Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Sep 2001 08:06:31 -0700
From:      Jason DiCioccio <geniusj@bluenugget.net>
To:        "David W. Chapman Jr." <dwcjr@inethouston.net>
Cc:        Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>, Mike Tancsa <mike@sentex.net>, stable@FreeBSD.ORG
Subject:   Re: ipnat bug
Message-ID:  <20010905080631.A75031@bluenugget.net>
In-Reply-To: <20010905090355.I45611@leviathan.inethouston.net>
References:  <20010905084833.F45611@leviathan.inethouston.net> <200109051359.f85Dxrw14875@cwsys.cwsent.com> <20010905090355.I45611@leviathan.inethouston.net>

next in thread | previous in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
On Wed, Sep 05, 2001 at 09:03:55AM -0500, David W. Chapman Jr. wrote:
> On Wed, Sep 05, 2001 at 06:59:16AM -0700, Cy Schubert - ITSD Open Systems Group wrote:
> > In message <20010905084833.F45611@leviathan.inethouston.net>, "David W. 
> > Chapman
> >  Jr." writes:
> > > I'm not sure what the stats say, because since you told me what to 
> > > look for I have no been able to reproduce it.  Sometimes it happens 
> > > whithin a day, sometimes a week or two.
> > 
> > You might want to try posting this on the IP Filter mailing list:  
> > ipfilter@coombs.anu.edu.au.  Darren Reed, author and maintainer of IP 
> > Filter, is quite active on that ilst.
> > 
> > 
> Thanks, I plan on it once the bug shows it self again and I can 
> provide the propper output showing so.
> 
> -- 
> David W. Chapman Jr.

I was actually heading towards state table size issues by the way.. But it does
not actually look like that is the issue (since ipnat -CF would not fix this).

Worth a shot though I suppose.. When it happens again look in the ipfstat -s for
the 'Maximum' value, it shouldn't be above 0.  Of course it's worth looking at
everything that others have suggested too.  Unless you have no stateful rules ;)
Good luck, let us know when it happens again :-)

Cheers,
-JD-

-- 
Jason DiCioccio - geniusj@bsd.st - PGP Key @ http://bsd.st/~geniusj/pgpkey.asc

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: PGP 6.5.8

iQA/AwUBO5Y/c9NQlZYENnwIEQI4dACg9z0nZWIi8UPiUk0fYL6DHKpc4cIAmwZ6
XZXN8zCb8wA4FAhxDxczzYuJ
=QhxO
-----END PGP SIGNATURE-----

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010905080631.A75031>