From owner-freebsd-questions  Fri Sep 27 14:14:14 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 26EAD37B401
	for <freebsd-questions@FreeBSD.ORG>; Fri, 27 Sep 2002 14:14:13 -0700 (PDT)
Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101])
	by mx1.FreeBSD.org (Postfix) with ESMTP id A84C443E4A
	for <freebsd-questions@FreeBSD.ORG>; Fri, 27 Sep 2002 14:14:12 -0700 (PDT)
	(envelope-from dan@dan.emsphone.com)
Received: (from dan@localhost)
	by dan.emsphone.com (8.12.6/8.12.5) id g8RLECRx043788;
	Fri, 27 Sep 2002 16:14:12 -0500 (CDT)
	(envelope-from dan)
Date: Fri, 27 Sep 2002 16:14:12 -0500
From: Dan Nelson <dnelson@allantgroup.com>
To: Peter Brezny <pbrezny@skyrunner.net>
Cc: freebsd-questions@FreeBSD.ORG
Subject: Re: Kernel log question "pullup failed"
Message-ID: <20020927211411.GD7711@dan.emsphone.com>
References: <HDEBKOFAJCKIJIDMEINCAELIEMAA.pbrezny@skyrunner.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <HDEBKOFAJCKIJIDMEINCAELIEMAA.pbrezny@skyrunner.net>
X-OS: FreeBSD 5.0-CURRENT
X-message-flag: Outlook Error
User-Agent: Mutt/1.5.1i
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

In the last episode (Sep 27), Peter Brezny said:
> Has anyone seen this before?
> 
> > pullup failed
> 
> what is it?

It's an ipfw log message.  It could certainly stand to be a bit
clearer :)

From man ipfw:

FINE POINTS
     o   There are circumstances where fragmented datagrams are
         unconditionally dropped.  TCP packets are dropped if they do
         not contain at least 20 bytes of TCP header, UDP packets are
         dropped if they do not contain a full 8 byte UDP header, and
         ICMP packets are dropped if they do not contain 4 bytes of
         ICMP header, enough to specify the ICMP type, code, and
         checksum.  These packets are simply logged as ``pullup
         failed'' since there may not be enough good data in the packet
         to produce a meaningful log entry.



-- 
	Dan Nelson
	dnelson@allantgroup.com

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message