From owner-freebsd-pf@FreeBSD.ORG Tue Aug 28 00:10:10 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BEE4816A418 for ; Tue, 28 Aug 2007 00:10:10 +0000 (UTC) (envelope-from bill.marquette@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.191]) by mx1.freebsd.org (Postfix) with ESMTP id 2847F13C48D for ; Tue, 28 Aug 2007 00:10:09 +0000 (UTC) (envelope-from bill.marquette@gmail.com) Received: by nf-out-0910.google.com with SMTP id b2so1329780nfb for ; Mon, 27 Aug 2007 17:10:08 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=tfeY6HuBDRd5SOuIiR9t2+q3xgrwbQ7XG3StkamsfpvGOozt3A5H9i6E75MQRrrj+nJQEVStCsMXd1jDFXK174pEKU6Aif8OaR7WAS9HkkCXVPQ1iKt3j3NTHjj7ntjO/jIwan80E8kQeGdrRPygUOFt2WiNUJ1QVyvDR92uF/8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=OanO3RE7UYI7CduDPBUHXHV4wQ8GJvZMx8AbHI4MenZtV7jPbGUFkDdqmGFgUufuqYqY7Y9raCo5/b7hg3YOkbfnmxF345iXafoN8jWg1AhUd9ldI07UrsxaA2mTn7oVSODuuYpOaqb1psvP7/UqDgVjYBNXyuRdemT1S8RXsOg= Received: by 10.78.21.7 with SMTP id 7mr4452182huu.1188259808118; Mon, 27 Aug 2007 17:10:08 -0700 (PDT) Received: by 10.78.15.17 with HTTP; Mon, 27 Aug 2007 17:10:07 -0700 (PDT) Message-ID: <55e8a96c0708271710n82428eet8c714b9e8d30a3aa@mail.gmail.com> Date: Mon, 27 Aug 2007 19:10:07 -0500 From: "Bill Marquette" To: "Max Laier" In-Reply-To: <200708230006.32294.max@love2party.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <55e8a96c0708221242h2d5e7d15q847e6fac7cf60554@mail.gmail.com> <200708230006.32294.max@love2party.net> Cc: freebsd-pf@freebsd.org Subject: Re: pfsync errors X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2007 00:10:10 -0000 On 8/22/07, Max Laier wrote: > There are two reasons why we increase the send error counter. Either the > internal deferred work queue is full or ip_output fails. Could you > locate "pfsyncstats.pfsyncs_oerrors++" in your source code and replace > either occurrence with a printf(). Maybe use the attached. This way we > will know what exactly fails and if it is ip_output, why. Here's what we get with the patch: pfsync_senddef: ip_output 64 # netstat -s -p pfsync pfsync: 1264507 packets received (IPv4) 0 packets received (IPv6) 0 packets discarded for bad interface 0 packets discarded for bad ttl 0 packets shorter than header 0 packets discarded for bad version 0 packets discarded for bad HMAC 0 packets discarded for bad action 0 packets discarded for short packet 0 states discarded for bad values 0 stale states 115608 failed state lookup/inserts 86591 packets sent (IPv4) 0 packets sent (IPv6) 0 send failed due to mbuf memory error 37231 send error and a dmesg # dmesg Copyright (c) 1992-2007 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD is a registered trademark of The FreeBSD Foundation. FreeBSD 6.2-RELEASE-p6 #0: Mon Aug 27 17:24:24 UTC 2007 root@hostname.somedomain.com:/usr/obj/usr/src/sys/HA-PFOPTS-SYNCDEBUG Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Xeon(TM) CPU 2.80GHz (2790.97-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0xf27 Stepping = 7 Features=0xbfebfbff Features2=0x4400> Logical CPUs per core: 2 real memory = 1073717248 (1023 MB) avail memory = 1041539072 (993 MB) ACPI APIC Table: MADT: Forcing active-low polarity and level trigger for SCI ioapic0 irqs 0-15 on motherboard ioapic1 irqs 16-31 on motherboard ioapic2 irqs 32-47 on motherboard ioapic3 irqs 48-63 on motherboard kbd1 at kbdmux0 ath_hal: 0.9.17.2 (AR5210, AR5211, AR5212, RF5111, RF5112, RF2413, RF5413) acpi0: on motherboard acpi0: Power Button (fixed) Timecounter "ACPI-safe" frequency 3579545 Hz quality 1000 acpi_timer0: <32-bit timer at 3.579545MHz> port 0x920-0x923 on acpi0 cpu0: on acpi0 pcib0: on acpi0 pci0: on pcib0 pci0: at device 3.0 (no driver attached) pci0: at device 4.0 (no driver attached) pci0: at device 4.2 (no driver attached) isab0: at device 15.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x2000-0x200f at device 15.1 on pci0 ata0: on atapci0 ata1: on atapci0 ohci0: mem 0xf5ef0000-0xf5ef0fff irq 7 at device 15.2 on pci0 ohci0: [GIANT-LOCKED] usb0: OHCI version 1.0, legacy support usb0: SMM does not respond, resetting usb0: on ohci0 usb0: USB revision 1.0 uhub0: (0x1166) OHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 4 ports with 4 removable, self powered pcib1: on acpi0 pci1: on pcib1 ciss0: port 0x3000-0x30ff mem 0xf7cc0000-0xf7cfffff,0xf7bf0000-0xf7bf3fff irq 30 at device 3.0 on pci1 ciss0: [GIANT-LOCKED] pcib2: on acpi0 pci2: on pcib2 pcib3: on acpi0 pci3: on pcib3 em0: port 0x4000-0x403f mem 0xf7de0000-0xf7dfffff irq 20 at device 1.0 on pci3 em0: Ethernet address: 00:07:e9:10:d6:58 em1: port 0x4040-0x407f mem 0xf7dc0000-0xf7ddffff irq 21 at device 1.1 on pci3 em1: Ethernet address: 00:07:e9:10:d6:59 pcib4: on acpi0 pci6: on pcib4 em2: port 0x5000-0x503f mem 0xf7fe0000-0xf7ffffff,0xf7f80000-0xf7fbffff irq 24 at device 1.0 on pci6 em2: Ethernet address: 00:04:23:a7:0f:0e em3: port 0x5040-0x507f mem 0xf7f60000-0xf7f7ffff,0xf7f00000-0xf7f3ffff irq 25 at device 1.1 on pci6 em3: Ethernet address: 00:04:23:a7:0f:0f pci6: at device 30.0 (no driver attached) acpi_tz0: on acpi0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: model Generic PS/2 mouse, device ID 0 sio0: port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 sio0: type 16550A fdc0: port 0x3f2-0x3f5 irq 6 drq 2 on acpi0 fdc0: [FAST] fd0: <1440-KB 3.5" drive> on fdc0 drive 0 pmtimer0 on isa0 orm0: at iomem 0xc0000-0xc7fff,0xc8000-0xcbfff,0xee000-0xeffff on isa0 ppc0: parallel port not found. sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=0x300> sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Timecounter "TSC" frequency 2790968808 Hz quality 800 Timecounters tick every 1.000 msec acd0: CDROM at ata0-master PIO4 da0 at ciss0 bus 0 target 0 lun 0 da0: Fixed Direct Access SCSI-0 device da0: 135.168MB/s transfers da0: 34727MB (71122560 512 byte sectors: 255H 32S/T 8716C) Trying to mount root from ufs:/dev/da0s2a pfsync_senddef: ip_output 64