Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 3 Aug 2009 18:53:04 -0400
From:      Glen Barber <glen.j.barber@gmail.com>
To:        Joel Dahl <joel@vnode.se>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Weird networking issue
Message-ID:  <4ad871310908031553i7c69708fv9d162514816c3e10@mail.gmail.com>
In-Reply-To: <4A7753A0.7040006@vnode.se>
References:  <4A7753A0.7040006@vnode.se>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, Aug 3, 2009 at 5:16 PM, Joel Dahl<joel@vnode.se> wrote:
> Yesterday I noticed something weird with one of my mail servers (FreeBSD
> 7.2), which is located far away from me. =A0At first I thought it was my =
mail
> client that was misbehaving since a couple of mails that I retrieved from
> the server looked...odd. =A0Characters were missing, and the mail headers=
 were
> sometimes (perhaps 1 out of 100 mails) sort of scrambled.
>
> This server isn't doing anything really useful, except handling a few mai=
ls
> every day. =A0No load at all and it has been running for a few months wit=
hout
> any problems.
>
> Anyway, after some time I realized that Thunderbird probably wasn't the
> problem. =A0I discovered that ssh connections suddenly dropped (seems ran=
dom)
> when I was connected to the server. =A0Often with messages like:
>
> Received disconnect from x.x.x.x: 2: Bad packet length 3365265859.
>
> I tried to ping it and I constantly got 5-15% packet loss. =A0The same
> symptoms are there if I connect to it from other places, so my home
> connection isn't the problem. =A0I get 0 packet loss if I ping the gatewa=
y
> which the server is behind from my home connection.
>
> Anyway, while I was connected to the machine (and scratching my head) I d=
id
> a csup from the server to fetch ports and other stuff, but that failed ev=
ery
> time, with different messages:
>
> 1st try:
>
> =A0Edit ports/Mk/bsd.port.mk
> =A0Add delta 1.625 2009.08.03.15.36.58 miwi
> =A0Edit ports/UPDATING
> =A0Add delta 1.845 2009.08.03.19.08.48 dougb
> csup: inflate: invalid stored block lengths
>
> 2nd try:
>
> =A0Edit ports/devel/libvc/Makefile
> =A0Add delta 1.11 2009.08.02.19.33.28 mezz
> =A0Edit ports/devel/libytnef/Makefile
> =A0Add delta 1.6 2009.08.02.19.33.28 mezz
> Receiver: Protocol error
>
> 3rd try:
>
> Edit ports/devel/p5-threads-shared/distinfo
> =A0Add delta 1.4 2009.07.22.17.25.14 pgollucci
> =A0Edit ports/devel/p5-usb/pkg-plist
> =A0Add delta 1.3 2009.07.30.23.04.41 pgollucci
> csup: inflate: invalid distance too far back
>
> Ok. =A0So something is messed up.
>
> Checked my other server (located at the same place) to see if there were =
any
> problems (it is running VMware ESXI with 4 virtual machines, all running
> FreeBSD 7.2.), but all of the virtual hosts were fine. =A0No packet loss,=
 no
> ssh problems, no nothing. =A0This server is connected to the same switch =
and
> behind the same gateway. =A0So are also a bunch of Windows servers. =A0No=
ne of
> them have any problems.
>
> Checked the logs on my mail server to see if there were anything weird...=
and
> the logs were filled with this:
>
> arp: x.x.x.x moved from 00:16:c7:24:69:ae to 00:16:cf:24:69:ae on bge0
> arp: x.x.x.x moved from 00:16:cf:24:69:ae to 00:16:c7:24:69:ae on bge0
> arp: x.x.x.x moved from 00:16:c7:24:69:ae to 00:16:cf:24:69:ae on bge0
> arp: x.x.x.x moved from 00:16:cf:24:69:ae to 00:16:c7:24:69:ae on bge0
> arp: x.x.x.x moved from 00:16:c7:24:69:ae to 00:16:cf:24:69:ae on bge0
> arp: x.x.x.x moved from 00:16:cf:24:69:ae to 00:16:c7:24:69:ae on bge0
> arp: x.x.x.x moved from 00:16:c7:24:69:ae to 00:16:cf:24:69:ae on bge0
> arp: x.x.x.x moved from 00:16:cf:24:69:ae to 00:16:c7:24:69:ae on bge0
>
> x.x.x.x is my gateway which all my servers are behind. =A0These messages
> started yesterday, about the same time that the problems appeared.
>
> Any ideas? :-)
>

I have 2:
1.) Bad NIC
2.) Bad CPU

A while back, I found out I had a bad CPU after replacing everything
else on the machine -- I would still receive CRC mismatch errors with
portsnap(8).

The NIC is more probable IMHO, but both should be suspect here.

--=20
Glen Barber



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4ad871310908031553i7c69708fv9d162514816c3e10>