From owner-freebsd-net@FreeBSD.ORG Sun Sep 14 22:00:03 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4276516A4BF for ; Sun, 14 Sep 2003 22:00:03 -0700 (PDT) Received: from www.svzserv.kemerovo.su (www.svzserv.kemerovo.su [213.184.65.80]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5046E43FA3 for ; Sun, 14 Sep 2003 22:00:01 -0700 (PDT) (envelope-from eugen@kuzbass.ru) Received: from kuzbass.ru (kost [213.184.65.82])h8F4xvel011308 for ; Mon, 15 Sep 2003 12:59:58 +0800 (KRAST) (envelope-from eugen@kuzbass.ru) Message-ID: <3F6546C1.41B7143@kuzbass.ru> Date: Mon, 15 Sep 2003 12:57:37 +0800 From: Eugene Grosbein Organization: SVZServ X-Mailer: Mozilla 4.8 [en] (Win98; U) X-Accept-Language: ru,en MIME-Version: 1.0 To: net@freebsd.org Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit Subject: ipfw: pullup failed X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 05:00:03 -0000 Hi! My router that uses ipfw2 for WF2Q+ sometimes writes in log: Sep 15 00:00:00 gw2 newsyslog[51667]: logfile turned over Sep 15 06:20:27 gw2 /kernel: ipfw: pullup failed Sep 15 07:00:42 gw2 /kernel: ipfw: pullup failed Sep 15 07:58:55 gw2 /kernel: ipfw: pullup failed Sep 15 08:23:13 gw2 /kernel: ipfw: pullup failed Sep 15 10:14:38 gw2 /kernel: ipfw: pullup failed Sep 15 11:50:53 gw2 /kernel: ipfw: pullup failed Why? Is it dangerous? Eugene Grosbein From owner-freebsd-net@FreeBSD.ORG Sun Sep 14 22:13:44 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 626C916A4BF for ; Sun, 14 Sep 2003 22:13:44 -0700 (PDT) Received: from xorpc.icir.org (xorpc.icir.org [192.150.187.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id B11E143FBD for ; Sun, 14 Sep 2003 22:13:43 -0700 (PDT) (envelope-from rizzo@xorpc.icir.org) Received: from xorpc.icir.org (localhost [127.0.0.1]) by xorpc.icir.org (8.12.8p1/8.12.3) with ESMTP id h8F5DhkN025654; Sun, 14 Sep 2003 22:13:43 -0700 (PDT) (envelope-from rizzo@xorpc.icir.org) Received: (from rizzo@localhost) by xorpc.icir.org (8.12.8p1/8.12.3/Submit) id h8F5DhWC025653; Sun, 14 Sep 2003 22:13:43 -0700 (PDT) (envelope-from rizzo) Date: Sun, 14 Sep 2003 22:13:43 -0700 From: Luigi Rizzo To: Eugene Grosbein Message-ID: <20030914221343.A25641@xorpc.icir.org> References: <3F6546C1.41B7143@kuzbass.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <3F6546C1.41B7143@kuzbass.ru>; from eugen@kuzbass.ru on Mon, Sep 15, 2003 at 12:57:37PM +0800 cc: net@freebsd.org Subject: Re: ipfw: pullup failed X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 05:13:44 -0000 On Mon, Sep 15, 2003 at 12:57:37PM +0800, Eugene Grosbein wrote: > Hi! > > My router that uses ipfw2 for WF2Q+ sometimes writes in log: > > Sep 15 00:00:00 gw2 newsyslog[51667]: logfile turned over > Sep 15 06:20:27 gw2 /kernel: ipfw: pullup failed > Sep 15 07:00:42 gw2 /kernel: ipfw: pullup failed > Sep 15 07:58:55 gw2 /kernel: ipfw: pullup failed > Sep 15 08:23:13 gw2 /kernel: ipfw: pullup failed > Sep 15 10:14:38 gw2 /kernel: ipfw: pullup failed > Sep 15 11:50:53 gw2 /kernel: ipfw: pullup failed a possibility is that it has run out of mbufs. what does netstat -m say ? cheers luigi > Why? Is it dangerous? > > Eugene Grosbein > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" From owner-freebsd-net@FreeBSD.ORG Sun Sep 14 22:21:15 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ED84F16A4BF for ; Sun, 14 Sep 2003 22:21:15 -0700 (PDT) Received: from www.svzserv.kemerovo.su (www.svzserv.kemerovo.su [213.184.65.80]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7BD4F43FB1 for ; Sun, 14 Sep 2003 22:21:14 -0700 (PDT) (envelope-from eugen@kuzbass.ru) Received: from kuzbass.ru (kost [213.184.65.82])h8F5LCel012779; Mon, 15 Sep 2003 13:21:12 +0800 (KRAST) (envelope-from eugen@kuzbass.ru) Message-ID: <3F654BBB.9240465B@kuzbass.ru> Date: Mon, 15 Sep 2003 13:18:51 +0800 From: Eugene Grosbein Organization: SVZServ X-Mailer: Mozilla 4.8 [en] (Win98; U) X-Accept-Language: ru,en MIME-Version: 1.0 To: Luigi Rizzo References: <3F6546C1.41B7143@kuzbass.ru> <20030914221343.A25641@xorpc.icir.org> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit cc: net@freebsd.org Subject: Re: ipfw: pullup failed X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 05:21:16 -0000 Luigi Rizzo wrote: > > My router that uses ipfw2 for WF2Q+ sometimes writes in log: > > > > Sep 15 00:00:00 gw2 newsyslog[51667]: logfile turned over > > Sep 15 06:20:27 gw2 /kernel: ipfw: pullup failed > > Sep 15 07:00:42 gw2 /kernel: ipfw: pullup failed > > Sep 15 07:58:55 gw2 /kernel: ipfw: pullup failed > > Sep 15 08:23:13 gw2 /kernel: ipfw: pullup failed > > Sep 15 10:14:38 gw2 /kernel: ipfw: pullup failed > > Sep 15 11:50:53 gw2 /kernel: ipfw: pullup failed > > a possibility is that it has run out of mbufs. what does netstat -m say ? 669/1920/65536 mbufs in use (current/peak/max): 654 mbufs allocated to data 15 mbufs allocated to packet headers 472/712/16384 mbuf clusters in use (current/peak/max) 1904 Kbytes allocated to network (3% of mb_map in use) 0 requests for memory denied 0 requests for memory delayed 0 calls to protocol drain routines From owner-freebsd-net@FreeBSD.ORG Mon Sep 15 01:15:15 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A972A16A4BF; Mon, 15 Sep 2003 01:15:15 -0700 (PDT) Received: from isis.lip6.fr (isis.lip6.fr [132.227.60.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3D9D543FEA; Mon, 15 Sep 2003 01:15:14 -0700 (PDT) (envelope-from Luigi.Iannone@lip6.fr) Received: from tibre.lip6.fr (tibre.lip6.fr [132.227.74.2]) h8F8FBeD003131verify=NO) ; Mon, 15 Sep 2003 10:15:12 +0200 X-pt: isis.lip6.fr Received: from localhost (iannone@localhost) by tibre.lip6.fr (8.11.6p2/8.11.6) with ESMTP id h8F8FBU12854; Mon, 15 Sep 2003 10:15:11 +0200 (CEST) Date: Mon, 15 Sep 2003 10:15:11 +0200 (CEST) From: Luigi Iannone To: freebsd-net@freebsd.org, freebsd-question@freebsd.org Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Scanned-By: isis.lip6.fr Subject: Host AP porting!!! X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 08:15:15 -0000 Hi, Can anyone tell me if there exist a port of the HostAP software on freebsd (any version)??? Thank you all Ciao Luigi ------------------------------------> Luigi Iannone - Laboratoire D'Informatique Paris 6 e.mail: luigi.iannone@lip6.fr Tel: +33 (0)1 44 27 88 48 From owner-freebsd-net@FreeBSD.ORG Mon Sep 15 01:24:45 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7F23616A4BF for ; Mon, 15 Sep 2003 01:24:45 -0700 (PDT) Received: from xorpc.icir.org (xorpc.icir.org [192.150.187.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id C37D043F85 for ; Mon, 15 Sep 2003 01:24:44 -0700 (PDT) (envelope-from rizzo@xorpc.icir.org) Received: from xorpc.icir.org (localhost [127.0.0.1]) by xorpc.icir.org (8.12.8p1/8.12.3) with ESMTP id h8F8OikN057870; Mon, 15 Sep 2003 01:24:44 -0700 (PDT) (envelope-from rizzo@xorpc.icir.org) Received: (from rizzo@localhost) by xorpc.icir.org (8.12.8p1/8.12.3/Submit) id h8F8OhSf057856; Mon, 15 Sep 2003 01:24:43 -0700 (PDT) (envelope-from rizzo) Date: Mon, 15 Sep 2003 01:24:43 -0700 From: Luigi Rizzo To: Eugene Grosbein Message-ID: <20030915012443.A49336@xorpc.icir.org> References: <3F6546C1.41B7143@kuzbass.ru> <20030914221343.A25641@xorpc.icir.org> <3F654BBB.9240465B@kuzbass.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <3F654BBB.9240465B@kuzbass.ru>; from eugen@kuzbass.ru on Mon, Sep 15, 2003 at 01:18:51PM +0800 cc: net@freebsd.org Subject: Re: ipfw: pullup failed X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 08:24:45 -0000 On Mon, Sep 15, 2003 at 01:18:51PM +0800, Eugene Grosbein wrote: > Luigi Rizzo wrote: > > > > My router that uses ipfw2 for WF2Q+ sometimes writes in log: > > > > > > Sep 15 00:00:00 gw2 newsyslog[51667]: logfile turned over > > > Sep 15 06:20:27 gw2 /kernel: ipfw: pullup failed > > > Sep 15 07:00:42 gw2 /kernel: ipfw: pullup failed > > > Sep 15 07:58:55 gw2 /kernel: ipfw: pullup failed > > > Sep 15 08:23:13 gw2 /kernel: ipfw: pullup failed > > > Sep 15 10:14:38 gw2 /kernel: ipfw: pullup failed > > > Sep 15 11:50:53 gw2 /kernel: ipfw: pullup failed > > > > a possibility is that it has run out of mbufs. what does netstat -m say ? > > 669/1920/65536 mbufs in use (current/peak/max): > 654 mbufs allocated to data > 15 mbufs allocated to packet headers > 472/712/16384 mbuf clusters in use (current/peak/max) ok, another one is that the packet was too short for the desired length (supposedly, as a result of a collision). You could perhaps try the following patch and see if it tells you something more interesting. cheers luigi static int ipfw_chk(struct ip_fw_args *args) { + int desired_len = -1; /* * Local variables hold state during the processing of a packet. * * IMPORTANT NOTE: to speed up the processing of rules, there ... #define PULLUP_TO(len) \ do { \ if ((m)->m_len < (len)) { \ args->m = m = m_pullup(m, (len)); \ - if (m == 0) \ + if (m == 0) { \ + desired_len = (len); \ goto pullup_failed; \ + } \ ip = mtod(m, struct ip *); \ } \ } while (0) ... pullup_failed: if (fw_verbose) - printf("pullup failed\n"); + printf("pullup failed have %d want %d\n", m->m_len,desired_len); return(IP_FW_PORT_DENY_FLAG); } > 1904 Kbytes allocated to network (3% of mb_map in use) > 0 requests for memory denied > 0 requests for memory delayed > 0 calls to protocol drain routines From owner-freebsd-net@FreeBSD.ORG Mon Sep 15 01:31:29 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7F94E16A4BF for ; Mon, 15 Sep 2003 01:31:29 -0700 (PDT) Received: from www.svzserv.kemerovo.su (www.svzserv.kemerovo.su [213.184.65.80]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8B51043F75 for ; Mon, 15 Sep 2003 01:31:27 -0700 (PDT) (envelope-from eugen@kuzbass.ru) Received: from kuzbass.ru (kost [213.184.65.82])h8F8VNel026441; Mon, 15 Sep 2003 16:31:23 +0800 (KRAST) (envelope-from eugen@kuzbass.ru) Message-ID: <3F657888.8FDE1E7D@kuzbass.ru> Date: Mon, 15 Sep 2003 16:30:00 +0800 From: Eugene Grosbein Organization: SVZServ X-Mailer: Mozilla 4.8 [en] (Win98; U) X-Accept-Language: ru,en MIME-Version: 1.0 To: Luigi Rizzo References: <3F6546C1.41B7143@kuzbass.ru> <20030914221343.A25641@xorpc.icir.org> <3F654BBB.9240465B@kuzbass.ru> <20030915012443.A49336@xorpc.icir.org> Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 7bit cc: net@freebsd.org Subject: Re: ipfw: pullup failed X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 08:31:29 -0000 Luigi Rizzo wrote: > ok, another one is that the packet was too short for the desired > length (supposedly, as a result of a collision). > You could perhaps try the following patch and see if it tells you > something more interesting. Thanks, I will try it but not now. I cannot reload this router soon. Eugene Grosbein From owner-freebsd-net@FreeBSD.ORG Mon Sep 15 07:47:35 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4E7A716A4BF for ; Mon, 15 Sep 2003 07:47:35 -0700 (PDT) Received: from smtp016.mail.yahoo.com (smtp016.mail.yahoo.com [216.136.174.113]) by mx1.FreeBSD.org (Postfix) with SMTP id 7DEFC43FB1 for ; Mon, 15 Sep 2003 07:47:34 -0700 (PDT) (envelope-from max@willystudios.com) Received: from dhcp64-134-16-123.ram.sjc.wayport.net (HELO vekkio.willystudios.com) (willythemax@64.134.16.123 with login) by smtp.mail.vip.sc5.yahoo.com with SMTP; 15 Sep 2003 14:47:29 -0000 Date: Mon, 15 Sep 2003 16:40:54 +0200 From: Massimiliano Stucchi To: freebsd-net@freebsd.org Message-Id: <20030915164054.2b096a47.max@willystudios.com> In-Reply-To: References: Organization: WillyStudios.com, LTD X-Mailer: Sylpheed version 0.9.3claws (GTK+ 1.2.10; i386-portbld-freebsd5.1) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Subject: Re: Host AP porting!!! X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 14:47:35 -0000 On Mon, 15 Sep 2003 10:15:11 +0200 (CEST) Luigi Iannone wrote: > Hi, > Can anyone tell me if there exist a port of the HostAP software on > freebsd(any version)??? > Thank you all > Ciao No need to install a port. man wi is your friend. -- Stucchi Massimiliano | Gruppo Utenti FreeBSD Italia WillyStudios.com | http://www.gufi.org stucchi@willystudios.com | max@gufi.org "People who make no mistakes do not usually make anything" From owner-freebsd-net@FreeBSD.ORG Mon Sep 15 08:10:46 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4477E16A4BF for ; Mon, 15 Sep 2003 08:10:46 -0700 (PDT) Received: from tenebras.com (blade.tenebras.com [66.92.188.175]) by mx1.FreeBSD.org (Postfix) with SMTP id 4D27D43FBD for ; Mon, 15 Sep 2003 08:10:45 -0700 (PDT) (envelope-from kudzu@tenebras.com) Received: (qmail 27789 invoked from network); 15 Sep 2003 15:10:43 -0000 Received: from sapphire.tenebras.com (HELO tenebras.com) (192.168.188.241) by laptop.tenebras.com with SMTP; 15 Sep 2003 15:10:43 -0000 Message-ID: <3F65D66D.9030004@tenebras.com> Date: Mon, 15 Sep 2003 08:10:37 -0700 From: Michael Sierchio User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: en-us, zh-tw, zh-cn, fr, en, de-de MIME-Version: 1.0 To: freebsd-net@freebsd.org References: <20030915164054.2b096a47.max@willystudios.com> In-Reply-To: <20030915164054.2b096a47.max@willystudios.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: Host AP porting!!! X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Sep 2003 15:10:46 -0000 Massimiliano Stucchi wrote: > Luigi Iannone wrote: >>Can anyone tell me if there exist a port of the HostAP software on >>freebsd(any version)??? > No need to install a port. man wi is your friend. Yes, that's where you'll find you bought the wrong 802.11 card ;-) From owner-freebsd-net@FreeBSD.ORG Tue Sep 16 00:28:14 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id BF97316A4B3; Tue, 16 Sep 2003 00:28:14 -0700 (PDT) Received: from xorpc.icir.org (xorpc.icir.org [192.150.187.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id 32A1243F3F; Tue, 16 Sep 2003 00:28:14 -0700 (PDT) (envelope-from rizzo@xorpc.icir.org) Received: from xorpc.icir.org (localhost [127.0.0.1]) by xorpc.icir.org (8.12.8p1/8.12.3) with ESMTP id h8G7S8kN040468; Tue, 16 Sep 2003 00:28:08 -0700 (PDT) (envelope-from rizzo@xorpc.icir.org) Received: (from rizzo@localhost) by xorpc.icir.org (8.12.8p1/8.12.3/Submit) id h8G7S8xS040467; Tue, 16 Sep 2003 00:28:08 -0700 (PDT) (envelope-from rizzo) Date: Tue, 16 Sep 2003 00:28:08 -0700 From: Luigi Rizzo To: roam@freebsd.org Message-ID: <20030916002808.A5624@xorpc.icir.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i cc: net@freebsd.org Subject: trafshow and libslang X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Sep 2003 07:28:14 -0000 hi, there seems to be no way to build trafshow without slang -- even if the port's Makefile tries to remove slang from LIB_DEPENDS if you set WITHOUT_TRAFSHOW_SLANG, config will detect the library and use it anyways. Does anyone have ideas on how to convince config to stick to ncurses instead (i am not fond of slang, and anyways it's an additional library that i do not need to carry in picobsd configs) cheers luigi From owner-freebsd-net@FreeBSD.ORG Tue Sep 16 00:45:58 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 18A4D16A4B3 for ; Tue, 16 Sep 2003 00:45:58 -0700 (PDT) Received: from gandalf.online.bg (gandalf.online.bg [217.75.128.9]) by mx1.FreeBSD.org (Postfix) with SMTP id 4703043FA3 for ; Tue, 16 Sep 2003 00:45:56 -0700 (PDT) (envelope-from roam@ringlet.net) Received: (qmail 15955 invoked from network); 16 Sep 2003 07:37:52 -0000 Received: from office.sbnd.net (HELO straylight.ringlet.net) (217.75.140.130) by gandalf.online.bg with SMTP; 16 Sep 2003 07:37:52 -0000 Received: (qmail 32710 invoked by uid 1000); 16 Sep 2003 07:45:53 -0000 Date: Tue, 16 Sep 2003 10:45:53 +0300 From: Peter Pentchev To: Luigi Rizzo Message-ID: <20030916074553.GN397@straylight.oblivion.bg> References: <20030916002808.A5624@xorpc.icir.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="TU+u6i6jrDPzmlWF" Content-Disposition: inline In-Reply-To: <20030916002808.A5624@xorpc.icir.org> User-Agent: Mutt/1.5.4i cc: net@freebsd.org Subject: Re: trafshow and libslang X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Sep 2003 07:45:58 -0000 --TU+u6i6jrDPzmlWF Content-Type: text/plain; charset=windows-1251 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 16, 2003 at 12:28:08AM -0700, Luigi Rizzo wrote: > hi, > there seems to be no way to build trafshow without slang -- even > if the port's Makefile tries to remove slang from LIB_DEPENDS if > you set WITHOUT_TRAFSHOW_SLANG, config will detect the library and > use it anyways. >=20 > Does anyone have ideas on how to convince config to stick to ncurses > instead (i am not fond of slang, and anyways it's an additional > library that i do not need to carry in picobsd configs) Unfortunately, as you've found out yourself, trafshow's configure script does not provide for disabling slang. The attached patch to the port should be fine for a quick workaround, and I might try to fix up the configure script itself to add a --enable/disable-slang option later. G'luck, Peter --=20 Peter Pentchev roam@ringlet.net roam@sbnd.net roam@FreeBSD.org PGP key: http://people.FreeBSD.org/~roam/roam.key.asc Key fingerprint FDBA FD79 C26F 3C51 C95E DF9E ED18 B68D 1619 4553 If I were you, who would be reading this sentence? Index: ports/net/trafshow/Makefile =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D RCS file: /home/ncvs/ports/net/trafshow/Makefile,v retrieving revision 1.25 diff -u -r1.25 Makefile --- ports/net/trafshow/Makefile 29 Jun 2003 16:54:55 -0000 1.25 +++ ports/net/trafshow/Makefile 16 Sep 2003 07:40:59 -0000 @@ -22,6 +22,7 @@ (exists(${LOCALBASE}/lib/libslang.a) && !defined(WITHOUT_TRAFSHOW_SLAN= G)) LIB_DEPENDS=3D slang.1:${PORTSDIR}/devel/libslang .else +BREAK_SLANG=3D yes .if ${OSVERSION} < 400010 LIB_DEPENDS=3D ncurses.5:${PORTSDIR}/devel/ncurses .endif @@ -37,6 +38,9 @@ =20 post-patch: @${REINPLACE_CMD} -e "s|%%PREFIX%%|${PREFIX}|g" ${WRKSRC}/*.c +.if defined(BREAK_SLANG) + ${PATCH} ${PATCH_ARGS} < ${FILESDIR}/configure-noslang.patch +.endif =20 do-install: ${INSTALL_PROGRAM} ${WRKSRC}/trafshow ${PREFIX}/bin Index: ports/net/trafshow/files/configure-noslang.patch =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D RCS file: ports/net/trafshow/files/configure-noslang.patch diff -N ports/net/trafshow/files/configure-noslang.patch --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ ports/net/trafshow/files/configure-noslang.patch 16 Sep 2003 07:36:50 -= 0000 @@ -0,0 +1,10 @@ +--- configure.old Tue Sep 16 10:36:10 2003 ++++ configure Tue Sep 16 10:36:20 2003 +@@ -1510,6 +1510,7 @@ + LIBS=3D"-lslang $ac_cv_save_LIBS" + cat > conftest.$ac_ext < + int main() { --TU+u6i6jrDPzmlWF Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iD8DBQE/Zr+x7Ri2jRYZRVMRAigZAKCg2sHcXd2wkpd/03z1ugGo4BOQgACgtzoE wtwFmJdlXhYf2owRPFzOXcg= =lVLY -----END PGP SIGNATURE----- --TU+u6i6jrDPzmlWF-- From owner-freebsd-net@FreeBSD.ORG Tue Sep 16 14:45:27 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6101C16A4B3 for ; Tue, 16 Sep 2003 14:45:27 -0700 (PDT) Received: from tamu-relay.tamu.edu (smtp-relay.tamu.edu [165.91.143.199]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4008B43F3F for ; Tue, 16 Sep 2003 14:45:26 -0700 (PDT) (envelope-from daved@tamu.edu) Received: from tamu.edu (teag-dhcp-248-0408.tamu.edu [165.91.249.152]) by tamu-relay.tamu.edu (8.12.9/8.12.9) with ESMTP id h8GLjMW4004171 for ; Tue, 16 Sep 2003 16:45:23 -0500 (CDT) Date: Tue, 16 Sep 2003 16:45:36 -0500 Mime-Version: 1.0 (Apple Message framework v552) Content-Type: text/plain; charset=US-ASCII; format=flowed From: David J Duchscher To: freebsd-net@FreeBSD.ORG Content-Transfer-Encoding: 7bit Message-Id: <1B25DA5C-E88F-11D7-85AF-000A956E58AC@tamu.edu> X-Mailer: Apple Mail (2.552) Subject: Bridging Benchmarks X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Sep 2003 21:45:27 -0000 We have been benchmarking FreeBSD configured as a bridge and I thought I would share the data that we have been collecting. Its a work in progress so more data will show up as try some more Ethernet cards and machine configurations. Everything is 100Mbps at the moment. Would be very interested in any thoughts, insights or observations people might have. http://wolf.tamu.edu/~daved/bench-100/ DaveD From owner-freebsd-net@FreeBSD.ORG Tue Sep 16 15:12:23 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D511C16A4B3 for ; Tue, 16 Sep 2003 15:12:23 -0700 (PDT) Received: from xorpc.icir.org (xorpc.icir.org [192.150.187.68]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4B2AA43FB1 for ; Tue, 16 Sep 2003 15:12:22 -0700 (PDT) (envelope-from rizzo@xorpc.icir.org) Received: from xorpc.icir.org (localhost [127.0.0.1]) by xorpc.icir.org (8.12.8p1/8.12.3) with ESMTP id h8GMCMkN033887; Tue, 16 Sep 2003 15:12:22 -0700 (PDT) (envelope-from rizzo@xorpc.icir.org) Received: (from rizzo@localhost) by xorpc.icir.org (8.12.8p1/8.12.3/Submit) id h8GMCMDh033886; Tue, 16 Sep 2003 15:12:22 -0700 (PDT) (envelope-from rizzo) Date: Tue, 16 Sep 2003 15:12:22 -0700 From: Luigi Rizzo To: David J Duchscher Message-ID: <20030916151221.A29339@xorpc.icir.org> References: <1B25DA5C-E88F-11D7-85AF-000A956E58AC@tamu.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i In-Reply-To: <1B25DA5C-E88F-11D7-85AF-000A956E58AC@tamu.edu>; from daved@tamu.edu on Tue, Sep 16, 2003 at 04:45:36PM -0500 cc: freebsd-net@freebsd.org Subject: Re: Bridging Benchmarks X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Sep 2003 22:12:24 -0000 On Tue, Sep 16, 2003 at 04:45:36PM -0500, David J Duchscher wrote: > We have been benchmarking FreeBSD configured as a bridge and I thought > I would share the data that we have been collecting. Its a work in > progress so more data will show up as try some more Ethernet cards and > machine configurations. Everything is 100Mbps at the moment. Would be > very interested in any thoughts, insights or observations people might > have. > > http://wolf.tamu.edu/~daved/bench-100/ interesting results, thanks for sharing them. I would like to add a few comments and suggestions: * as the results with the Gbit card show, the system per se is able to work at wire speed at 100Mbit/s, but some cards and/or drivers have bugs which prevent full-speed operation. Among these, i ran extensive experiments on the Intel PRO/100, and depending on how you program the card, the maximum transmit speed ranges from ~100kpps (with the default driver) to ~120kpps no matter how fast the CPU is. I definitely blame the hardware here. * I have had very good results with cards supported by the 'dc' driver (Intel 21143 chipset and various clones) -- wire speed even at 64-byte frames. Possibly the 'sis' chips might do the same. I know the 'dc' cards are hard to find these days, but i would definitely try one of them if possible. I would also love to see numbers with the 'rl' cards (Realtek8139, most of the cards you find around in the stores) which are probably among the slowest ones we have. * the "latency" curves for some of the cards are quite strange (making me suspect bugs in the drivers or the like). How do you define the 'latency', how do you measure it, and do you know if it is affected by changing "options HZ=..." in your kernel config file (default is 100, i usually recommend using 1000) ? * especially under heavy load (e.g. when using bridge_ipfw=1 and largish rulesets), you might want to build a kernel with options DEVICE_POLLING and do a 'sysctl kern.polling.enable=1' (see "man polling" for other options you should use). It would be great to have the graphs with and without polling, and also with/without bridge_ipfw (even with a simple one-line firewall config) to get an idea of the overhead. The use of polling should prevent the throughput dip after the box reaches the its throughput limit visible in some of the 'Frame loss' graphs. Polling support is available for a number of cards including 'dc', 'em', 'sis', 'fxp' and possibly a few others. cheers luigi From owner-freebsd-net@FreeBSD.ORG Tue Sep 16 16:53:29 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 338B316A4ED for ; Tue, 16 Sep 2003 16:53:29 -0700 (PDT) Received: from rwcrmhc13.comcast.net (rwcrmhc13.comcast.net [204.127.198.39]) by mx1.FreeBSD.org (Postfix) with ESMTP id E22A144358 for ; Tue, 16 Sep 2003 16:52:39 -0700 (PDT) (envelope-from julian@elischer.org) Received: from interjet.elischer.org ([12.233.125.100]) by attbi.com (rwcrmhc13) with ESMTP id <2003091623523801500bt3rue>; Tue, 16 Sep 2003 23:52:39 +0000 Received: from localhost (localhost.elischer.org [127.0.0.1]) by InterJet.elischer.org (8.9.1a/8.9.1) with ESMTP id QAA56786; Tue, 16 Sep 2003 16:52:38 -0700 (PDT) Date: Tue, 16 Sep 2003 16:52:37 -0700 (PDT) From: Julian Elischer To: David J Duchscher In-Reply-To: <1B25DA5C-E88F-11D7-85AF-000A956E58AC@tamu.edu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-net@FreeBSD.ORG Subject: Re: Bridging Benchmarks X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Sep 2003 23:53:30 -0000 it's be really cool to see netgraph bridging in there too.. (/usr/share/examples/netgraph for an example config file) On Tue, 16 Sep 2003, David J Duchscher wrote: > We have been benchmarking FreeBSD configured as a bridge and I thought > I would share the data that we have been collecting. Its a work in > progress so more data will show up as try some more Ethernet cards and > machine configurations. Everything is 100Mbps at the moment. Would be > very interested in any thoughts, insights or observations people might > have. > > http://wolf.tamu.edu/~daved/bench-100/ > > DaveD > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org" > From owner-freebsd-net@FreeBSD.ORG Tue Sep 16 18:29:20 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A62AE16A4B3 for ; Tue, 16 Sep 2003 18:29:20 -0700 (PDT) Received: from fe3.cox-internet.com (fe3-cox.cox-internet.com [66.76.2.40]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9535643F75 for ; Tue, 16 Sep 2003 18:29:19 -0700 (PDT) (envelope-from daved@tamu.edu) Received: from tamu.edu ([66.233.125.246]) by fe3.cox-internet.com f018ea6efd6984189790b5f401fab223) with ESMTP id <20030917012918.BBJT636.fe3@tamu.edu>; Tue, 16 Sep 2003 20:29:18 -0500 Date: Tue, 16 Sep 2003 20:29:37 -0500 Content-Type: text/plain; charset=US-ASCII; format=flowed Mime-Version: 1.0 (Apple Message framework v552) To: Luigi Rizzo From: David J Duchscher In-Reply-To: <20030916151221.A29339@xorpc.icir.org> Message-Id: <66EBFE9A-E8AE-11D7-841F-000A956E58AC@tamu.edu> Content-Transfer-Encoding: 7bit X-Mailer: Apple Mail (2.552) cc: freebsd-net@freebsd.org Subject: Re: Bridging Benchmarks X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2003 01:29:20 -0000 On Tuesday, September 16, 2003, at 05:12 PM, Luigi Rizzo wrote: > On Tue, Sep 16, 2003 at 04:45:36PM -0500, David J Duchscher wrote: >> We have been benchmarking FreeBSD configured as a bridge and I thought >> I would share the data that we have been collecting. Its a work in >> progress so more data will show up as try some more Ethernet cards and >> machine configurations. Everything is 100Mbps at the moment. Would >> be >> very interested in any thoughts, insights or observations people might >> have. >> >> http://wolf.tamu.edu/~daved/bench-100/ > > interesting results, thanks for sharing them. > I would like to add a few comments and suggestions: > > * as the results with the Gbit card show, the system per se > is able to work at wire speed at 100Mbit/s, but some cards and/or > drivers have bugs which prevent full-speed operation. > Among these, i ran extensive experiments on the Intel PRO/100, > and depending on how you program the card, the maximum transmit > speed ranges from ~100kpps (with the default driver) to ~120kpps > no matter how fast the CPU is. I definitely blame the hardware here. We have seen similar results. In a quick test, I didn't see any difference in the performance of the Intel Pro/100 on a 2.4Ghz Xeon machine. That was rather surprising to me since lots of people swear by them. > * I have had very good results with cards supported by the 'dc' > driver (Intel 21143 chipset and various clones) -- wire speed even > at 64-byte frames. Possibly the 'sis' chips might do the same. > I know the 'dc' cards are hard to find these days, but i would > definitely try one of them if possible. > I would also love to see numbers with the 'rl' cards (Realtek8139, > most of the cards you find around in the stores) which are > probably among the slowest ones we have. Yea, I trying to find cards to test but its hard. I can only purchase cards that help with the project. For example, I will be testing the Intel Pro/1000T Desktop Adapters since the gigabit cards have shown to be full bandwidth. > * the "latency" curves for some of the cards are quite strange > (making me suspect bugs in the drivers or the like). > How do you define the 'latency', how do you measure it, and do > you know if it is affected by changing "options HZ=..." in your > kernel config file (default is 100, i usually recommend using > 1000) ? All of this data is coming from a Anritsu MD1230A test unit running the RFC2544 Performance tests. http://snurl.com/2d9x Currently the kernel HZ value is set to 1000. I have it on my list of things to change and perform the tests again. > * especially under heavy load (e.g. when using bridge_ipfw=1 and > largish rulesets), you might want to build a kernel with > options DEVICE_POLLING and do a 'sysctl kern.polling.enable=1' > (see "man polling" for other options you should use). > It would be great to have the graphs with and without polling, > and also with/without bridge_ipfw (even with a simple one-line > firewall config) to get an idea of the overhead. > > The use of polling should prevent the throughput dip after > the box reaches the its throughput limit visible in some > of the 'Frame loss' graphs. > > Polling support is available for a number of cards including > 'dc', 'em', 'sis', 'fxp' and possibly a few others. DEVICE_POLLING is high on the lists of things to test. It looks like its going to be a requirement since all of these cards have livelocked the machine at some point during testing. I tried SMC cards today and the machine overloads so much it stops responding long enough for the testing to fail. Thanks for all the input. I am really hoping to get some useful numbers that others can use. DaveD From owner-freebsd-net@FreeBSD.ORG Wed Sep 17 05:32:42 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 69C3516A4B3 for ; Wed, 17 Sep 2003 05:32:42 -0700 (PDT) Received: from rambo.401.cx (rambo.401.cx [80.65.205.166]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9A44F43FDD for ; Wed, 17 Sep 2003 05:32:40 -0700 (PDT) (envelope-from listsub@401.cx) Received: from 401.cx (132.dairy.twenty4help.se [80.65.195.132]) by rambo.401.cx (8.12.9/8.12.9) with ESMTP id h8HCWWcx022786; Wed, 17 Sep 2003 14:32:32 +0200 (CEST) (envelope-from listsub@401.cx) Message-ID: <3F68545B.7040609@401.cx> Date: Wed, 17 Sep 2003 14:32:27 +0200 From: "Roger 'Rocky' Vetterberg" User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5b) Gecko/20030723 Thunderbird/0.1 X-Accept-Language: en-us, en MIME-Version: 1.0 To: David J Duchscher References: <66EBFE9A-E8AE-11D7-841F-000A956E58AC@tamu.edu> In-Reply-To: <66EBFE9A-E8AE-11D7-841F-000A956E58AC@tamu.edu> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: Luigi Rizzo cc: freebsd-net@freebsd.org Subject: Re: Bridging Benchmarks X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2003 12:32:42 -0000 David J Duchscher wrote: *snip* > > Yea, I trying to find cards to test but its hard. I can only purchase > cards > that help with the project. For example, I will be testing the Intel > Pro/1000T > Desktop Adapters since the gigabit cards have shown to be full bandwidth. Would it be possible to donate some spare cards for you to test? I frequently find myself having a lot of mid-range 100MBit nics to spare, such as 3com's, Netgears and D-Links. Having a database of network cards where you could compare performance seems like an excellent idea. -- R From owner-freebsd-net@FreeBSD.ORG Wed Sep 17 11:02:32 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B930F16A4BF for ; Wed, 17 Sep 2003 11:02:32 -0700 (PDT) Received: from hotmail.com (law11-f42.law11.hotmail.com [64.4.17.42]) by mx1.FreeBSD.org (Postfix) with ESMTP id 454FC43F85 for ; Wed, 17 Sep 2003 11:02:32 -0700 (PDT) (envelope-from bits_in_trouble@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 17 Sep 2003 11:02:32 -0700 Received: from 216.20.160.137 by lw11fd.law11.hotmail.msn.com with HTTP; Wed, 17 Sep 2003 18:02:31 GMT X-Originating-IP: [216.20.160.137] X-Originating-Email: [bits_in_trouble@hotmail.com] From: "Bit introuble" To: freebsd-net@freebsd.org Date: Wed, 17 Sep 2003 18:02:31 +0000 Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 17 Sep 2003 18:02:32.0049 (UTC) FILETIME=[DD98A610:01C37D45] Subject: X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2003 18:02:32 -0000 Hi, I am looking for some help. I am using FreeBSD Mini 4.8 i386. I receive this error on one of the machines: sis0: PHY failed to come ready. Then the machine hangs. Please Help Thanks _________________________________________________________________ Get 10MB of e-mail storage! Sign up for Hotmail Extra Storage. http://join.msn.com/?PAGE=features/es From owner-freebsd-net@FreeBSD.ORG Wed Sep 17 12:46:20 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id CB48316A4B3 for ; Wed, 17 Sep 2003 12:46:20 -0700 (PDT) Received: from hotmail.com (sea1-dav32.sea1.hotmail.com [207.68.162.89]) by mx1.FreeBSD.org (Postfix) with ESMTP id F2C1143FF3 for ; Wed, 17 Sep 2003 12:46:18 -0700 (PDT) (envelope-from ed_anisko@hotmail.com) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Wed, 17 Sep 2003 12:46:18 -0700 Received: from 216.20.160.137 by sea1-dav32.sea1.hotmail.com with DAV; Wed, 17 Sep 2003 19:46:18 +0000 X-Originating-IP: [216.20.160.137] X-Originating-Email: [ed_anisko@hotmail.com] From: "Ed Anisko" To: MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Message-ID: X-OriginalArrivalTime: 17 Sep 2003 19:46:18.0554 (UTC) FILETIME=[5CE1E9A0:01C37D54] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: TCP-IP connection fails after n minutes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Date: Wed, 17 Sep 2003 19:46:21 -0000 X-Original-Date: Sun, 17 Aug 2003 12:53:01 -0700 X-List-Received-Date: Wed, 17 Sep 2003 19:46:21 -0000 I am using 4.8 and qmail for a high volume smtp relay on three identical = 1u servers. Sis MB, pIII 833, on board nics, idea, shared memory for = viedo set at 2mb. Nice boxes. Call them mail1, mail2 and mail3... Each = have their own networking issues that I could use a hand with. email1: - Dead It worked fine for a day, now after a reboot i get the following error: sis0: PHY failed to come ready. the whole box hangs and needs the power cut to come back up, at which = point it repeats the same problem. email2: - It works for a while It works for about 30 mins until it seems to 'drop off the internet' By = this i mean... it receives and sends mail at its ip for 30 mins and = then.... It can ping itself but it can't ping its gateway router. and no = other computer can ping it. But it doesn't crash. I have been = rebooting every 1/2 hour, hardly the best solution. (hey im new) And i = would really appreciate any input that would sever this computer = attatchment disorder. email3: - It works! hey buddy, no one is as suprised as me. Like I said, these configurations are just about identical. Any information would be appreciated. Thanks Eddie Anisko The =20 From owner-freebsd-net@FreeBSD.ORG Wed Sep 17 13:34:37 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id AF22316A4C0 for ; Wed, 17 Sep 2003 13:34:37 -0700 (PDT) Received: from niwun.pair.com (niwun.pair.com [209.68.2.70]) by mx1.FreeBSD.org (Postfix) with SMTP id CB5D643FB1 for ; Wed, 17 Sep 2003 13:34:36 -0700 (PDT) (envelope-from silby@silby.com) Received: (qmail 85785 invoked by uid 3193); 17 Sep 2003 20:34:36 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 17 Sep 2003 20:34:36 -0000 Date: Wed, 17 Sep 2003 16:34:36 -0400 (EDT) From: Mike Silbersack X-X-Sender: silby@niwun.pair.com To: Ed Anisko In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-net@freebsd.org Subject: Re: TCP-IP connection fails after n minutes X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Sep 2003 20:34:37 -0000 On Sun, 17 Aug 2003, Ed Anisko wrote: > email1: - Dead > It worked fine for a day, now after a reboot i get the following error: > sis0: PHY failed to come ready. > the whole box hangs and needs the power cut to come back up, at which point it repeats the same problem. Try rebooting without the network cable plugged in, and/or see if you can plug it into a different brand of switch. > at its ip for 30 mins and then.... It can ping itself but it can't ping > its gateway router. and no other computer can ping it. But it doesn't For future reference, pinging itself means nothing; such pings are handled inside the kernel and never actually hit the network card. Could you post the dmesg output of the machines along with what ifconfig looks like on machine 2 when it's working and when it's not working? Thanks, Mike "Silby" Silbersack From owner-freebsd-net@FreeBSD.ORG Wed Sep 17 18:31:03 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7662E16A4B3 for ; Wed, 17 Sep 2003 18:31:03 -0700 (PDT) Received: from mail.econolodgetulsa.com (mail.econolodgetulsa.com [198.78.66.163]) by mx1.FreeBSD.org (Postfix) with ESMTP id DE7D843FD7 for ; Wed, 17 Sep 2003 18:31:02 -0700 (PDT) (envelope-from user@mail.econolodgetulsa.com) Received: from mail (user@mail [198.78.66.163])h8I1V3nW068054 for ; Wed, 17 Sep 2003 18:31:03 -0700 (PDT) (envelope-from user@mail.econolodgetulsa.com) Date: Wed, 17 Sep 2003 18:31:03 -0700 (PDT) From: Josh Brooks To: freebsd-net@freebsd.org Message-ID: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 01:31:03 -0000 Whenever I run: tcpdump -vvv when I am finished, I am surprised to see: 27441 packets received by filter 7866 packets dropped by kernel I have pored over the tcpdump man page, but do not see how to tell it to not drop any of the packets. What is the purpose behind this ? I can't think of any situation where I would want to run tcpdump and not see certain things. The whole point of my tcpdump usage is to try to catch some malicious traffic that I think is hitting my system - if it is dropping so many packets, I might never see it! Many thanks - and also, just out of curiousity, what _is_ the situation in which it helps to throw out 20% of the packets and not see them ? From owner-freebsd-net@FreeBSD.ORG Wed Sep 17 18:42:10 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D2E2116A4B3 for ; Wed, 17 Sep 2003 18:42:10 -0700 (PDT) Received: from mag.barnet.com.au (mag.barnet.com.au [218.185.88.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0DA4143FBD for ; Wed, 17 Sep 2003 18:42:08 -0700 (PDT) (envelope-from edwin@mavetju.org) Received: from extmail.barnet.com.au (tim.direct.int.barnet.com.au [10.10.10.2]) by mag.barnet.com.au (Postfix) with ESMTP id A1647D15; Thu, 18 Sep 2003 11:42:05 +1000 (EST) X-Viruscan-Id: <3F690D6D000035B001A989F3@VIRUSCAN-127.0.0.1> Received: from k7.mavetju (tim.barnet.com.au [218.185.88.1]) by extmail.barnet.com.au (Postfix) with ESMTP id 9ADF81E15; Thu, 18 Sep 2003 11:42:04 +1000 (EST) Received: by k7.mavetju (Postfix, from userid 1001) id B561C6A7101; Thu, 18 Sep 2003 11:42:03 +1000 (EST) Date: Thu, 18 Sep 2003 11:42:03 +1000 From: Edwin Groothuis To: Josh Brooks Message-ID: <20030918014203.GA59403@k7.mavetju> References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> User-Agent: Mutt/1.4.1i cc: freebsd-net@freebsd.org Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 01:42:10 -0000 On Wed, Sep 17, 2003 at 06:31:03PM -0700, Josh Brooks wrote: > Whenever I run: > > tcpdump -vvv > > when I am finished, I am surprised to see: > > 27441 packets received by filter > 7866 packets dropped by kernel That's because the buffer of captures-but-not-yet-processed packets in tcpdump was filled up. In other words, your system is to slow to process the amount of traffic going through your machine. Edwin -- Edwin Groothuis | Personal website: http://www.mavetju.org edwin@mavetju.org | Weblog: http://www.mavetju.org/weblog/weblog.php From owner-freebsd-net@FreeBSD.ORG Wed Sep 17 18:45:32 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 77ECB16A4B3 for ; Wed, 17 Sep 2003 18:45:32 -0700 (PDT) Received: from smtp.netli.com (ip2-pal-focal.netli.com [66.243.52.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 988AA43FAF for ; Wed, 17 Sep 2003 18:45:31 -0700 (PDT) (envelope-from vlm@netli.com) Received: (qmail 26901 invoked by uid 84); 18 Sep 2003 01:45:31 -0000 Received: from vlm@netli.com by l3-1 with qmail-scanner-0.96 (uvscan: v4.1.40/v4121. . Clean. Processed in 0.149876 secs); 18 Sep 2003 01:45:31 -0000 Received: from unknown (HELO netli.com) (172.17.1.12) by mx01-pal-lan.netli.lan with SMTP; 18 Sep 2003 01:45:31 -0000 Message-ID: <3F690E7D.90201@netli.com> Date: Wed, 17 Sep 2003 18:46:37 -0700 From: Lev Walkin Organization: Netli, Inc. User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.4) Gecko/20030820 X-Accept-Language: ru, en-us, en MIME-Version: 1.0 To: Josh Brooks References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> In-Reply-To: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-net@freebsd.org Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 01:45:32 -0000 Josh Brooks wrote: > Whenever I run: > > tcpdump -vvv > > when I am finished, I am surprised to see: > > 27441 packets received by filter > 7866 packets dropped by kernel > > I have pored over the tcpdump man page, but do not see how to tell it to > not drop any of the packets. > > What is the purpose behind this ? I can't think of any situation where I > would want to run tcpdump and not see certain things. > > The whole point of my tcpdump usage is to try to catch some malicious > traffic that I think is hitting my system - if it is dropping so many > packets, I might never see it! > > Many thanks - and also, just out of curiousity, what _is_ the situation in > which it helps to throw out 20% of the packets and not see them ? Would you want to de-prioritize tcpdump so if it can't process data quickly enough as the kernel receives them, the kernel would stop processing packets and wait tcpdump to finish? But seriously, there is a solution for your problem. Add a -n to your numerous -v's. You probably don't want to spend precious tcpdump's time to resolve IPs it captures, while losing data. -- Lev Walkin vlm@netli.com From owner-freebsd-net@FreeBSD.ORG Wed Sep 17 23:14:53 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 59A3916A4B3 for ; Wed, 17 Sep 2003 23:14:53 -0700 (PDT) Received: from silver.he.iki.fi (helenius.fi [193.64.42.241]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0251143FDD for ; Wed, 17 Sep 2003 23:14:52 -0700 (PDT) (envelope-from pete@he.iki.fi) Received: from he.iki.fi (h81.vuokselantie10.fi [193.64.42.129]) by silver.he.iki.fi (8.12.9/8.11.4) with ESMTP id h8I6EmSq064712; Thu, 18 Sep 2003 09:14:48 +0300 (EEST) (envelope-from pete@he.iki.fi) Message-ID: <3F694D56.9040609@he.iki.fi> Date: Thu, 18 Sep 2003 09:14:46 +0300 From: Petri Helenius User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Edwin Groothuis References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <20030918014203.GA59403@k7.mavetju> In-Reply-To: <20030918014203.GA59403@k7.mavetju> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-net@freebsd.org cc: Josh Brooks Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 06:14:53 -0000 Edwin Groothuis wrote: >On Wed, Sep 17, 2003 at 06:31:03PM -0700, Josh Brooks wrote: > > >>Whenever I run: >> >>tcpdump -vvv >> >>when I am finished, I am surprised to see: >> >>27441 packets received by filter >>7866 packets dropped by kernel >> >> > >That's because the buffer of captures-but-not-yet-processed packets >in tcpdump was filled up. In other words, your system is to slow >to process the amount of traffic going through your machine. > > > Sure, but because the bug in pcap-bpf.c there is no way to set the buffer above 32768 without recompiling the library after applying the patch. This bug should be fixed in the FreeBSD copy of libpcap because tcpdump folks seem to be quite dormant. Pete From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 05:32:05 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C4CD316A4B3 for ; Thu, 18 Sep 2003 05:32:05 -0700 (PDT) Received: from genius.tao.org.uk (genius.tao.org.uk [212.135.162.51]) by mx1.FreeBSD.org (Postfix) with ESMTP id DDFC443F3F for ; Thu, 18 Sep 2003 05:32:04 -0700 (PDT) (envelope-from joe@genius.tao.org.uk) Received: by genius.tao.org.uk (Postfix, from userid 100) id 6A85D42DA; Thu, 18 Sep 2003 13:32:03 +0100 (BST) Date: Thu, 18 Sep 2003 13:32:03 +0100 From: Josef Karthauser To: freebsd-net@freebsd.org Message-ID: <20030918123203.GC13474@genius.tao.org.uk> References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <3F690E7D.90201@netli.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="/e2eDi0V/xtL+Mc8" Content-Disposition: inline In-Reply-To: <3F690E7D.90201@netli.com> User-Agent: Mutt/1.5.4i Subject: Traffic analysis ports? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 12:32:05 -0000 --/e2eDi0V/xtL+Mc8 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Dear all, I'm looking for some software to basically analyse the traffic I've got going over a particular pipe so that I can work out whether or what to traffic shape. Can anyone recommend anything? Joe --=20 Josef Karthauser (joe@tao.org.uk) http://www.josef-k.net/ FreeBSD (cvs meister, admin and hacker) http://www.uk.FreeBSD.org/ Physics Particle Theory (student) http://www.pact.cpes.sussex.ac.uk/ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D An eclectic mix of fact an= d theory. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D --/e2eDi0V/xtL+Mc8 Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iEYEARECAAYFAj9ppcIACgkQXVIcjOaxUBa3JQCePaB7bEyfUxQza2IxVXktui1x Fh4AoKA9mz5jawIHkl9PxV7Sa9JO8dHK =VWH7 -----END PGP SIGNATURE----- --/e2eDi0V/xtL+Mc8-- From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 05:49:16 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 80A2616A4B3; Thu, 18 Sep 2003 05:49:16 -0700 (PDT) Received: from rambo.401.cx (rambo.401.cx [80.65.205.166]) by mx1.FreeBSD.org (Postfix) with ESMTP id B2E0C43FE1; Thu, 18 Sep 2003 05:49:12 -0700 (PDT) (envelope-from listsub@401.cx) Received: from 401.cx (132.dairy.twenty4help.se [80.65.195.132]) by rambo.401.cx (8.12.9/8.12.9) with ESMTP id h8ICn9cx085475; Thu, 18 Sep 2003 14:49:10 +0200 (CEST) (envelope-from listsub@401.cx) Message-ID: <3F69A9C0.4090201@401.cx> Date: Thu, 18 Sep 2003 14:49:04 +0200 From: "Roger 'Rocky' Vetterberg" User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5b) Gecko/20030723 Thunderbird/0.1 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Josef Karthauser References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <3F690E7D.90201@netli.com> <20030918123203.GC13474@genius.tao.org.uk> In-Reply-To: <20030918123203.GC13474@genius.tao.org.uk> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-net@freebsd.org Subject: Re: Traffic analysis ports? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 12:49:16 -0000 Josef Karthauser wrote: > Dear all, > > I'm looking for some software to basically analyse the traffic I've got > going over a particular pipe so that I can work out whether or what to > traffic shape. Can anyone recommend anything? > > Joe My first recommendation would be to not reply to existing postings when starting a new thread. It really messes up the inbox for people that prefer threaded views. As for software recommendations, have you looked at tcpdump? Its a lot of manual labour, but with some simple scripting you should be able to easily figure out what kind of traffic is eating your pipe. If you dont mind a buggy, resource eating hog with lots of security issues you could look at ntop. It has a webinterface that draws very pretty graphs and diagrams with all the information you could possibly want. But as I said, it will eat resources and dont blame me if youre hacked while running it. Just install it, fire it up and let it run for a few hours and you will have enough data to work with I think. If you like it you can keep it running, but as I said, dont blame me. -- R From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 06:04:12 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0AF2F16A4B3; Thu, 18 Sep 2003 06:04:12 -0700 (PDT) Received: from ganymede.hub.org (u173n10.eastlink.ca [24.224.173.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0FCDC43FAF; Thu, 18 Sep 2003 06:04:07 -0700 (PDT) (envelope-from scrappy@hub.org) Received: by ganymede.hub.org (Postfix, from userid 1000) id AE31E343C6; Thu, 18 Sep 2003 10:04:14 -0300 (ADT) Received: from localhost (localhost [127.0.0.1]) by ganymede.hub.org (Postfix) with ESMTP id 8BD193430B; Thu, 18 Sep 2003 10:04:14 -0300 (ADT) Date: Thu, 18 Sep 2003 10:04:14 -0300 (ADT) From: "Marc G. Fournier" To: Josef Karthauser In-Reply-To: <20030918123203.GC13474@genius.tao.org.uk> Message-ID: <20030918100354.X80883@ganymede.hub.org> References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <3F690E7D.90201@netli.com> <20030918123203.GC13474@genius.tao.org.uk> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-net@freebsd.org Subject: Re: Traffic analysis ports? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 13:04:12 -0000 best I've found so far is ipaudit ... On Thu, 18 Sep 2003, Josef Karthauser wrote: > Dear all, > > I'm looking for some software to basically analyse the traffic I've got > going over a particular pipe so that I can work out whether or what to > traffic shape. Can anyone recommend anything? > > Joe > -- > Josef Karthauser (joe@tao.org.uk) http://www.josef-k.net/ > FreeBSD (cvs meister, admin and hacker) http://www.uk.FreeBSD.org/ > Physics Particle Theory (student) http://www.pact.cpes.sussex.ac.uk/ > ================ An eclectic mix of fact and theory. ================= > From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 07:17:54 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ED46116A4B3 for ; Thu, 18 Sep 2003 07:17:54 -0700 (PDT) Received: from tenebras.com (blade.tenebras.com [66.92.188.175]) by mx1.FreeBSD.org (Postfix) with SMTP id 483C843FB1 for ; Thu, 18 Sep 2003 07:17:54 -0700 (PDT) (envelope-from kudzu@tenebras.com) Received: (qmail 80124 invoked from network); 18 Sep 2003 14:17:54 -0000 Received: from sapphire.tenebras.com (HELO tenebras.com) (192.168.188.241) by laptop.tenebras.com with SMTP; 18 Sep 2003 14:17:54 -0000 Message-ID: <3F69BE91.7080604@tenebras.com> Date: Thu, 18 Sep 2003 07:17:53 -0700 From: Michael Sierchio User-Agent: Mozilla/5.0 (X11; U; Linux i386; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: en-us, zh-tw, zh-cn, fr, en, de-de MIME-Version: 1.0 To: freebsd-net@freebsd.org References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> In-Reply-To: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 14:17:55 -0000 Josh Brooks wrote: > Whenever I run: > > tcpdump -vvv > > when I am finished, I am surprised to see: > > 27441 packets received by filter > 7866 packets dropped by kernel The time it takes to resolve host names, probably, and the additional burden of writing the service names, where known, etc. Try tcpdump -vvv -n or tcpdump -vvv -ln From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 07:58:55 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8B40A16A4BF for ; Thu, 18 Sep 2003 07:58:55 -0700 (PDT) Received: from boreas.isi.edu (boreas.isi.edu [128.9.160.161]) by mx1.FreeBSD.org (Postfix) with ESMTP id B5C5A43FE0 for ; Thu, 18 Sep 2003 07:58:53 -0700 (PDT) (envelope-from larse@ISI.EDU) Received: from isi.edu (c-24-130-112-121.we.client2.attbi.com [24.130.112.121]) by boreas.isi.edu (8.11.6p2+0917/8.11.2) with ESMTP id h8IEwqb17301; Thu, 18 Sep 2003 07:58:52 -0700 (PDT) Message-ID: <3F69C82C.1070707@isi.edu> Date: Thu, 18 Sep 2003 07:58:52 -0700 From: Lars Eggert Organization: USC Information Sciences Institute User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5b) Gecko/20030827 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Michael Sierchio References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <3F69BE91.7080604@tenebras.com> In-Reply-To: <3F69BE91.7080604@tenebras.com> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms030007040601040600040707" cc: freebsd-net@freebsd.org Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 14:58:55 -0000 This is a cryptographically signed message in MIME format. --------------ms030007040601040600040707 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Michael Sierchio wrote: > > The time it takes to resolve host names, probably, and the additional > burden of writing the service names, where known, etc. > > Try > > tcpdump -vvv -n > > or > > tcpdump -vvv -ln Or try a binary dump straight into a file, and analyze it offline. Lars -- Lars Eggert USC Information Sciences Institute --------------ms030007040601040600040707 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJtjCC AzgwggKhoAMCAQICEGZFcrfMdPXPY3ZFhNAukQEwDQYJKoZIhvcNAQEEBQAwgdExCzAJBgNV BAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgG A1UEChMRVGhhd3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2Vydmlj ZXMgRGl2aXNpb24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkG CSqGSIb3DQEJARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTAeFw0wMDA4MzAwMDAw MDBaFw0wNDA4MjcyMzU5NTlaMIGSMQswCQYDVQQGEwJaQTEVMBMGA1UECBMMV2VzdGVybiBD YXBlMRIwEAYDVQQHEwlDYXBlIFRvd24xDzANBgNVBAoTBlRoYXd0ZTEdMBsGA1UECxMUQ2Vy dGlmaWNhdGUgU2VydmljZXMxKDAmBgNVBAMTH1BlcnNvbmFsIEZyZWVtYWlsIFJTQSAyMDAw LjguMzAwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAN4zMqZjxwklRT7SbngnZ4HF2ogZ gpcO40QpimM1Km1wPPrcrvfudG8wvDOQf/k0caCjbZjxw0+iZdsN+kvx1t1hpfmFzVWaNRqd knWoJ67Ycvm6AvbXsJHeHOmr4BgDqHxDQlBRh4M88Dm0m1SKE4f/s5udSWYALQmJ7JRr6aFp AgMBAAGjTjBMMCkGA1UdEQQiMCCkHjAcMRowGAYDVQQDExFQcml2YXRlTGFiZWwxLTI5NzAS BgNVHRMBAf8ECDAGAQH/AgEAMAsGA1UdDwQEAwIBBjANBgkqhkiG9w0BAQQFAAOBgQAxsUtH XfkBceX1U2xdedY9mMAmE2KBIqcS+CKV6BtJtyd7BDm6/ObyJOuR+r3sDSo491BVqGz3Da1M G7wD9LXrokefbKIMWI0xQgkRbLAaadErErJAXWr5edDqLiXdiuT82w0fnQLzWtvKPPZE6iZp h39Ins6ln+eE2MliYq0FxjCCAzkwggKioAMCAQICAwp2bzANBgkqhkiG9w0BAQQFADCBkjEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYD VQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAwMC44LjMwMB4XDTAzMDgwMTE3MjkyOVoX DTA0MDczMTE3MjkyOVowVDEPMA0GA1UEBBMGRWdnZXJ0MQ0wCwYDVQQqEwRMYXJzMRQwEgYD VQQDEwtMYXJzIEVnZ2VydDEcMBoGCSqGSIb3DQEJARYNbGFyc2VAaXNpLmVkdTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMb7PuLXnwV+45vwlkgogdSijd5HVqUB14bWvoK0 MjWPnkLPMDMDEezdsMG1BPiZyNeqXlJJtEgdAK8H2Mc9/qLeJUq3CoAeD6Wrjq4QaxJBXgdS KcGDeQAZSDgwUJS9vx9+cXJVfLyOYxJ+CLBcO/eu8PvSi17lk6oeAbrskSGDu/Xi1o2SC4Qm l69k8xcZQEMQDodkIk/U5SJmsCRGGYdy7opHZb58yXI8eiIGp5MlgryFmmgrp1pg3OYzPOR9 zJjn7Pu1vsd97LM5hLnKrmNuYt02jLNSjr8HmpLyWCDZq4Jlfq1YgNYZZ4KOSxipia7Bxjcs nMOsxEWiolkVVT8CAwEAAaNWMFQwKgYFK2UBBAEEITAfAgEAMBowGAIBBAQTTDJ1TXlmZkJO VWJOSkpjZFoyczAYBgNVHREEETAPgQ1sYXJzZUBpc2kuZWR1MAwGA1UdEwEB/wQCMAAwDQYJ KoZIhvcNAQEEBQADgYEANRaPsUtrdJzTW0AMj/EQamqxOkZnzwnPWGryqskMKIf+OKa+eaXp zlBv8CHdffv9hrYpvzWUxk0WW+YJ2LRdd4fFiVGXZCGU60eYeZGf7Z8ORoexylJpvUuKZCE4 aPGY2/QZXDfOs1NE82Bhgltx59dpWfH2K0dxbpHslO8/IbowggM5MIICoqADAgECAgMKdm8w DQYJKoZIhvcNAQEEBQAwgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUx EjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZp Y2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4z MDAeFw0wMzA4MDExNzI5MjlaFw0wNDA3MzExNzI5MjlaMFQxDzANBgNVBAQTBkVnZ2VydDEN MAsGA1UEKhMETGFyczEUMBIGA1UEAxMLTGFycyBFZ2dlcnQxHDAaBgkqhkiG9w0BCQEWDWxh cnNlQGlzaS5lZHUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+z7i158FfuOb 8JZIKIHUoo3eR1alAdeG1r6CtDI1j55CzzAzAxHs3bDBtQT4mcjXql5SSbRIHQCvB9jHPf6i 3iVKtwqAHg+lq46uEGsSQV4HUinBg3kAGUg4MFCUvb8ffnFyVXy8jmMSfgiwXDv3rvD70ote 5ZOqHgG67JEhg7v14taNkguEJpevZPMXGUBDEA6HZCJP1OUiZrAkRhmHcu6KR2W+fMlyPHoi BqeTJYK8hZpoK6daYNzmMzzkfcyY5+z7tb7HfeyzOYS5yq5jbmLdNoyzUo6/B5qS8lgg2auC ZX6tWIDWGWeCjksYqYmuwcY3LJzDrMRFoqJZFVU/AgMBAAGjVjBUMCoGBStlAQQBBCEwHwIB ADAaMBgCAQQEE0wydU15ZmZCTlViTkpKY2RaMnMwGAYDVR0RBBEwD4ENbGFyc2VAaXNpLmVk dTAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBBAUAA4GBADUWj7FLa3Sc01tADI/xEGpqsTpG Z88Jz1hq8qrJDCiH/jimvnml6c5Qb/Ah3X37/Ya2Kb81lMZNFlvmCdi0XXeHxYlRl2QhlOtH mHmRn+2fDkaHscpSab1LimQhOGjxmNv0GVw3zrNTRPNgYYJbcefXaVnx9itHcW6R7JTvPyG6 MYID1TCCA9ECAQEwgZowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUx EjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZp Y2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4z MAIDCnZvMAkGBSsOAwIaBQCgggIPMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZI hvcNAQkFMQ8XDTAzMDkxODE0NTg1MlowIwYJKoZIhvcNAQkEMRYEFMQWQYW4HJH13VsXnb4n u2aI6KkBMFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0G CCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGrBgkrBgEEAYI3EAQxgZ0w gZowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNh cGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNl czEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4zMAIDCnZvMIGtBgsq hkiG9w0BCRACCzGBnaCBmjCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2Fw ZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRp ZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAwMC44 LjMwAgMKdm8wDQYJKoZIhvcNAQEBBQAEggEAaLt9a6VBZHdKQ1U1UMViKArEe9zKudaAya4Z hG/o5eV1oi8TVWLulxEmV2z9knwoWw4smV517Pjw4U4PW8XmwE1aXttuwNCfpmjhMQCHQKld YUe0a9g8gJjKB+7suc1sgyeQdCAkksDkf2KH/UvihDeV8PBVGtjPDczqHW392nCW5aKhYH7O xgjNB2WDgCMdgR62XN5uEulESTH3gGRa+qmSqMynKSFsM+o/W6DLMJILWhXoiGQ6198UnoGf lrcQpfg0rJ0D73TEiH2p1gs1zSrQrzXDyMxc2tM9Wm84ipQ5vWV/4tdtwL6r2q3Ivwd3AtZG qh5Is45FYqyF3DhSHQAAAAAAAA== --------------ms030007040601040600040707-- From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 08:45:55 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 1C98616A4B3 for ; Thu, 18 Sep 2003 08:45:55 -0700 (PDT) Received: from arginine.spc.org (arginine.spc.org [195.206.69.236]) by mx1.FreeBSD.org (Postfix) with ESMTP id D14F243FE9 for ; Thu, 18 Sep 2003 08:45:52 -0700 (PDT) (envelope-from bms@spc.org) Received: from localhost (localhost [127.0.0.1]) by arginine.spc.org (Postfix) with ESMTP id 10E796540E; Thu, 18 Sep 2003 16:45:52 +0100 (BST) Received: from arginine.spc.org ([127.0.0.1]) by localhost (arginine.spc.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 25496-03-4; Thu, 18 Sep 2003 16:45:51 +0100 (BST) Received: from saboteur.dek.spc.org (unknown [81.3.72.68]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by arginine.spc.org (Postfix) with ESMTP id DF54D65408; Thu, 18 Sep 2003 16:45:49 +0100 (BST) Received: by saboteur.dek.spc.org (Postfix, from userid 1001) id 03D76C5; Thu, 18 Sep 2003 13:43:11 +0100 (BST) Date: Thu, 18 Sep 2003 13:43:11 +0100 From: Bruce M Simpson To: Petri Helenius Message-ID: <20030918124311.GC3431@saboteur.dek.spc.org> Mail-Followup-To: Petri Helenius , Edwin Groothuis , freebsd-net@freebsd.org, Josh Brooks References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <20030918014203.GA59403@k7.mavetju> <3F694D56.9040609@he.iki.fi> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3F694D56.9040609@he.iki.fi> Organization: SPC cc: freebsd-net@freebsd.org cc: Josh Brooks Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 15:45:55 -0000 On Thu, Sep 18, 2003 at 09:14:46AM +0300, Petri Helenius wrote: > Sure, but because the bug in pcap-bpf.c there is no way to set the > buffer above 32768 > without recompiling the library after applying the patch. > > This bug should be fixed in the FreeBSD copy of libpcap because tcpdump > folks seem > to be quite dormant. We should avoid applying patches on the import if we possibly can, it's Not Right. I'd suggest submitting a patch via Sourceforge. I did this at Bill Fenner's suggestion for some protocol additions I'd made, and Guy Harris has been very good about closing and applying them, even if it takes him a week or two to get around to it as he is quite busy. BMS From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 11:14:26 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 932FD16A4B3; Thu, 18 Sep 2003 11:14:26 -0700 (PDT) Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by mx1.FreeBSD.org (Postfix) with ESMTP id AF80343FBF; Thu, 18 Sep 2003 11:14:25 -0700 (PDT) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (localhost [127.0.0.1]) by fledge.watson.org (8.12.9/8.12.9) with ESMTP id h8IIEOgL002131; Thu, 18 Sep 2003 14:14:24 -0400 (EDT) (envelope-from robert@fledge.watson.org) Received: from localhost (robert@localhost)h8IIENWh002128; Thu, 18 Sep 2003 14:14:24 -0400 (EDT) Date: Thu, 18 Sep 2003 14:14:23 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: Josef Karthauser In-Reply-To: <20030918123203.GC13474@genius.tao.org.uk> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII cc: freebsd-net@FreeBSD.org Subject: Re: Traffic analysis ports? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 18:14:26 -0000 On Thu, 18 Sep 2003, Josef Karthauser wrote: > I'm looking for some software to basically analyse the traffic I've got > going over a particular pipe so that I can work out whether or what to > traffic shape. Can anyone recommend anything? I tend to cut my own BPF-based tools as needed to measure particular types of traffic, but that's not a very scalable approach. There are commercial products, such as NAI's Sniffer tool (I think it can read playback from pcap output), which claim to be able to help with that sort of analysis, but I've never really used them. For a "first cut" visualization of currently active network connections, tools such as ntop, trafshow, tcpstat, etc, can actually provide surprising amounts of insight. Robert N M Watson FreeBSD Core Team, TrustedBSD Projects robert@fledge.watson.org Network Associates Laboratories From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 13:59:31 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0EA1B16A4B3 for ; Thu, 18 Sep 2003 13:59:31 -0700 (PDT) Received: from silver.he.iki.fi (helenius.fi [193.64.42.241]) by mx1.FreeBSD.org (Postfix) with ESMTP id 98C6443F75 for ; Thu, 18 Sep 2003 13:59:27 -0700 (PDT) (envelope-from pete@he.iki.fi) Received: from he.iki.fi (h81.vuokselantie10.fi [193.64.42.129]) by silver.he.iki.fi (8.12.9/8.11.4) with ESMTP id h8IKxOSq038963; Thu, 18 Sep 2003 23:59:24 +0300 (EEST) (envelope-from pete@he.iki.fi) Message-ID: <3F6A1CA9.5030701@he.iki.fi> Date: Thu, 18 Sep 2003 23:59:21 +0300 From: Petri Helenius User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20030916 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Bruce M Simpson References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <20030918014203.GA59403@k7.mavetju> <3F694D56.9040609@he.iki.fi> <20030918124311.GC3431@saboteur.dek.spc.org> In-Reply-To: <20030918124311.GC3431@saboteur.dek.spc.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit cc: freebsd-net@freebsd.org cc: Josh Brooks Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 20:59:31 -0000 Bruce M Simpson wrote: >We should avoid applying patches on the import if we possibly can, it's >Not Right. > > > I know and I agree with that. That´s why I would like to have the tree right to avoid patching it locally. Same problem, different leg. >I'd suggest submitting a patch via Sourceforge. I did this at Bill Fenner's >suggestion for some protocol additions I'd made, and Guy Harris has been >very good about closing and applying them, even if it takes him a week or >two to get around to it as he is quite busy. > > > I just noticed that Bill committed fix to this bug back in February. Now it only needs that somebody refreshes the import from 0.7 to 0.7.2. The issue I´m talking about is this: http://cvs.tcpdump.org/cgi-bin/cvsweb.cgi/libpcap/pcap-bpf.c.diff?r1=1.48.2.2&r2=1.48.2.3&f=h Pete From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 14:05:47 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3AA3416A4B3; Thu, 18 Sep 2003 14:05:47 -0700 (PDT) Received: from arginine.spc.org (arginine.spc.org [195.206.69.236]) by mx1.FreeBSD.org (Postfix) with ESMTP id 230E543FCB; Thu, 18 Sep 2003 14:05:46 -0700 (PDT) (envelope-from bms@spc.org) Received: from localhost (localhost [127.0.0.1]) by arginine.spc.org (Postfix) with ESMTP id A2001653D8; Thu, 18 Sep 2003 22:05:42 +0100 (BST) Received: from arginine.spc.org ([127.0.0.1]) by localhost (arginine.spc.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 28390-01-2; Thu, 18 Sep 2003 22:05:42 +0100 (BST) Received: from saboteur.dek.spc.org (unknown [81.3.72.68]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by arginine.spc.org (Postfix) with ESMTP id 0FCF1652EC; Thu, 18 Sep 2003 22:05:41 +0100 (BST) Received: by saboteur.dek.spc.org (Postfix, from userid 1001) id A4C3413; Thu, 18 Sep 2003 22:05:38 +0100 (BST) Date: Thu, 18 Sep 2003 22:05:38 +0100 From: Bruce M Simpson To: Petri Helenius Message-ID: <20030918210538.GB2720@saboteur.dek.spc.org> Mail-Followup-To: Petri Helenius , Edwin Groothuis , freebsd-net@freebsd.org, Josh Brooks , fenner@freebsd.org References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <20030918014203.GA59403@k7.mavetju> <3F694D56.9040609@he.iki.fi> <20030918124311.GC3431@saboteur.dek.spc.org> <3F6A1CA9.5030701@he.iki.fi> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <3F6A1CA9.5030701@he.iki.fi> Organization: SPC cc: freebsd-net@freebsd.org cc: Josh Brooks cc: fenner@freebsd.org Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 21:05:47 -0000 On Thu, Sep 18, 2003 at 11:59:21PM +0300, Petri Helenius wrote: > I just noticed that Bill committed fix to this bug back in February. Now > it only needs that somebody refreshes the import from 0.7 to 0.7.2. Er, if you check this URL: http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/tcpdump/CHANGES Shurely you mean tcpdump 3.7.2, which is already imported (by fenner, with additional hacks)? Perhaps it's something he's missed, in which case, CC'd, though I think he is very busy right now, I know I am... BMS From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 14:43:50 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2877516A4BF; Thu, 18 Sep 2003 14:43:50 -0700 (PDT) Received: from silver.he.iki.fi (helenius.fi [193.64.42.241]) by mx1.FreeBSD.org (Postfix) with ESMTP id D8E1643FBD; Thu, 18 Sep 2003 14:43:48 -0700 (PDT) (envelope-from pete@he.iki.fi) Received: from he.iki.fi (h81.vuokselantie10.fi [193.64.42.129]) by silver.he.iki.fi (8.12.9/8.11.4) with ESMTP id h8ILhlSq039231; Fri, 19 Sep 2003 00:43:47 +0300 (EEST) (envelope-from pete@he.iki.fi) Message-ID: <3F6A2710.5090000@he.iki.fi> Date: Fri, 19 Sep 2003 00:43:44 +0300 From: Petri Helenius User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20030916 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Bruce M Simpson References: <20030917182850.Q52432-100000@mail.econolodgetulsa.com> <20030918014203.GA59403@k7.mavetju> <3F694D56.9040609@he.iki.fi> <20030918124311.GC3431@saboteur.dek.spc.org> <3F6A1CA9.5030701@he.iki.fi> <20030918210538.GB2720@saboteur.dek.spc.org> In-Reply-To: <20030918210538.GB2720@saboteur.dek.spc.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit cc: freebsd-net@freebsd.org cc: Josh Brooks cc: fenner@freebsd.org Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 21:43:50 -0000 Bruce M Simpson wrote: >Er, if you check this URL: >http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/tcpdump/CHANGES > >Shurely you mean tcpdump 3.7.2, which is already imported (by fenner, with >additional hacks)? > > > I mean libpcap, which also tcpdump uses, if I´m not mistaken. Look in contrib/libpcap Pete >Perhaps it's something he's missed, in which case, CC'd, though I think he >is very busy right now, I know I am... > >BMS > > From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 15:28:37 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 91E4116A4B3; Thu, 18 Sep 2003 15:28:37 -0700 (PDT) Received: from mail.sandvine.com (sandvine.com [199.243.201.138]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4EDD143F75; Thu, 18 Sep 2003 15:28:36 -0700 (PDT) (envelope-from don@sandvine.com) Received: by mail.sandvine.com with Internet Mail Service (5.5.2653.19) id ; Thu, 18 Sep 2003 18:28:34 -0400 Message-ID: From: Don Bowman To: 'Petri Helenius' , Bruce M Simpson Date: Thu, 18 Sep 2003 18:28:28 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable cc: freebsd-net@freebsd.org cc: Josh Brooks cc: fenner@freebsd.org Subject: RE: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 22:28:37 -0000 From: Petri Helenius [mailto:pete@he.iki.fi] > Bruce M Simpson wrote: >=20 > >Er, if you check this URL: > >http://www.freebsd.org/cgi/cvsweb.cgi/src/contrib/tcpdump/CHANGES > > > >Shurely you mean tcpdump 3.7.2, which is already imported=20 > (by fenner, with > >additional hacks)? > > > > =20 > > > I mean libpcap, which also tcpdump uses, if I=B4m not mistaken. Look = in=20 > contrib/libpcap >=20 > Pete I found that increasing the bpf buffer size in libpcap to 256K from the default of 4K made a tremendous difference. --don From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 15:31:59 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A42BF16A4BF; Thu, 18 Sep 2003 15:31:59 -0700 (PDT) Received: from silver.he.iki.fi (helenius.fi [193.64.42.241]) by mx1.FreeBSD.org (Postfix) with ESMTP id BEA7043F75; Thu, 18 Sep 2003 15:31:57 -0700 (PDT) (envelope-from pete@he.iki.fi) Received: from he.iki.fi (h81.vuokselantie10.fi [193.64.42.129]) by silver.he.iki.fi (8.12.9/8.11.4) with ESMTP id h8IMVuSq039558; Fri, 19 Sep 2003 01:31:56 +0300 (EEST) (envelope-from pete@he.iki.fi) Message-ID: <3F6A3259.5060409@he.iki.fi> Date: Fri, 19 Sep 2003 01:31:53 +0300 From: Petri Helenius User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20030916 X-Accept-Language: en-us, en MIME-Version: 1.0 To: Don Bowman References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: fenner@freebsd.org cc: Josh Brooks cc: freebsd-net@freebsd.org Subject: Re: I would like to tcpdump and get all the packets... X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 22:31:59 -0000 Don Bowman wrote: >I found that increasing the bpf buffer size in libpcap >to 256K from the default of 4K made a tremendous difference. > > We generally use sizes from 512k to 8M depending on network interface and hardware configuration. Used to do larger but run into some issues with KVM allocations if the machine had been running for a while before bpf fired up. However, until the libpcap is updated, I need to maintain local patch to have the sysctl actually work instead of the library forcing 32k on me. So a fresh import would be greatly appreciated. Pete From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 16:19:06 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9695616A4B3; Thu, 18 Sep 2003 16:19:06 -0700 (PDT) Received: from genius.tao.org.uk (genius.tao.org.uk [212.135.162.51]) by mx1.FreeBSD.org (Postfix) with ESMTP id 501B343FAF; Thu, 18 Sep 2003 16:19:05 -0700 (PDT) (envelope-from joe@genius.tao.org.uk) Received: by genius.tao.org.uk (Postfix, from userid 100) id 7F7864248; Fri, 19 Sep 2003 00:19:03 +0100 (BST) Date: Fri, 19 Sep 2003 00:19:03 +0100 From: Josef Karthauser To: Robert Watson Message-ID: <20030918231903.GC41432@genius.tao.org.uk> References: <20030918123203.GC13474@genius.tao.org.uk> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="s9fJI615cBHmzTOP" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.4i cc: freebsd-net@FreeBSD.org Subject: Re: Traffic analysis ports? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Sep 2003 23:19:06 -0000 --s9fJI615cBHmzTOP Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Sep 18, 2003 at 02:14:23PM -0400, Robert Watson wrote: >=20 > On Thu, 18 Sep 2003, Josef Karthauser wrote: >=20 > > I'm looking for some software to basically analyse the traffic I've got > > going over a particular pipe so that I can work out whether or what to > > traffic shape. Can anyone recommend anything?=20 >=20 > I tend to cut my own BPF-based tools as needed to measure particular types > of traffic, but that's not a very scalable approach. There are commercial > products, such as NAI's Sniffer tool (I think it can read playback from > pcap output), which claim to be able to help with that sort of analysis, > but I've never really used them. For a "first cut" visualization of > currently active network connections, tools such as ntop, trafshow, > tcpstat, etc, can actually provide surprising amounts of insight. >=20 Ahha, ntop. That looks like just the kind of thing I was looking for. Thanks :). Joe --=20 Josef Karthauser (joe@tao.org.uk) http://www.josef-k.net/ FreeBSD (cvs meister, admin and hacker) http://www.uk.FreeBSD.org/ Physics Particle Theory (student) http://www.pact.cpes.sussex.ac.uk/ =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D An eclectic mix of fact an= d theory. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D --s9fJI615cBHmzTOP Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (FreeBSD) iEYEARECAAYFAj9qPWYACgkQXVIcjOaxUBYOoQCg1ie8KUUEvHNfKIbsBxs5Gm5u hrQAoKfEYW8DD8jwOm6FrPBFEF5XLZhH =9C5M -----END PGP SIGNATURE----- --s9fJI615cBHmzTOP-- From owner-freebsd-net@FreeBSD.ORG Thu Sep 18 19:48:31 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 82EFF16A4B3 for ; Thu, 18 Sep 2003 19:48:31 -0700 (PDT) Received: from arginine.spc.org (arginine.spc.org [195.206.69.236]) by mx1.FreeBSD.org (Postfix) with ESMTP id A7A6E43F3F for ; Thu, 18 Sep 2003 19:48:30 -0700 (PDT) (envelope-from bms@spc.org) Received: from localhost (localhost [127.0.0.1]) by arginine.spc.org (Postfix) with ESMTP id D4807653D8; Fri, 19 Sep 2003 03:48:29 +0100 (BST) Received: from arginine.spc.org ([127.0.0.1]) by localhost (arginine.spc.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 31280-01; Fri, 19 Sep 2003 03:48:29 +0100 (BST) Received: from saboteur.dek.spc.org (lardystuffer.demon.co.uk [212.228.40.202]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by arginine.spc.org (Postfix) with ESMTP id 50B8A6538B; Fri, 19 Sep 2003 03:48:23 +0100 (BST) Received: by saboteur.dek.spc.org (Postfix, from userid 1001) id 78B7F3D; Fri, 19 Sep 2003 03:48:19 +0100 (BST) Date: Fri, 19 Sep 2003 03:48:19 +0100 From: Bruce M Simpson To: Vector Message-ID: <20030919024819.GA1092@saboteur.dek.spc.org> Mail-Followup-To: Vector , freebsd-net@freebsd.org References: <03ee01c37e4d$844d5cf0$6afea8c0@VECTOR> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <03ee01c37e4d$844d5cf0$6afea8c0@VECTOR> Organization: SPC cc: freebsd-net@freebsd.org Subject: Re: ipintrq X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Sep 2003 02:48:31 -0000 [Cc'd to -net instead as poss. OT for -current] On Thu, Sep 18, 2003 at 07:29:48PM -0600, Vector wrote: > What happened to ipintrq? I know it is now defined in ip_input.c...problem [snip] Try using netisr_dispatch() to hand-off an mbuf to the network stack instead. Look at the differences between the tunneling drivers in RELENG_4 and RELENG_5_1 for examples. BMS From owner-freebsd-net@FreeBSD.ORG Sat Sep 20 02:46:58 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 692AE16A4B3; Sat, 20 Sep 2003 02:46:58 -0700 (PDT) Received: from whale.sunbay.crimea.ua (whale.sunbay.crimea.ua [212.110.138.65]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1DF1E43FBD; Sat, 20 Sep 2003 02:46:54 -0700 (PDT) (envelope-from ru@sunbay.com) Received: from whale.sunbay.crimea.ua (ru@localhost [127.0.0.1]) h8K9klrX083159 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 20 Sep 2003 12:46:49 +0300 (EEST) (envelope-from ru@sunbay.com) Received: (from ru@localhost) by whale.sunbay.crimea.ua (8.12.9/8.12.8/Submit) id h8K9kl6Y083154; Sat, 20 Sep 2003 12:46:47 +0300 (EEST) (envelope-from ru) Date: Sat, 20 Sep 2003 12:46:47 +0300 From: Ruslan Ermilov To: ume@FreeBSD.org Message-ID: <20030920094647.GC76988@sunbay.com> References: <20030821155820.GA65691@sunbay.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="jy6Sn24JjFx/iggw" Content-Disposition: inline In-Reply-To: <20030821155820.GA65691@sunbay.com> User-Agent: Mutt/1.5.4i cc: net@FreeBSD.org Subject: Re: [IPsec] ipcomp in tunnel mode still broken? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Sep 2003 09:46:58 -0000 --jy6Sn24JjFx/iggw Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Thu, Aug 21, 2003 at 06:58:20PM +0300, Ruslan Ermilov wrote: > Hi there! >=20 > It seems that ipcomp in the tunnel mode is still broken in at > least 4.x (I cannot test it with two 5.x boxes at the moment). > Can you please look into this? >=20 Can anyone at least confirm this bug? Cheers, --=20 Ruslan Ermilov Sysadmin and DBA, ru@sunbay.com Sunbay Software Ltd, ru@FreeBSD.org FreeBSD committer --jy6Sn24JjFx/iggw Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (FreeBSD) iD8DBQE/bCIHUkv4P6juNwoRAliZAJ9K6ejFz8HHbnpGJW9kL0uqKvZfAQCeOoo6 SPud3mRQeXY45VykLRZfvlA= =XonQ -----END PGP SIGNATURE----- --jy6Sn24JjFx/iggw-- From owner-freebsd-net@FreeBSD.ORG Sat Sep 20 19:46:35 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EBF4316A4C0 for ; Sat, 20 Sep 2003 19:46:35 -0700 (PDT) Received: from snoopy.pacific.net.au (snoopy.pacific.net.au [61.8.0.36]) by mx1.FreeBSD.org (Postfix) with ESMTP id 738CC43FBD for ; Sat, 20 Sep 2003 19:46:30 -0700 (PDT) (envelope-from memetical@yahoo.com.au) Received: from mongrel.pacific.net.au (mongrel.pacific.net.au [61.8.0.107]) h8L2kS4R022230 for ; Sun, 21 Sep 2003 12:46:29 +1000 Received: from zhadum.dnsalias.net (dyn153.syd7.homedsl.pacific.net.au [202.7.78.153])h8L2i8XY019834 for ; Sun, 21 Sep 2003 12:44:08 +1000 Received: from psi.starfleet.org.au (psi.starfleet.org.au [172.16.0.3]) by arthur.starfleet.org.au (Postfix) with ESMTP id F0EB59467 for ; Sun, 21 Sep 2003 12:46:27 +1000 (EST) Received: by psi.starfleet.org.au (Postfix, from userid 1000) id 9ACF46FFEC; Sun, 21 Sep 2003 12:46:27 +1000 (EST) Date: Sun, 21 Sep 2003 12:46:27 +1000 From: Rudolph Pereira To: freebsd-net@freebsd.org Message-ID: <20030921024626.GC916@starfleet.org.au> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4.1i Subject: wi problems X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 21 Sep 2003 02:46:36 -0000 Hello, I am having some problems with my lucent-chipset based wi pccard under recent builds of current. The problem seems to have been with commits done ~20 aug; in particular it looks like the commit described at http://lists.freebsd.org/pipermail/cvs-src/2003-August/009232.html breaks things; I'm pretty sure about this because if I apply those changes to a tree checked out from the just before that time that works, it stops working. I am also aware of ongoing problems with the wi driver, but these don't seem related, and I've also tried the owi driver with no success. The card is: wi0: at port 0x180-0x1bf irq 11 function 0 config 1 on pccard0 wi0: 802.11 address: 00:02:2d:31:28:42 wi0: using Lucent Technologies, WaveLAN/IEEE wi0: Lucent Firmware: Station (8.72.1) wi0: 11b rates: 1Mbps 2Mbps 5.5Mbps 11Mbps I'm trying to get it talking to a prism2.5-based card in a linux machine (i.e adhoc mode). What I see is this: outgoing (from my wi pccard) packets never get to the other machine. For example: (prism2.5) (lucent) 192.168.0.1 192.168.0.2 [ping 192.168.0.2] -> arp request -> -> arp request <- arp reply ...(nothing)... [ add arp entry ] [ping 192.168.0.2] echo request echo request echo reply ...(nothing)... [ping 192.168.0.1] echo request ...(nothing)... I'm trying to narrow down the problematic bits from the above commits, but not having much success so far. Does anyone have any idea what could be going on? Any information, pointers, etc would be appreciated. Thanks