From owner-freebsd-stable@FreeBSD.ORG Fri Apr 28 15:57:11 2006 Return-Path: X-Original-To: stable@freebsd.org Delivered-To: freebsd-stable@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1660C16A401 for ; Fri, 28 Apr 2006 15:57:11 +0000 (UTC) (envelope-from dwmalone@maths.tcd.ie) Received: from salmon.maths.tcd.ie (salmon.maths.tcd.ie [134.226.81.11]) by mx1.FreeBSD.org (Postfix) with SMTP id 3522443D45 for ; Fri, 28 Apr 2006 15:57:09 +0000 (GMT) (envelope-from dwmalone@maths.tcd.ie) Received: from walton.maths.tcd.ie ([134.226.81.10] helo=walton.maths.tcd.ie) by salmon.maths.tcd.ie with SMTP id ; 28 Apr 2006 16:57:09 +0100 (BST) Date: Fri, 28 Apr 2006 16:57:08 +0100 From: David Malone To: Stephen Clark Message-ID: <20060428155708.GA82384@walton.maths.tcd.ie> References: <44522D6C.3000107@seclark.us> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <44522D6C.3000107@seclark.us> User-Agent: Mutt/1.5.6i Sender: dwmalone@maths.tcd.ie Cc: stable@freebsd.org Subject: Re: Fast IPSEC issue X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 28 Apr 2006 15:57:11 -0000 On Fri, Apr 28, 2006 at 10:57:48AM -0400, Stephen Clark wrote: > Apr 28 10:44:48 J301001 kernel: gre45: gre_output: recursively called > too many times(2) This means a packet was fed into if_gre while if_gre was also active. In the case of FAST_IPSEC this may be normal if you have packets moving between tunnels. You can change how many levels of recursive call are permitted by changing the sysctl: net.link.gre.max_nesting Try making it slightly larger and see if the messages stop. David.