Date: Tue, 28 Aug 2007 02:23:07 +0200 From: Max Laier <max@love2party.net> To: "Bill Marquette" <bill.marquette@gmail.com> Cc: freebsd-pf@freebsd.org Subject: Re: pfsync errors Message-ID: <200708280223.27279.max@love2party.net> In-Reply-To: <55e8a96c0708271710n82428eet8c714b9e8d30a3aa@mail.gmail.com> References: <55e8a96c0708221242h2d5e7d15q847e6fac7cf60554@mail.gmail.com> <200708230006.32294.max@love2party.net> <55e8a96c0708271710n82428eet8c714b9e8d30a3aa@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--nextPart1364010.fhYbcre3fJ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On Tuesday 28 August 2007, Bill Marquette wrote: > On 8/22/07, Max Laier <max@love2party.net> wrote: > > There are two reasons why we increase the send error counter. Either > > the internal deferred work queue is full or ip_output fails. Could > > you locate "pfsyncstats.pfsyncs_oerrors++" in your source code and > > replace either occurrence with a printf(). Maybe use the attached.=20 > > This way we will know what exactly fails and if it is ip_output, why. > > Here's what we get with the patch: > pfsync_senddef: ip_output 64 that's EHOSTDOWN ... that's strange. Are you using syncpeer? > # netstat -s -p pfsync > pfsync: > 1264507 packets received (IPv4) > 0 packets received (IPv6) > 0 packets discarded for bad interface > 0 packets discarded for bad ttl > 0 packets shorter than header > 0 packets discarded for bad version > 0 packets discarded for bad HMAC > 0 packets discarded for bad action > 0 packets discarded for short packet > 0 states discarded for bad values > 0 stale states > 115608 failed state lookup/inserts > 86591 packets sent (IPv4) > 0 packets sent (IPv6) > 0 send failed due to mbuf memory error > 37231 send error > But since the send error still increases it seems as if the internal queue= =20 is overflowing, too. This is something that must be fixed as well, but I=20 think the EHOSTDOWN from ip_output is more serious. =2D-=20 /"\ Best regards, | mlaier@freebsd.org \ / Max Laier | ICQ #67774661 X http://pf4freebsd.love2party.net/ | mlaier@EFnet / \ ASCII Ribbon Campaign | Against HTML Mail and News --nextPart1364010.fhYbcre3fJ Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (FreeBSD) iD8DBQBG02r/XyyEoT62BG0RAvozAJ40NwaTSxyyAOu/yWvh7b5G5I+JlgCeOoC2 SRWdk1Wqi50COvOxZU8QmSI= =4tJx -----END PGP SIGNATURE----- --nextPart1364010.fhYbcre3fJ--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200708280223.27279.max>