From owner-freebsd-net Wed Oct 23 20:39:26 2002 Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0F82437B401 for ; Wed, 23 Oct 2002 20:39:25 -0700 (PDT) Received: from pursued-with.net (adsl-66-125-9-242.dsl.sndg02.pacbell.net [66.125.9.242]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8116B43E6E for ; Wed, 23 Oct 2002 20:39:19 -0700 (PDT) (envelope-from Kevin_Stevens@pursued-with.net) Received: from pursued-with.net (fffinch [192.168.168.101]) by pursued-with.net (8.12.6/8.12.5) with ESMTP id g9O3dIIB011778; Wed, 23 Oct 2002 20:39:19 -0700 (PDT) (envelope-from Kevin_Stevens@pursued-with.net) Date: Wed, 23 Oct 2002 20:39:20 -0700 Subject: Re: Machine becomes non-responsive, only ^T shows it as alive under l oad: IPFW, TCP proxying Content-Type: text/plain; charset=US-ASCII; format=flowed Mime-Version: 1.0 (Apple Message framework v546) Cc: "'freebsd-net@freebsd.org'" To: Don Bowman From: Kevin Stevens In-Reply-To: Message-Id: <2E426952-E702-11D6-B91F-003065715DA8@pursued-with.net> Content-Transfer-Encoding: 7bit X-Mailer: Apple Mail (2.546) Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wednesday, Oct 23, 2002, at 19:41 US/Pacific, Don Bowman wrote: > I have an application listening on an ipfw 'fwd' rule. > I'm sending ~3K new sessions per second to it. It > has to turn around and issue some of these out as > a proxy, in response to which some of them the destination > host won't exist. > > I have RST limiting on. I'm seeing messages like: > Limiting open port RST response from 1312 to 200 packets per second > > come out sometimes. > > After a while of such operation (~1/2 hour), the machine > becomes unresponsive: the network interfaces no longer respond, > the serial console responds to ^T yielding a status line, > but ^C etc do nothing, and the bash which was there won't > give me a prompt. > > ^T indicates my bash is running, 0% of CPU in use, etc. > > I have no choice but to power-cycle it. > > Any suggestions for how one would start debugging this to > find out where its stuck, and how? At a guess, you need to tune the state-table retention time down. KeS To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message