Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 4 Apr 2002 09:47:37 -0500 
From:      "Morse, Richard E." <REMORSE@PARTNERS.ORG>
To:        "'questions@freebsd.org'" <questions@freebsd.org>
Subject:   Network Issues, again...
Message-ID:  <375F68784081D511908A00508BE3BB17DDDD34@phsexch22.mgh.harvard.edu>

next in thread | raw e-mail | index | archive | help
Hi!  About two weeks ago (~20th of March) I had a problem with my FreeBSD backup
server.  It's an older box, but the FreeBSD installed is 4.5 release.  I haven't
updated it beyond that though -- I'm not tracking -STABLE, or 4_5_REL_ENG (or
whatever it's actually called).  The problem that I've run into is that at some
point last night (about an hour after the backup started, from what I can tell),
the box dropped off the network.

I cannot ping from it: I get the error message "ping: sendto: no buffer space
available".  Someone suggested that this might be due to a shortage of "mbufs".
Running `netstat -m`, as he suggested, gives the following output:

	51/320/4096 mbufs in use (current/peak/max)
		2 mbufs allocated to data
		49 mbufs allocated to packet headers
	0/310/1024 mbuf clusters in use (current/peak/max)
	700 Kbytes allocated to network (22% of mb_map in use)
	0 requests for memory denied
	0 requests for memory delayed
	0 calls to protocol drain routines

Based on this output, I don't think that the mbufs are the problem.

As before, once I ran tcpdump, I was able to ping again.  Running TCP dump, I
received a notification "/kernel: ep0: promiscuous mode enabled".  The output
from tcpdump (with no options -- I didn't know which ones I should use), is
included below.  The computer in question is einstein.  Once I stopped tcpdump,
I got another kernel message saying "promiscuous mode disabled".  At this point,
I was able to contact the network again.

Does anyone else have any ideas?

Thanks,
Ricky Morse


>09:22:35.868532 84b79c00.00:04:c1:7c:9d:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>      ipx-sap-resp[|ipx 448]
>09:22:35.886996 84b79c00.00:04:c1:a2:c2:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
[snip]
>09:22:36.316391 84b79c00.00:04:c1:7c:9d:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:36.327847 132.183.156.2.1985 > ALL-ROUTERS.MCAST.NET.1985:  udp 20 [tos
0xc0] 
>09:22:36.343118 84b79c00.00:04:c1:a2:c2:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:36.372409 84b79c00.00:04:c1:7c:9d:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
[snip]
>09:22:36.679448 84b79c00.00:04:c1:a2:c2:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:36.688345 37.88.9.rtmp > 0.0.rtmp: at-rtmp 523
>09:22:36.708375 84b79c00.00:04:c1:7c:9d:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:36.726053 mgw156rtr-3.mgh.harvard.edu.1985 > ALL-ROUTERS.MCAST.NET.1985:

>	udp 20 [tos 0xc0] 
>09:22:36.735097 84b79c00.00:04:c1:a2:c2:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:36.764373 84b79c00.00:04:c1:7c:9d:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
[snip]
>09:22:36.903176 84b79c00.00:04:c1:a2:c2:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:36.930216 arp who-has rtp000045rts.mgh.harvard.edu tell
einstein.mgh.harvard.edu
>09:22:36.932361 84b79c00.00:04:c1:7c:9d:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:36.932845 arp reply rtp000045rts.mgh.harvard.edu is-at 0:0:c:7:ac:9c
>09:22:36.932934 einstein.mgh.harvard.edu.1608 > ns.mgh.harvard.edu.domain:  
>	16798+ PTR? 2.0.0.224.in-addr.arpa. (40)
>09:22:36.959221 84b79c00.00:04:c1:a2:c2:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
[snip]
>09:22:37.071085 84b79c00.00:04:c1:a2:c2:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:37.094181 ns.mgh.harvard.edu.domain > einstein.mgh.harvard.edu.1608:  
>	16798* 1/3/2 PTR[|domain] (DF)
>09:22:37.095391 einstein.mgh.harvard.edu.1609 > ns.mgh.harvard.edu.domain:  
>	16799+ PTR? 2.156.183.132.in-addr.arpa. (44)
>09:22:37.097281 ns.mgh.harvard.edu.domain > einstein.mgh.harvard.edu.1609:  
>	16799 NXDomain*- 0/1/0 (137) (DF)
>09:22:37.108341 84b79c00.00:04:c1:7c:9d:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:37.127112 84b79c00.00:04:c1:a2:c2:02.452 >
84b79c00.ff:ff:ff:ff:ff:ff.452:
>	ipx-sap-resp[|ipx 448]
>09:22:37.127268 einstein.mgh.harvard.edu.1610 > ns.mgh.harvard.edu.domain:  
>	16800+ PTR? 3.156.183.132.in-addr.arpa. (44)
>09:22:37.129348 ns.mgh.harvard.edu.domain > einstein.mgh.harvard.edu.1610:  
>	16800*- 1/3/3 (220) (DF)





-----------------------------------------------------
Richard Morse                    System Administrator 
MGH Biostatistics Center      50 Staniford St. Rm 560
remorse@partners.org                     617/724-9830

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?375F68784081D511908A00508BE3BB17DDDD34>