From owner-freebsd-pf@FreeBSD.ORG Tue Aug 28 20:44:13 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8C36416A420 for ; Tue, 28 Aug 2007 20:44:13 +0000 (UTC) (envelope-from bill.marquette@gmail.com) Received: from nf-out-0910.google.com (nf-out-0910.google.com [64.233.182.187]) by mx1.freebsd.org (Postfix) with ESMTP id E6C2613C480 for ; Tue, 28 Aug 2007 20:44:12 +0000 (UTC) (envelope-from bill.marquette@gmail.com) Received: by nf-out-0910.google.com with SMTP id b2so1586665nfb for ; Tue, 28 Aug 2007 13:44:11 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=i2hGVqTrkRv+YGSG1A3JcDW3TgdFtkDesGq75KO+xUk2r4e7talLEHhewL941ELzlC1KAk2Hq5by28iF4TA95mOFFTjWCXhMPBtD5hHyumN3ismhNukzz96OLRK13e62tObkT6JqEgg7JjDQZ/lOJ1t4PKY38IVFj4wQpmYChR4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=bning5erZuiw/k3r04TxoeOtja9X+dEnHrW1PwKtjFYiBCVUcBGbVU2zuWuS+CrxB+1bqhP8bywtL6Xsj1sYgbfC0OKtE299mEOHaq56Ws1UWfEEQjNpAd2Dn5YSBCnnI3lWVLpCA1VBqZDVQnjibqu4FXVeShUGckdW7KRgXD4= Received: by 10.78.186.9 with SMTP id j9mr5221525huf.1188333851045; Tue, 28 Aug 2007 13:44:11 -0700 (PDT) Received: by 10.78.15.17 with HTTP; Tue, 28 Aug 2007 13:44:10 -0700 (PDT) Message-ID: <55e8a96c0708281344y62bbb152k3f2a7e9d375a2acd@mail.gmail.com> Date: Tue, 28 Aug 2007 15:44:10 -0500 From: "Bill Marquette" To: "Max Laier" In-Reply-To: <55e8a96c0708272114n42c0d9e7h675d1a9043bf3d80@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <55e8a96c0708221242h2d5e7d15q847e6fac7cf60554@mail.gmail.com> <200708230006.32294.max@love2party.net> <55e8a96c0708271710n82428eet8c714b9e8d30a3aa@mail.gmail.com> <200708280223.27279.max@love2party.net> <55e8a96c0708272114n42c0d9e7h675d1a9043bf3d80@mail.gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: pfsync errors X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Aug 2007 20:44:13 -0000 On 8/27/07, Bill Marquette wrote: > > > Here's what we get with the patch: > > > pfsync_senddef: ip_output 64 > > > > that's EHOSTDOWN ... that's strange. Are you using syncpeer? After converting both sides to using syncpeer, I now got this in my dmesg after reboot: Trying to mount root from ufs:/dev/da0s2a pfsync_senddef: ip_output 65 pfsync_senddef: ip_output 65 $ netstat -s -ppfsync && sleep 1 && netstat -s -ppfsync pfsync: 699811 packets received (IPv4) 0 packets received (IPv6) 0 packets discarded for bad interface 0 packets discarded for bad ttl 0 packets shorter than header 0 packets discarded for bad version 0 packets discarded for bad HMAC 0 packets discarded for bad action 0 packets discarded for short packet 0 states discarded for bad values 0 stale states 61740 failed state lookup/inserts 46728 packets sent (IPv4) 0 packets sent (IPv6) 0 send failed due to mbuf memory error 23020 send error pfsync: 704677 packets received (IPv4) 0 packets received (IPv6) 0 packets discarded for bad interface 0 packets discarded for bad ttl 0 packets shorter than header 0 packets discarded for bad version 0 packets discarded for bad HMAC 0 packets discarded for bad action 0 packets discarded for short packet 0 states discarded for bad values 0 stale states 62032 failed state lookup/inserts 47070 packets sent (IPv4) 0 packets sent (IPv6) 0 send failed due to mbuf memory error 23221 send error The other pfsyncstats.pfsyncs_oerrors++ is after a IF_HANDOFF macro, I traced it back to if_handoff() in if.c, but I'm not sure how to track it down any further as it look like it's _IF_QFULL(ifq) that's triggering the return 0. I'm going to toy with some settings for the em(4) driver in loader.conf and see if I can raise the txd and rxd descriptors since we're not running on 82542 or 82543 chipped hardware we can go above 256 descriptors. --Bill