From owner-freebsd-stable@FreeBSD.ORG Wed Jun 12 10:10:54 2013 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by hub.freebsd.org (Postfix) with ESMTP id 4866031F for ; Wed, 12 Jun 2013 10:10:54 +0000 (UTC) (envelope-from se@freebsd.org) Received: from nm2-vm1.bullet.mail.ird.yahoo.com (nm2-vm1.bullet.mail.ird.yahoo.com [77.238.189.200]) by mx1.freebsd.org (Postfix) with SMTP id 850371ECF for ; Wed, 12 Jun 2013 10:10:53 +0000 (UTC) Received: from [77.238.189.52] by nm2.bullet.mail.ird.yahoo.com with NNFMP; 12 Jun 2013 10:10:51 -0000 Received: from [46.228.39.71] by tm5.bullet.mail.ird.yahoo.com with NNFMP; 12 Jun 2013 10:10:51 -0000 Received: from [127.0.0.1] by smtp108.mail.ir2.yahoo.com with NNFMP; 12 Jun 2013 10:10:51 -0000 X-Yahoo-Newman-Id: 800972.82609.bm@smtp108.mail.ir2.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: yl9XwVcVM1m8IsHU5za6gS635enxKdRVG.aynaBYujFTVn_ MBQbUlkMEw1e961T1tGzymzdgaxmvYSK8EWCW3Swujp2afnpOdv96w3okvPV 83Dp_x0yw60LQmxcFT809.DsMyUm9p9f_R3r72217UtPlDKArk158CqBXqPW 8X4MBowGOX1MU.nqjb6vrtDijnrC0cOXpoMU0v8KqfwMpzbrHyi3RPEWWfrJ c.tU6NCFeBNUBPIjlVwSTSgX5gcWdXgvmuilL91jMuvKlxWQW_cYe55BHPXP T.qmDnoI7U6EsuN4JGIzQ2boXFSjriHIUGMFB9BXkcnWSY_.wK_uTPOfquZs p8q8g66aNhQGssMX8tu3aFLgcxxwH_xv7JW9qToCX1BAWCQ_gyTFsy5ML_JX sENo3lPlwfsc2TlB_9T1oTzDrF_MHyq4QhpvFBtqVYURhUXCeU3bhPESyd57 eEhhJ2TF9d9XUn0A27eeI9M8lo82LU0wV X-Yahoo-SMTP: iDf2N9.swBDAhYEh7VHfpgq0lnq. X-Rocket-Received: from [192.168.119.11] (se@87.158.30.195 with ) by smtp108.mail.ir2.yahoo.com with SMTP; 12 Jun 2013 10:10:51 +0000 UTC Message-ID: <51B84926.2050002@freebsd.org> Date: Wed, 12 Jun 2013 12:10:46 +0200 From: Stefan Esser User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130509 Thunderbird/17.0.6 MIME-Version: 1.0 To: freebsd-stable@freebsd.org Subject: Re: Flow monitoring with PF References: <57C2DC16-7868-4C20-AB34-5B35A939D095@gsoft.com.au> <7DB382CFB050654DBFF7A39B1F8056EB1DF68293@WPEXCHMBSL1021.central.det.win> In-Reply-To: <7DB382CFB050654DBFF7A39B1F8056EB1DF68293@WPEXCHMBSL1021.central.det.win> X-Enigmail-Version: 1.5.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 Jun 2013 10:10:54 -0000 Am 12.06.2013 02:17, schrieb Scott, Brian: >> I was looking at trying out flow monitoring and I found pfflowd, but unfortunately it does not work with FreeBSD >9.0. I thought about ng_netflow but that doesn't >see my tun interface which may be related to.. >> WARNING: attempt to domain_add(netgraph) after domainfinalize() > > Noise message. I've never seen it actually mean anything. This message indicates a possible problem (leading to panics under specific circumstances). I proposed a patch to fix the panic, but was reluctant to commit it, because I knew the patch was not complete (and I was working toward a better solution). It was then taken by somebody who ignored the problems with the patch and committed against my advise. That's when I stopped working on a real fix - the committer of my (incomplete) patch owns the problem now (and is not active anymore, AFAICT). The problem is that registering a network domain after the kernel has been running (e.g. when loading Netgraph as a kernel module), data structures in the kernel need to be adjusted. AFAICR, it works as long as only one new network domain is loaded (e.g. Netgraph), but may fail if another one is loaded thereafter (this used to be triggered by ISDN, which had its own network domain but is history, now). Sorry for having nothing to add on the subject of this thread ... Regards, STefan