From owner-freebsd-net@FreeBSD.ORG  Tue Aug 21 01:19:40 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 208DD16A41A
	for <freebsd-net@freebsd.org>; Tue, 21 Aug 2007 01:19:40 +0000 (UTC)
	(envelope-from gnn@neville-neil.com)
Received: from mrout1.yahoo.com (mrout1.yahoo.com [216.145.54.171])
	by mx1.freebsd.org (Postfix) with ESMTP id 0660613C469
	for <freebsd-net@freebsd.org>; Tue, 21 Aug 2007 01:19:40 +0000 (UTC)
	(envelope-from gnn@neville-neil.com)
Received: from minion.local.neville-neil.com (proxy8.corp.yahoo.com
	[216.145.48.13])
	by mrout1.yahoo.com (8.13.6/8.13.6/y.out) with ESMTP id l7L18WCH037363; 
	Mon, 20 Aug 2007 18:08:32 -0700 (PDT)
Date: Tue, 21 Aug 2007 10:08:31 +0900
Message-ID: <m2fy2dr8xc.wl%gnn@neville-neil.com>
From: "George V. Neville-Neil" <gnn@neville-neil.com>
To: "Scott Ullrich" <sullrich@gmail.com>
In-Reply-To: <d5992baf0708200943h708f4a21xd111a5264a7f4f65@mail.gmail.com>
References: <d5992baf0708171353j7e7563a8y8dca4475779bc410@mail.gmail.com>
	<20070818102803.GA1319@jayce.zen.inc>
	<d5992baf0708181258t501e5842y6b8bdee8a5c2e07c@mail.gmail.com>
	<m27ins2pby.wl%gnn@neville-neil.com>
	<20070820082728.GA28863@zen.inc>
	<d5992baf0708200943h708f4a21xd111a5264a7f4f65@mail.gmail.com>
User-Agent: Wanderlust/2.15.5 (Almost Unreal) SEMI/1.14.6 (Maruoka)
	FLIM/1.14.8 (=?ISO-8859-4?Q?Shij=F2?=) APEL/10.7 Emacs/22.1
	(i386-apple-darwin8.9.1) MULE/5.0 (SAKAKI)
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset=US-ASCII
Cc: freebsd-net@freebsd.org, VANHULLEBUS Yvan <vanhu_bsd@zeninc.net>
Subject: Re: Racoon(ipsec-tools) enters sbwait state or 100% CPU
	utilization	quite often on RELENG_1_2
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 21 Aug 2007 01:19:40 -0000

At Mon, 20 Aug 2007 12:43:25 -0400,
Scott Ullrich wrote:
> 
> On 8/20/07, VANHULLEBUS Yvan <vanhu_bsd@zeninc.net> wrote:
> > I tracked down the problem a few years ago, on FreeBSD 4.11, with
> > KAME's IPSec stack.
> >
> > But the problem was not really in the stack itself, but rather in
> > socket processing (in other words: not in netkey/*, but in
> > kern/uipc_socket2.c).
> >
> > And as both IPSec stacks shares some PFKey constraints (for example
> > one message per entry when dumping SADB / SPD), I guess the same
> > problem existed in FAST_IPSEC.
> >
> > But when I had some time a few months ago to start filling a PR for
> > the problem, I had a look at FreeBSD6 source code, and I noticed that
> > sbspace macro (which was a quite important part of the problem) has
> > changed, and I didn't have the required setup to do the test again, so
> > I just can't be really sure the problem still exists...
> >
> > But the reported problem really has similar symptoms.....
> 
> Thank you Yvan and George!
> 
> The PR has been filed and the ID# is
> 
> kern/115651
> 

Got it.

> I have added some interesting notes that seem to affect NetBSD as well.
> 
> We will be happy to work with anyone to get this solved and access to
> the machine in question is available if need be.
> 

Your raccoon config, if you could send it to me, would be helpful.

Best,
GEorge