xffffffff8024c659 in boot (howto=260) at ../../../kern/kern_shutdown.c:409 > #3 0xffffffff8024ca5d in panic (fmt=0x104
) at ../../../kern/kern_shutdown.c:563 > #4 0xffffffff803ea974 in trap_fatal (frame=0xffffff0001925000, eva=18446742974216222928) at ../../../amd64/amd64/trap.c:724 > #5 0xffffffff803ead45 in trap_pfault (frame=0xffffffffac0d6a40, usermode=0) at ../../../amd64/amd64/trap.c:641 > #6 0xffffffff803eb688 in trap (frame=0xffffffffac0d6a40) at ../../../amd64/amd64/trap.c:410 > #7 0xffffffff803d12ee in calltrap () at ../../../amd64/amd64/exception.S:169 > #8 0xffffffff803430b3 in move_pkt (pkt=0xffffff0001b7ba00, q=0xffffff0001dd2000, p=0xffffff0001f67a00, len=191) at ../../../netinet/ip_dummynet.c:517 > #9 0xffffffff80343ae9 in ready_event (q=0xffffff0001dd2000, head=0xffffffffac0d6b88, tail=0xffffffffac0d6b80) at ../../../netinet/ip_dummynet.c:564 > #10 0xffffffff80345593 in dummynet_task (context=Variable "context" is not available. > ) at ../../../netinet/ip_dummynet.c:802 > #11 0xffffffff8027cabf in taskqueue_run (queue=0xffffff0001948d80) at ../../../kern/subr_taskqueue.c:255 > #12 0xffffffff8027cd64 in taskqueue_thread_loop (arg=Variable "arg" is not available. > ) at ../../../kern/subr_taskqueue.c:374 > #13 0xffffffff8022dd73 in fork_exit (callout=0xffffffff8027cd00 , arg=0xffffffff805d7598, frame=0xffffffffac0d6c80) > at ../../../kern/kern_fork.c:781 > #14 0xffffffff803d16be in fork_trampoline () at ../../../amd64/amd64/exception.S:415 > #15 0x0000000000000000 in ?? () > #16 0x0000000000000000 in ?? () > #17 0x0000000000000001 in ?? () > #18 0x0000000000000000 in ?? () > #19 0x0000000000000000 in ?? () > #20 0x0000000000000000 in ?? () > #21 0x0000000000000000 in ?? () > #22 0x0000000000000000 in ?? () > #23 0x0000000000000000 in ?? () > #24 0x0000000000000000 in ?? () > #25 0x0000000000000000 in ?? () > #26 0x0000000000000000 in ?? () > #27 0x0000000000000000 in ?? () > #28 0x0000000000000000 in ?? () > #29 0x0000000000000000 in ?? () > #30 0x0000000000000000 in ?? () > #31 0x0000000000000000 in ?? () > #32 0x0000000000000000 in ?? () > #33 0x0000000000000000 in ?? () > #34 0x0000000000000000 in ?? () > #35 0x0000000000000000 in ?? () > #36 0x0000000000000000 in ?? () > #37 0x0000000000000000 in ?? () > #38 0x0000000000000000 in ?? () > #39 0x00000000007a5000 in ?? () > #40 0x0000000000000002 in ?? () > #41 0x0000000000000000 in ?? () > #42 0xffffff00011738d0 in ?? () > #43 0xffffff00010c9000 in ?? () > #44 0xffffff0001925000 in ?? () > #45 0xffffffffac0d66e8 in ?? () > #46 0xffffff0001925000 in ?? () > #47 0xffffffff8026a319 in sched_switch (td=0xffffffff805d7598, newtd=0xffffffff8027cd00, flags=0) at ../../../kern/sched_4bsd.c:905 > #48 0x0000000000000000 in ?? () > #49 0x0000000000000000 in ?? () > #50 0x0000000000000000 in ?? () > #51 0x0000000000000000 in ?? () > #52 0x0000000000000000 in ?? () > #53 0x0000000000000000 in ?? () > #54 0x0000000000000000 in ?? () > #55 0x0000000000000000 in ?? () > #56 0x0000000000000000 in ?? () > #57 0x0000000000000000 in ?? () > #58 0x0000000000000000 in ?? () > #59 0x0000000000000000 in ?? () > #60 0x0000000000000000 in ?? () > #61 0x0000000000000000 in ?? () > #62 0x0000000000000000 in ?? () > #63 0x0000000000000000 in ?? () > #64 0x0000000000000000 in ?? () > #65 0x0000000000000000 in ?? () > #66 0x0000000000000000 in ?? () > #67 0x0000000000000000 in ?? () > #68 0x0000000000000000 in ?? () > #69 0x0000000000000000 in ?? () > #70 0x0000000000000000 in ?? () > #71 0x0000000000000000 in ?? () > #72 0x0000000000000000 in ?? () > #73 0x0000000000000000 in ?? () > #74 0x0000000000000000 in ?? () > #75 0x0000000000000000 in ?? () > #76 0x0000000000000000 in ?? () > #77 0x0000000000000000 in ?? () > #78 0x0000000000000000 in ?? () > #79 0x0000000000000000 in ?? () > #80 0x0000000000000000 in ?? () > #81 0x0000000000000000 in ?? () > #82 0x0000000000000000 in ?? () > #83 0x0000000000000000 in ?? () > #84 0x0000000000000000 in ?? () > #85 0x0000000000000000 in ?? () > #86 0x0000000000000000 in ?? () > #87 0x0000000000000000 in ?? () > #88 0x0000000000000000 in ?? () > #89 0x0000000000000000 in ?? () > #90 0x0000000000000000 in ?? () > #91 0x0000000000000000 in ?? () > #92 0x0000000000000000 in ?? () > #93 0x0000000000000000 in ?? () > #94 0x0000000000000000 in ?? () > #95 0x0000000000000000 in ?? () > #96 0x0000000000000000 in ?? () > #97 0x0000000000000000 in ?? () > #98 0x0000000000000000 in ?? () > #99 0x0000000000000000 in ?? () > #100 0x0000000000000000 in ?? () > #101 0x0000000000000000 in ?? () > #102 0x0000000000000000 in ?? () > #103 0x0000000000000000 in ?? () > #104 0x0000000000000000 in ?? () > #105 0x0000000000000000 in ?? () > #106 0x0000000000000000 in ?? () > #107 0x0000000000000000 in ?? () > #108 0x0000000000000000 in ?? () > #109 0x0000000000000000 in ?? () > #110 0x0000000000000000 in ?? () > #111 0x0000000000000000 in ?? () > #112 0x0000000000000000 in ?? () > #113 0x0000000000000000 in ?? () > #114 0x0000000000000000 in ?? () > #115 0x0000000000000000 in ?? () > #116 0x0000000000000000 in ?? () > #117 0x0000000000000000 in ?? () > #118 0x0000000000000000 in ?? () > #119 0x0000000000000000 in ?? () > Cannot access memory at address 0xffffffffac0d7000 > (kgdb) bt full > #0 doadump () at pcpu.h:194 > No locals. > #1 0xffffff0001925000 in ?? () > No symbol table info available. > #2 0xffffffff8024c659 in boot (howto=260) at ../../../kern/kern_shutdown.c:409 > _ep = (struct eventhandler_entry *) 0xffffff0001925000 > _el = Variable "_el" is not available. > (kgdb) > _______________________________________________ > freebsd-ipfw@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw > To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org" Do you have "options INVARIANTS" in your kernel config? If no please compile it in and then get crashdump again. I guess somehow we have packet without dummynet tag inside dummynet. -- Oleg. ================================================================ === Oleg Bulyzhin -- OBUL-RIPN -- OBUL-RIPE -- oleg@rinet.ru === ================================================================