Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 28 Apr 2006 16:57:08 +0100
From:      David Malone <dwmalone@maths.tcd.ie>
To:        Stephen Clark <Stephen.Clark@seclark.us>
Cc:        stable@freebsd.org
Subject:   Re: Fast IPSEC issue
Message-ID:  <20060428155708.GA82384@walton.maths.tcd.ie>
In-Reply-To: <44522D6C.3000107@seclark.us>
References:  <44522D6C.3000107@seclark.us>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Apr 28, 2006 at 10:57:48AM -0400, Stephen Clark wrote:
> Apr 28 10:44:48 J301001 kernel: gre45: gre_output: recursively called 
> too many times(2)

This means a packet was fed into if_gre while if_gre was also active.
In the case of FAST_IPSEC this may be normal if you have packets moving
between tunnels. You can change how many levels of recursive call
are permitted by changing the sysctl:

	net.link.gre.max_nesting

Try making it slightly larger and see if the messages stop.

	David.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060428155708.GA82384>