From nobody Wed Oct 8 07:53:31 2025 X-Original-To: freebsd-net@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4chQHf32B2z6BWfy for ; Wed, 08 Oct 2025 07:53:50 +0000 (UTC) (envelope-from pprocacci@gmail.com) Received: from mail-ed1-x534.google.com (mail-ed1-x534.google.com [IPv6:2a00:1450:4864:20::534]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256) (Client CN "smtp.gmail.com", Issuer "WR4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4chQHd50jGz3SFf for ; Wed, 08 Oct 2025 07:53:49 +0000 (UTC) (envelope-from pprocacci@gmail.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20230601 header.b=kEaN2szI; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of pprocacci@gmail.com designates 2a00:1450:4864:20::534 as permitted sender) smtp.mailfrom=pprocacci@gmail.com Received: by mail-ed1-x534.google.com with SMTP id 4fb4d7f45d1cf-61cc281171cso1748158a12.0 for ; Wed, 08 Oct 2025 00:53:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1759910023; x=1760514823; darn=freebsd.org; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=zPvZV1josblAd3u5sMuSBvDlbMIIg29P8hgYbzPTqtg=; b=kEaN2szIgHZ/52TCDkCGGpW2O5J0jNLXfrm+B7DlB+mBQqvi60ZYDV6W1A0iWO+ldT ttUnlmNvx09j+9O0Zv+d6q+9X05l/dA/6vZno13O0jY4P/Jp0nYSEn9t+kb3htnUxhUb py//tsimS+ZOTTH28sNtUgiR9UIsNlki59yiEdW2RwohoD3dycXWPVodmx7VFr4nPD3N ashwzoCNtWQ1k9E8C/LQPbErYsNlK1sMgMQ05P4b5jypw1xX4OPJqZVItJahMpo4wZws OeraFyWmYgcThgmNUDBkR2ioevONN3XjTAPtv9RbXuVnRt52lrzoPSwxPp8GAz6BT8r2 H3TQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1759910023; x=1760514823; h=content-transfer-encoding:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=zPvZV1josblAd3u5sMuSBvDlbMIIg29P8hgYbzPTqtg=; b=fo15HuqsHht6rXrhcH06x+sBXFdhGzBzK6V7b20tv4v6PPh2IuYlIdLpXg8TBIFmGy 6wXLjAvByquEHcGtjix1uYTC8Gi3GyOnxkG/7cqT4ZX/USlOa1DRqvsT4XjkhzmTcb8u hTtUBQui9cXJ3hmDjoDcirP1piOJQYkM6cCn1N1b/RnzkdA9YlxGSVASPW+3KGXD73r0 5P1b4WAUl+T7qkt2Mzk7+PLWAtKTHyAY+K2KO+CZXg1ce1RHDh81UKGHYGbuZ9AwzhQ2 FnAeo/hHWQbCVQxjOpGkNfI5OX3jMkVA//J3sLKqkp8hpeXkS/CngEdtXByJemSghfEp 8+vQ== X-Forwarded-Encrypted: i=1; AJvYcCWLwIqHHzFuQkHHxNK6I34UNXEFB9/SevgsiP21GFMZdJOyPRcTZ5M7OWLeICR/VX/BfrG/pm4uAUpEZg==@freebsd.org X-Gm-Message-State: AOJu0Yx2IIFJnx7GGDqn5mYbl5sdZcSiOL3M5NdPEF3EAIoFDCdkHM+3 ohNgfEUfSt1kmi3zEN7JttOxpipvoh639QnQ+N7IpqYBhvcIMnRdftU7xCtcYECyNIdSEDL38Dm VleMDk/DLvnLdW8MUsJgiqteC+JmTWTBjL6A= X-Gm-Gg: ASbGncvErf7vBImb0Ndm6DZ7sgIeFZ+0Zs5DGvFegQAwMbpbWDUdU2ayoVStqEzIxL8 lndlnGudlN83uY6IUd1Mr0FoYMgA499vTHYDIuakExZ4FxTRN51HsfTRfkJKXSOY0Gr/9EcB34A kdWaS7rvPHsMWPRaZAMuKuaZ3oI5tGcTYHgST/zaQSt4dFmh5lByGH89pXdQ0hcvaRc0SqGdn1f guA3Op2uaOFbiDtehNSuqEn6DGhnzfyKcEFBRE= X-Google-Smtp-Source: AGHT+IFyT8auD9enO7lIX80kDq5ykE9cCb1cjXjt+Lb4egk7rgGd9kcxlZmbLqyduXFxHamWzsuXFVjlWuSmX0v6mAA= X-Received: by 2002:a17:907:3d8f:b0:b04:2ee1:8e2 with SMTP id a640c23a62f3a-b50abfd6d7bmr280151466b.36.1759910023360; Wed, 08 Oct 2025 00:53:43 -0700 (PDT) List-Id: Networking and TCP/IP with FreeBSD List-Archive: https://lists.freebsd.org/archives/freebsd-net List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-net@FreeBSD.org MIME-Version: 1.0 References: In-Reply-To: From: Paul Procacci Date: Wed, 8 Oct 2025 03:53:31 -0400 X-Gm-Features: AS18NWC3gEvx4g-JQ6TeSs_E-4E-J3wHqfHy4r_7wdGLu8MjWTOw9V74jlfydoo Message-ID: Subject: Re: FBSD 15 :: if_bridge help needed To: Paul Procacci , "freebsd-net@freebsd.org" Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.93 / 15.00]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-0.999]; NEURAL_HAM_SHORT(-0.94)[-0.935]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36:c]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20230601]; MIME_GOOD(-0.10)[text/plain]; TO_DN_EQ_ADDR_SOME(0.00)[]; FREEMAIL_TO(0.00)[gmail.com,freebsd.org]; RCPT_COUNT_TWO(0.00)[2]; FROM_HAS_DN(0.00)[]; MIME_TRACE(0.00)[0:+]; DWL_DNSWL_NONE(0.00)[gmail.com:dkim]; ARC_NA(0.00)[]; FREEMAIL_FROM(0.00)[gmail.com]; TO_DN_SOME(0.00)[]; RCVD_TLS_LAST(0.00)[]; MISSING_XM_UA(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmail.com]; PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org]; TO_MATCH_ENVRCPT_SOME(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; MID_RHS_MATCH_FROMTLD(0.00)[]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; MLMMJ_DEST(0.00)[freebsd-net@freebsd.org]; RCVD_COUNT_ONE(0.00)[1]; RCVD_IN_DNSWL_NONE(0.00)[2a00:1450:4864:20::534:from] X-Rspamd-Queue-Id: 4chQHd50jGz3SFf On Wed, Oct 8, 2025 at 3:40=E2=80=AFAM Lexi Winter wrote: > > Paul Procacci wrote in : > > I have some debugging information that I just acquired if it helps. > > I have determined that the bridge isn't receiving arp requests that > > are being sent by Jail 1; the machine with the trunk > > > > I have also determined that the bridge *is* receiving arp requests > > from Jail 2; the machine that is labeled as 'access' or untagged. > > > > The only difference between the two here is that in my scenario, Jail > > 1 does it's own tagging while Jail 2 doesn't and leans on the bridge > > for its `access'. > > could you please run tcpdump -ev on the epair interface attached to the > bridge and see if the arp requests from jail 1 are received there? > > i.e., i would like to know if the packets are seen correctly on the > epair interface but are being dropped by the bridge somehow. > > (please show the actual tcpdump output; what i expect is that the epair > interface shows ARP packets with a .1q tag for VLAN 60.) > > > Thanks Gents! > > ahem Sorry. Bad habit. Forgive me. Absolutely nothing is being received on the bridge nor on the A side of the epair: >From hosts' perspective: ----------------------------------------------------------- root@host:~ # tcpdump -ni epair0a tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on epair0a, link-type EN10MB (Ethernet), snapshot length 262144 b= ytes ^C root@host:~ # tcpdump -ni bridge0 tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on epair0a, link-type EN10MB (Ethernet), snapshot length 262144 b= ytes ^C >From Jail 1's perspective: ----------------------------------------------------------- root@Jail1:/ # tcpdump -ni epair0b.60 tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on epair0b.60, link-type EN10MB (Ethernet), snapshot length 262144 bytes 07:52:03.722196 ARP, Request who-has 192.168.60.2 tell 192.168.60.1, length= 28 07:52:04.785635 ARP, Request who-has 192.168.60.2 tell 192.168.60.1, length= 28 ^C So jail 1 is trying, the host just isn't having any of it. Thanks Again Lexi, Paul Procacci --=20 __________________ :(){ :|:& };: