Date: Wed, 30 Apr 2008 04:19:00 -0400 From: Tom Uffner <tom@uffner.com> To: freebsd-pf@freebsd.org Subject: Re: nfs send errors Message-ID: <48182B74.3050700@uffner.com> In-Reply-To: <4817E233.5020200@uffner.com> References: <48179DA2.10303@uffner.com> <010601c8aa4b$f067e930$d137bb90$@net> <4817E233.5020200@uffner.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Tom Uffner wrote: > changed my scrub rule to "scrub all no-df fragment reassemble" > > no effect. > > if it makes difference, the nfs server runs debian stable w/ linux 2.6.18 > kernel, and my client is FreeBSD 8.0-CURRENT #160: Tue Apr 8 07:49:18 > EDT 2008 adding random-id as discussed in pf.conf under no-df does not help either. it appears that somebody is seeing a FIN followed by a timeout waiting for an ACK, because if i watch the state table i see this before the state goes away completely: all tcp 10.69.69.60:841 -> 10.69.69.21:2049 ESTABLISHED:FIN_WAIT_2 does this mean the server closed the connection? it can't mean my client did, otherwise it wouldn't be trying to send, right? is there an explanation somewhere of what all the fields in a pfctl -ss (and pfctl -vvv -ss) mean?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?48182B74.3050700>