From owner-freebsd-questions@FreeBSD.ORG Tue Jan 29 08:04:13 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 692BA16A41B for ; Tue, 29 Jan 2008 08:04:13 +0000 (UTC) (envelope-from ccowart@rescomp.berkeley.edu) Received: from hal.rescomp.berkeley.edu (hal.Rescomp.Berkeley.EDU [169.229.70.150]) by mx1.freebsd.org (Postfix) with ESMTP id 5262713C4D9 for ; Tue, 29 Jan 2008 08:04:13 +0000 (UTC) (envelope-from ccowart@rescomp.berkeley.edu) Received: by hal.rescomp.berkeley.edu (Postfix, from userid 1225) id E48073C044C; Tue, 29 Jan 2008 00:04:12 -0800 (PST) Date: Tue, 29 Jan 2008 00:04:12 -0800 From: Christopher Cowart To: Norman Maurer Message-ID: <20080129080412.GH41095@hal.rescomp.berkeley.edu> Mail-Followup-To: Norman Maurer , freebsd-questions References: <1201592778.6811.1.camel@norman-laptop> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="RP4hPsBRExIs9wO1" Content-Disposition: inline In-Reply-To: <1201592778.6811.1.camel@norman-laptop> Organization: RSSP-IT, UC Berkeley User-Agent: Mutt/1.5.16 (2007-06-09) Cc: freebsd-questions Subject: Re: FreeBSD 6.3 racoon cpu 99,9% after some time workin X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jan 2008 08:04:13 -0000 --RP4hPsBRExIs9wO1 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jan 29, 2008 at 08:46:18AM +0100, Norman Maurer wrote: > I have some strange problem.. After racoon works some hours it seems to > "freeze" and get a cpu usage of 99,9%. The vpns don't work anymore too.. > Any idea ? By any chance do you have a large number of tunnels? We went so far as to write a daemon to watch racoon and restart it automatically. We finally ended up bumping up buffer sizes in the ipsec-tools sources and sysctl. See this thread from -net: http://lists.freebsd.org/pipermail/freebsd-net/2007-August/015046.html --=20 Chris Cowart Network Technical Lead Network & Infrastructure Services, RSSP-IT UC Berkeley --RP4hPsBRExIs9wO1 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) iQIVAwUBR57d/CPHEDszU3zYAQK7Cw//QN+ShaYyVrGV2wQG6k9/ciWCNoS138Lb ZPhsC+ATkwXLSu1CcguaNSGJ8sZnNVuo/nNr+hxMwWtz3iiilzTViZlfRXPLFJXo 7d4n/6AG4sqSEzVv5uTlqcQ7UYAD+W0ZyvjopXX0svsKX4hll/k25e+N9kBI8HJO vcgTodKOdXECpYmZnNfGo++HFNWhaTLiXVBXkMACAJ6USMWkNWM8S+EO9uSlXYHX uSjZn5Oqs2AhSxhmiT72iArWgzrZGUmzdqCBAi+MpnIi5s4LxDmNTZZVztzTTe+G 30tM8T/SwRclPk6NjoAk/iIBjI/C8FbbywArPYwBITjFNYPVWX3aZV1xEM8XAPYf 9u9v/Nlr1E2t8idmLamuShxfhFXkJrBwywee+1+aFwWupKKifouvn0GLhMRP6XIH +y6y5qws/WTcTU3mxm6aFnOt87xLAi+XPSuLh6ltVOPKjE+0wlDv0bMWmwbJuIzE Cgai+ICHCbgaQPWQq7gI2jpgq8O29qpPYNsikF8nbb08XYdJnLcfY7Vbe6sIOskH Efv2iWpjHLjYtnTdyrjsaFuMO3IQaWQXUOed7gddc998aC7ypeOEcXOhhmrrdRTA peqiHMpPSfoQ5Aa32ClhN/Yp4d45vKTTRGS4pf/h9O3Y5HVq4a0kP03Y5OLkar5G KcYtGTjYuNg= =LvDd -----END PGP SIGNATURE----- --RP4hPsBRExIs9wO1--