From owner-freebsd-questions@FreeBSD.ORG  Fri Apr  7 18:10:58 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id A0E4E16A40D
	for <freebsd-questions@freebsd.org>;
	Fri,  7 Apr 2006 18:10:58 +0000 (UTC)
	(envelope-from freebsd-questions-local@be-well.ilk.org)
Received: from mail1.sea5.speakeasy.net (mail1.sea5.speakeasy.net
	[69.17.117.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id B7ED643D70
	for <freebsd-questions@freebsd.org>;
	Fri,  7 Apr 2006 18:10:57 +0000 (GMT)
	(envelope-from freebsd-questions-local@be-well.ilk.org)
Received: (qmail 14771 invoked from network); 7 Apr 2006 18:10:57 -0000
Received: from dsl092-078-145.bos1.dsl.speakeasy.net (HELO be-well.ilk.org)
	([66.92.78.145])
	(envelope-sender <freebsd-questions-local@be-well.ilk.org>)
	by mail1.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
	for <freebsd-questions@freebsd.org>; 7 Apr 2006 18:10:57 -0000
Received: by be-well.ilk.org (Postfix, from userid 1147)
	id D203C28423; Fri,  7 Apr 2006 14:10:56 -0400 (EDT)
Sender: lowell@be-well.ilk.org
To: "Halid Faith" <maslak@ihlas.net.tr>
References: <002b01c65a4e$f169a7a0$dc96eed5@ihlasnetym>
From: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
Date: 07 Apr 2006 14:10:56 -0400
In-Reply-To: <002b01c65a4e$f169a7a0$dc96eed5@ihlasnetym>
Message-ID: <44wte1ntn3.fsf@be-well.ilk.org>
Lines: 38
User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: freebsd-questions@freebsd.org
Subject: Re: Why do I get this message by the server ?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: freebsd-questions@freebsd.org
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 07 Apr 2006 18:10:58 -0000

"Halid Faith" <maslak@ihlas.net.tr> writes:

> I have a freebsd5.4 server. I sometimes get a message on the screen as below;
> 
> kernel: ipfw: pullup failed
> 
> What cause this problem cause ?

There weren't enough mbufs available for ipfw to properly inspect a
packet.  So one packet was dropped by the firewall that perhaps would
not have been if an extra mbuf were available.  It's not a problem in
itself, but if happening extremely often, you should allocate more
mbufs. 

> I see the below lines when I type netstat -ni
> 
> 1# netstat -ni
> Name    Mtu Network       Address              Ipkts Ierrs    Opkts Oerrs  Coll
> bge0   1500 <Link#1>      00:13:d4:51:5d:e9 1618711264     0 4211116941     0     0
> bge0   1500 212.175.51.68 212.175.51.70      3389522     - 11038161     -     -
> bge0   1500 fe80:1::213:d fe80:1::213:d4ff:        0     -        3     -     -
> bge1   1500 <Link#2>      00:13:d4:51:5d:ea 307271458     0 808964464     0     0
> bge1   1500 192.168.12.1 192.168.12.63    2276942     - 193982504     -     -
> bge1   1500 fe80:2::213:d fe80:2::213:d4ff:        0     -        4     -     -
> lo0   16384 <Link#3>                         1465002     0  1465002     0     0
> lo0   16384 127           127.0.0.1          1463512     -  1463566     -     -
> lo0   16384 ::1/128       ::1                      0     -        0     -     -
> lo0   16384 fe80:3::1/64  fe80:3::1                0     -        0     -     -
> 
> sysctl net.inet.ip | grep queue
> net.inet.ip.intr_queue_maxlen: 50
> net.inet.ip.intr_queue_drops: 19512403
> 
> What shall I do ?

You don't have to do anything.  You could turn off the "verbose" flag
for ipfw, and then you wouldn't see these messages.  Or you could
increase the number of mbufs available in the kernel.