Date: Thu, 14 Jun 2007 13:01:13 -0500 From: Roger Miranda <rmiranda@digitalrelay.ca> To: Volker <volker@vwsoft.com> Cc: "FreeBSD \(PF\)" <freebsd-pf@freebsd.org> Subject: Re: PF error message looping on screen. System Locked. Message-ID: <200706141301.14854.rmiranda@digitalrelay.ca> In-Reply-To: <46715C7F.4060602@vwsoft.com> References: <200706140833.50583.rmiranda@digitalrelay.ca> <200706140921.53115.rmiranda@digitalrelay.ca> <46715C7F.4060602@vwsoft.com>
next in thread | previous in thread | raw e-mail | index | archive | help
> Roger,
>
> I don't think this message is related to your trouble. I think you can
> also avoid these messages by adding 'no scrub' to your pf.conf (I'm
> currently not aware of any side effects by adding this).
>
> Probably Max has some more suggestions on not scrubbing packets.
>
> You should get a debugger into your kernel (like Max suggested) and
> probably also use `pfctl -x loud' or `pfctl -x misc' to get more
> messages out of pf. If these messages are popping up again, break the
> system into the debugger and look for the messages (using 'scroll
> lock' to scroll back some pages), ps and a backtrace.
>
> HTH
>
> Volker
I found the following in Dmesg just a while ago ("BAD STATE" Line). Look
simalier to what is loop on the screen when the sytem locks up. Could Pf be
mixing or confusing states?
pf_normalize_ip: reass frag 21897 @ 0-1480
pf_normalize_ip: reass frag 21897 @ 1480-2960
pf_normalize_ip: reass frag 21897 @ 2960-4440
pf_normalize_ip: reass frag 21897 @ 4440-5920
pf_normalize_ip: reass frag 21897 @ 5920-5940
pf_reassemble: 5940 < 5940?
pf_reassemble: complete: 0xc413be00(5960)
pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700
[lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172
high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172
len=0 ackskew=0 pkts=1:1 dir=in,fwd
pf: State failure on: |
pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700
[lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172
high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172
len=0 ackskew=0 pkts=1:2 dir=in,fwd
pf: State failure on: |
pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700
[lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172
high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172
len=0 ackskew=0 pkts=1:3 dir=in,fwd
pf: State failure on: |
pf_normalize_ip: reass frag 22153 @ 0-1480
pf_normalize_ip: reass frag 22153 @ 1480-2960
pf_normalize_ip: reass frag 22153 @ 2960-4440
pf_normalize_ip: reass frag 22153 @ 4440-5920
pf_normalize_ip: reass frag 22153 @ 5920-5940
pf_reassemble: 5940 < 5940?
pf_reassemble: complete: 0xc43c1800(5960)
pf_normalize_ip: reass frag 22409 @ 0-1480
pf_normalize_ip: reass frag 22409 @ 1480-2960
pf_normalize_ip: reass frag 22409 @ 2960-4440
pf_normalize_ip: reass frag 22409 @ 4440-5920
pf_normalize_ip: reass frag 22409 @ 5920-5940
pf_reassemble: 5940 < 5940?
pf_reassemble: complete: 0xc4409c00(5960)
pf_normalize_ip: reass frag 22665 @ 0-1480
pf_normalize_ip: reass frag 22665 @ 1480-2960
pf_normalize_ip: reass frag 22665 @ 2960-4440
pf_normalize_ip: reass frag 22665 @ 4440-5920
pf_normalize_ip: reass frag 22665 @ 5920-5940
pf_reassemble: 5940 < 5940?
pf_reassemble: complete: 0xc4335a00(5960)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200706141301.14854.rmiranda>