From owner-freebsd-questions Thu Apr 4 6:48: 5 2002 Delivered-To: freebsd-questions@freebsd.org Received: from PHSEXCHICO.MGH.HARVARD.EDU (phsexchico.mgh.harvard.edu [132.183.126.50]) by hub.freebsd.org (Postfix) with ESMTP id 2657E37B417 for ; Thu, 4 Apr 2002 06:47:40 -0800 (PST) Received: by phsexchico.mgh.harvard.edu with Internet Mail Service (5.5.2650.21) id ; Thu, 4 Apr 2002 09:47:39 -0500 Message-ID: <375F68784081D511908A00508BE3BB17DDDD34@phsexch22.mgh.harvard.edu> From: "Morse, Richard E." To: "'questions@freebsd.org'" Subject: Network Issues, again... Date: Thu, 4 Apr 2002 09:47:37 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2650.21) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi! About two weeks ago (~20th of March) I had a problem with my FreeBSD backup server. It's an older box, but the FreeBSD installed is 4.5 release. I haven't updated it beyond that though -- I'm not tracking -STABLE, or 4_5_REL_ENG (or whatever it's actually called). The problem that I've run into is that at some point last night (about an hour after the backup started, from what I can tell), the box dropped off the network. I cannot ping from it: I get the error message "ping: sendto: no buffer space available". Someone suggested that this might be due to a shortage of "mbufs". Running `netstat -m`, as he suggested, gives the following output: 51/320/4096 mbufs in use (current/peak/max) 2 mbufs allocated to data 49 mbufs allocated to packet headers 0/310/1024 mbuf clusters in use (current/peak/max) 700 Kbytes allocated to network (22% of mb_map in use) 0 requests for memory denied 0 requests for memory delayed 0 calls to protocol drain routines Based on this output, I don't think that the mbufs are the problem. As before, once I ran tcpdump, I was able to ping again. Running TCP dump, I received a notification "/kernel: ep0: promiscuous mode enabled". The output from tcpdump (with no options -- I didn't know which ones I should use), is included below. The computer in question is einstein. Once I stopped tcpdump, I got another kernel message saying "promiscuous mode disabled". At this point, I was able to contact the network again. Does anyone else have any ideas? Thanks, Ricky Morse >09:22:35.868532 84b79c00.00:04:c1:7c:9d:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:35.886996 84b79c00.00:04:c1:a2:c2:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] [snip] >09:22:36.316391 84b79c00.00:04:c1:7c:9d:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:36.327847 132.183.156.2.1985 > ALL-ROUTERS.MCAST.NET.1985: udp 20 [tos 0xc0] >09:22:36.343118 84b79c00.00:04:c1:a2:c2:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:36.372409 84b79c00.00:04:c1:7c:9d:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] [snip] >09:22:36.679448 84b79c00.00:04:c1:a2:c2:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:36.688345 37.88.9.rtmp > 0.0.rtmp: at-rtmp 523 >09:22:36.708375 84b79c00.00:04:c1:7c:9d:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:36.726053 mgw156rtr-3.mgh.harvard.edu.1985 > ALL-ROUTERS.MCAST.NET.1985: > udp 20 [tos 0xc0] >09:22:36.735097 84b79c00.00:04:c1:a2:c2:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:36.764373 84b79c00.00:04:c1:7c:9d:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] [snip] >09:22:36.903176 84b79c00.00:04:c1:a2:c2:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:36.930216 arp who-has rtp000045rts.mgh.harvard.edu tell einstein.mgh.harvard.edu >09:22:36.932361 84b79c00.00:04:c1:7c:9d:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:36.932845 arp reply rtp000045rts.mgh.harvard.edu is-at 0:0:c:7:ac:9c >09:22:36.932934 einstein.mgh.harvard.edu.1608 > ns.mgh.harvard.edu.domain: > 16798+ PTR? 2.0.0.224.in-addr.arpa. (40) >09:22:36.959221 84b79c00.00:04:c1:a2:c2:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] [snip] >09:22:37.071085 84b79c00.00:04:c1:a2:c2:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:37.094181 ns.mgh.harvard.edu.domain > einstein.mgh.harvard.edu.1608: > 16798* 1/3/2 PTR[|domain] (DF) >09:22:37.095391 einstein.mgh.harvard.edu.1609 > ns.mgh.harvard.edu.domain: > 16799+ PTR? 2.156.183.132.in-addr.arpa. (44) >09:22:37.097281 ns.mgh.harvard.edu.domain > einstein.mgh.harvard.edu.1609: > 16799 NXDomain*- 0/1/0 (137) (DF) >09:22:37.108341 84b79c00.00:04:c1:7c:9d:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:37.127112 84b79c00.00:04:c1:a2:c2:02.452 > 84b79c00.ff:ff:ff:ff:ff:ff.452: > ipx-sap-resp[|ipx 448] >09:22:37.127268 einstein.mgh.harvard.edu.1610 > ns.mgh.harvard.edu.domain: > 16800+ PTR? 3.156.183.132.in-addr.arpa. (44) >09:22:37.129348 ns.mgh.harvard.edu.domain > einstein.mgh.harvard.edu.1610: > 16800*- 1/3/3 (220) (DF) ----------------------------------------------------- Richard Morse System Administrator MGH Biostatistics Center 50 Staniford St. Rm 560 remorse@partners.org 617/724-9830 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message