From owner-freebsd-net@FreeBSD.ORG Mon Sep 24 13:51:27 2007 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 55CF916A420 for ; Mon, 24 Sep 2007 13:51:27 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: from rv-out-0910.google.com (rv-out-0910.google.com [209.85.198.188]) by mx1.freebsd.org (Postfix) with ESMTP id 1811313C459 for ; Mon, 24 Sep 2007 13:51:27 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: by rv-out-0910.google.com with SMTP id l15so1265207rvb for ; Mon, 24 Sep 2007 06:51:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=XqpGgheV0QWbo5ft+TmTVGjayJpLfehRFksHODTYDQU=; b=fUScWnFoeFBGxjvcT6vKpFkYAOnXsMb3iNolZd++Onx/qntwz7g6Wi4swtjF4JUECXMPB+4Ce7U8U5ffL+63qVCJCLwOa4MbuWZ9nxRBdBFTlCxlx3+ECgO+sLxMYqzTKvURl/hwzP+IPrw+73a2qwtLKCV2NCPUuPuFdXAxUUU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=E/Yn5kI+GjyUGERIk/9NVRTDMEh2xmqIUos9qDMyzkFisxGp0roqY8GtGcqf2ZmW49fdnjaJZZbavWoCj0+5q+CV4GE1YqxVvr7wgJeyCRbh0qxBDgDDRVno8FfEJ19kxDYwuMnN6F9vqOqNcPFJJJ8vMkgSnTLaTpU+D4Q/7ho= Received: by 10.114.196.1 with SMTP id t1mr6882323waf.1190641886641; Mon, 24 Sep 2007 06:51:26 -0700 (PDT) Received: by 10.115.109.10 with HTTP; Mon, 24 Sep 2007 06:51:26 -0700 (PDT) Message-ID: Date: Mon, 24 Sep 2007 09:51:26 -0400 From: "Scott Ullrich" To: "Scott Ullrich" , "VANHULLEBUS Yvan" , freebsd-net@freebsd.org In-Reply-To: <20070924075252.GN19429@hal.rescomp.berkeley.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20070818102803.GA1319@jayce.zen.inc> <20070924075252.GN19429@hal.rescomp.berkeley.edu> Cc: Subject: Re: Racoon(ipsec-tools) enters sbwait state or 100% CPU utilization quite often on RELENG_1_2 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 24 Sep 2007 13:51:27 -0000 On 9/24/07, Christopher Cowart wrote: > On Sat, Aug 18, 2007 at 03:58:16PM -0400, Scott Ullrich wrote: > How are you detecting when racoon gets wedged? I'd like to replicate > that on our systems. Our script is primitive at best but does seem to do the job okay: http://pfsense.com/cgi-bin/cvsweb.cgi/pfSense/usr/local/sbin/racoon_watch.sh?rev=1.8;content-type=text%2Fplain Let me know if it helps. This generally well detect the problem quick enough to minimize downtime between the tunnels (in our experience). Scott