From owner-freebsd-pf@FreeBSD.ORG Thu Aug 2 07:03:29 2007 Return-Path: Delivered-To: freebsd-pf@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3C21F16A41F for ; Thu, 2 Aug 2007 07:03:29 +0000 (UTC) (envelope-from patpro@patpro.net) Received: from smtp1-g19.free.fr (smtp1-g19.free.fr [212.27.42.27]) by mx1.freebsd.org (Postfix) with ESMTP id CE99713C47E for ; Thu, 2 Aug 2007 07:03:28 +0000 (UTC) (envelope-from patpro@patpro.net) Received: from smtp1-g19.free.fr (localhost.localdomain [127.0.0.1]) by smtp1-g19.free.fr (Postfix) with ESMTP id 02CEC1AB2DF; Thu, 2 Aug 2007 09:03:28 +0200 (CEST) Received: from boleskine.patpro.net (boleskine.patpro.net [82.235.12.223]) by smtp1-g19.free.fr (Postfix) with ESMTP id C70831AB2DD; Thu, 2 Aug 2007 09:03:27 +0200 (CEST) Received: from [192.168.0.2] (unknown [192.168.0.2]) by boleskine.patpro.net (Postfix) with ESMTP id 545AE1CC0E; Thu, 2 Aug 2007 09:03:27 +0200 (CEST) In-Reply-To: <20070802062413.GB32306@insomnia.benzedrine.cx> References: <611A93D3-A392-493B-80ED-4C5AC77AA77A@patpro.net> <20070802062413.GB32306@insomnia.benzedrine.cx> Mime-Version: 1.0 (Apple Message framework v752.2) Content-Type: text/plain; charset=ISO-8859-1; delsp=yes; format=flowed Message-Id: Content-Transfer-Encoding: quoted-printable From: Patrick Proniewski Date: Thu, 2 Aug 2007 09:03:26 +0200 To: Daniel Hartmeier X-Mailer: Apple Mail (2.752.2) Cc: Greg Hennessy , freebsd-pf@freebsd.org Subject: Re: strange "throttling" issue with pf on xDSL connection X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Aug 2007 07:03:29 -0000 Hi, On 02 ao=FBt 2007, at 08:24, Daniel Hartmeier wrote: > Enable pf debug logging (pfctl -xm), note output of pfctl -si, =20 > reproduce > the problem. Then run pfctl -si again. See /var/log/messages for lines > from pf. Post all three outputs ;) before reproducing the problem: Interface Stats for fxp0 IPv4 IPv6 Bytes In 1317430142 0 Bytes Out 37184782 0 Packets In Passed 952956 0 Blocked 13070 0 Packets Out Passed 627949 0 Blocked 51 0 State Table Total Rate current entries 67 searches 6108082 50.7/s inserts 18628 0.2/s removals 18561 0.2/s Counters match 40003 0.3/s bad-offset 0 0.0/s fragment 0 0.0/s short 0 0.0/s normalize 0 0.0/s memory 0 0.0/s bad-timestamp 0 0.0/s congestion 0 0.0/s ip-option 0 0.0/s proto-cksum 0 0.0/s state-mismatch 35 0.0/s state-insert 0 0.0/s state-limit 0 0.0/s src-limit 0 0.0/s synproxy 0 0.0/s after reproducing the problem: Interface Stats for fxp0 IPv4 IPv6 Bytes In 1328709722 0 Bytes Out 37542784 0 Packets In Passed 960543 0 Blocked 13076 0 Packets Out Passed 634137 0 Blocked 51 0 State Table Total Rate current entries 52 searches 6124426 50.8/s inserts 18636 0.2/s removals 18584 0.2/s Counters match 40017 0.3/s bad-offset 0 0.0/s fragment 0 0.0/s short 0 0.0/s normalize 0 0.0/s memory 0 0.0/s bad-timestamp 0 0.0/s congestion 0 0.0/s ip-option 0 0.0/s proto-cksum 0 0.0/s state-mismatch 35 0.0/s state-insert 0 0.0/s state-limit 0 0.0/s src-limit 0 0.0/s synproxy 0 0.0/s nothing in /var/log/message nor in /var/log/debug.log regards, patpro