From owner-freebsd-bugs@FreeBSD.ORG  Thu Nov  8 13:00:10 2007
Return-Path: <owner-freebsd-bugs@FreeBSD.ORG>
Delivered-To: freebsd-bugs@hub.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0A8CB16A419
	for <freebsd-bugs@hub.freebsd.org>;
	Thu,  8 Nov 2007 13:00:10 +0000 (UTC)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (freefall.freebsd.org
	[IPv6:2001:4f8:fff6::28])
	by mx1.freebsd.org (Postfix) with ESMTP id E297F13C49D
	for <freebsd-bugs@hub.freebsd.org>;
	Thu,  8 Nov 2007 13:00:09 +0000 (UTC)
	(envelope-from gnats@FreeBSD.org)
Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1])
	by freefall.freebsd.org (8.14.1/8.14.1) with ESMTP id lA8D09fo017182
	for <freebsd-bugs@freefall.freebsd.org>; Thu, 8 Nov 2007 13:00:09 GMT
	(envelope-from gnats@freefall.freebsd.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.14.1/8.14.1/Submit) id lA8D09Nx017181;
	Thu, 8 Nov 2007 13:00:09 GMT (envelope-from gnats)
Date: Thu, 8 Nov 2007 13:00:09 GMT
Message-Id: <200711081300.lA8D09Nx017181@freefall.freebsd.org>
To: freebsd-bugs@FreeBSD.org
From: Per olof Ljungmark <peo@intersonic.se>
Cc: 
Subject: Re: kern/117913: rtfree() is being called where RTFREE_LOCKED()
 should be used.
X-BeenThere: freebsd-bugs@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: Per olof Ljungmark <peo@intersonic.se>
List-Id: Bug reports <freebsd-bugs.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-bugs>
List-Post: <mailto:freebsd-bugs@freebsd.org>
List-Help: <mailto:freebsd-bugs-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-bugs>,
	<mailto:freebsd-bugs-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Nov 2007 13:00:10 -0000

The following reply was made to PR kern/117913; it has been noted by GNATS.

From: Per olof Ljungmark <peo@intersonic.se>
To: bug-followup@FreeBSD.org,  stefan.lambrev@moneybookers.com
Cc:  
Subject: Re: kern/117913: rtfree() is being called where RTFREE_LOCKED() should
 be used.
Date: Thu, 08 Nov 2007 13:40:27 +0100

 The problem is not limited to CARP I think, we see exactly this 
 behaviour after an ICMP redirect but not using carp on fw.
 
 A packet that *could* trigger the issue looks like this example from a 
 remote rsync session:
 
 13:28:58.616390 IP (tos 0x0, ttl 255, id 33766, offset 0, flags [none], 
 proto: ICMP (1), length: 56) 192.168.1.254 > 192.168.1.8: ICMP redirect 
 172.16.2.17 to host 192.168.1.254, length 36
          IP (tos 0x8, ttl  64, id 18099, offset 0, flags [none], proto: 
 TCP (6), length: 52) 192.168.1.8.49865 > 172.16.2.17.22: [|tcp]
 
 I have not been able to sort out exactly which single packet that 
 triggers the rtfree message yet, in case it would differ from the above. 
 What is established in agreement with the OP is the type, ICMP Redirect.