Date: Fri, 18 Dec 2009 17:29:38 +0000 From: "Robert N. M. Watson" <rwatson@freebsd.org> To: Linda Messerschmidt <linda.messerschmidt@gmail.com> Cc: freebsd-hackers@freebsd.org Subject: Re: 8.0-RELEASE-p1 Panic "panic: sbdrop" Message-ID: <9BE780E7-4114-43DF-BA5E-3517F2E28D21@freebsd.org> In-Reply-To: <237c27100912171025l3525da40m4abb526dd31ef067@mail.gmail.com> References: <237c27100912151140o1b227bb1pdaa65f5aee13ab5b@mail.gmail.com> <alpine.BSF.2.00.0912161149570.36302@fledge.watson.org> <237c27100912171025l3525da40m4abb526dd31ef067@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 17 Dec 2009, at 18:25, Linda Messerschmidt wrote: > On Wed, Dec 16, 2009 at 6:52 AM, Robert Watson <rwatson@freebsd.org> = wrote: >> Could you tell us a bit more about the network configuration -- = especially, >> are you using any tunneling software (such as ipsec), netgraph, or = other >> less commonly used network features? Are you using accept filters? >=20 > Let's see, we are using a couple of simple PF rdr rules in conjunction > with squid and yes, we are using accf_http with it as well. Other > than that, nothing uncommon. >=20 > The ethernet is Intel onboard, em0 and em1. Web traffic comes in on > em0, gets redirected to squid, and origin server requests go out on > e1. It crashed under relatively light traffic, about 3000 requests > per minute. Is this something you might be able to reproduce on a non-production = system? Might you be able to test on 8.0 whether, without accf_http, the = problem goes away? (I'm not sure it makes life easier for you, but -- you should be able to = use an 8.0 kernel with a 7.x userspace, making the cost of rolling = forward/back to test things a bit easier perhaps) Thanks, Robert=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?9BE780E7-4114-43DF-BA5E-3517F2E28D21>