From owner-freebsd-current@FreeBSD.ORG Tue Jul 3 13:07:10 2007 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 1CE9116A400 for ; Tue, 3 Jul 2007 13:07:10 +0000 (UTC) (envelope-from ianf@clue.co.za) Received: from munchkin.clue.co.za (munchkin.clue.co.za [66.219.59.160]) by mx1.freebsd.org (Postfix) with ESMTP id DAB5413C483 for ; Tue, 3 Jul 2007 13:07:09 +0000 (UTC) (envelope-from ianf@clue.co.za) DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=20070313; d=clue.co.za; h=Received:Received:Received:To:cc:From:Subject:In-Reply-To:X-Attribution:Date:Message-Id; b=IqtxLnt20+XGRn5Wy1p+pq882xhZYAN5v1JCC3Tpj1+c3G0Q0JdvAuTchlHxlJjy75BtePNE17UTePVpwg0nSIDBQpvk2eIQHSyL3M4lx1vwHK0oXaBqrz21YAxuVC/qNpG8kjrKN8zbW+FNNSLTxanHx8DQwIK3oGdFwJ5Xen96X1N3uD7djd26kPLicGd4d3eSmQilI8sXgw1rjwAKrA0s3YJngHCmiorF0Egx/TRfZFgDQui6M6N0/d4Ri5E8; Received: from uucp by munchkin.clue.co.za with local (Exim 4.66) (envelope-from ) id 1I5i61-0000cN-0K; Tue, 03 Jul 2007 13:07:09 +0000 Received: from atlas.clue.co.za ([10.0.0.18] helo=clue.co.za) by urchin.clue.co.za with esmtpa (Exim 4.66) (envelope-from ) id 1I5i5b-000892-7T; Tue, 03 Jul 2007 13:06:43 +0000 Received: from localhost ([127.0.0.1] helo=clue.co.za) by clue.co.za with esmtp (Exim 4.67 (FreeBSD)) (envelope-from ) id 1I5i5Z-0006fa-VE; Tue, 03 Jul 2007 15:06:41 +0200 To: bu7cher@yandex.ru From: Ian FREISLICH In-Reply-To: Message from "Andrey V. Elsukov" of "Tue, 03 Jul 2007 16:08:47 +0400." <468A3C4F.000001.30479@webmail12.yandex.ru> X-Attribution: BOFH Date: Tue, 03 Jul 2007 15:06:41 +0200 Message-Id: Cc: rwatson@freebsd.org, freebsd-current@freebsd.org Subject: Re: Panic in ipfw X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Jul 2007 13:07:10 -0000 "Andrey V. Elsukov" wrote: > Hi, Ian. > > > I got this panic yesterday on a fairly busy firewall. I have some > > private patches to ip_fw2.c and to the em driver (see the earlier > > "em0 hijacking traffic to port 623" thread). I don't think this > > panic is a result of those changes. > > > It occurred round about the time an address was added to an interface. > > I have a patch that can help you (i guess..). > Can you test this patch? > > http://butcher.heavennet.ru/patches/kernel/inaddr_locking/ Thanks. Wow, that looks like it touches a lot more than just ipfw. It took about 1.5 years of production at 2.3 billion backets a day to trigger this condition twice. It's going to be difficult to tell if this patch fixes the problem. Ian -- Ian Freislich