Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 16 Jun 2007 08:26:15 -0500
From:      Roger Miranda <rmiranda@digitalrelay.ca>
To:        volker@vwsoft.com
Cc:        freebsd-pf@freebsd.org
Subject:   Re: PF error message looping on screen.  System Locked.
Message-ID:  <200706160826.16372.rmiranda@digitalrelay.ca>
In-Reply-To: <46715C7F.4060602@vwsoft.com>
References:  <200706140833.50583.rmiranda@digitalrelay.ca> <200706140921.53115.rmiranda@digitalrelay.ca> <46715C7F.4060602@vwsoft.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday 14 June 2007 10:19, Volker wrote:
> [re-added cc:pf to have a wider audience, please keep this]
>
> On 06/14/07 16:21, Roger Miranda wrote:
> >> I remember a discussion about your machine in stable@ some time ago.
> >
> > Yes.  I have come a bit further.  Generally I would get nothing on the
> > screen. I just started getting this.
> >
> >>> We have transfered 150GB (+/-)
> >>
> >> Using sftp, ftp, http or ...?
> >
> > http / NFS / SMB
> >
> >> Are you by any chance being able to get a photopicture (with fast
> >> shutter time) of the debug messages? Do you have anything in
> >> /var/log/debug.log /var/log/messages which might be useful?
> >
> > I do not have nothing with that fast of a shutter.  I looked in the logs
> > the message the loops is not there.  But I did find the follwoing:
> >
> > Jun 13 10:22:32  kernel: pf: dropping packet with ip options
> > Jun 13 10:22:33  last message repeated 5 times
>
> Roger,
>
> I don't think this message is related to your trouble. I think you can
> also avoid these messages by adding 'no scrub' to your pf.conf (I'm
> currently not aware of any side effects by adding this).
>
> Probably Max has some more suggestions on not scrubbing packets.
>
> You should get a debugger into your kernel (like Max suggested) and
> probably also use `pfctl -x loud' or `pfctl -x misc' to get more
> messages out of pf. If these messages are popping up again, break the
> system into the debugger and look for the messages (using 'scroll
> lock' to scroll back some pages), ps and a backtrace.
>
> HTH
>
> Volker
Alright, I have encoutered the loop messages again today.
I have debug set to loud and "no scrub" is in pf.conf.

I managed to get a 5 sec. video of the loop. Get it at: 
http://64.201.181.165:82/pfloop.avi

Any help would be appreciated.

Roger



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200706160826.16372.rmiranda>