Date: Thu, 16 Sep 2004 03:55:58 -0000 From: "Florian C. Smeets" <flo@kasimir.com> To: pf4freebsd@freelists.org Subject: [pf4freebsd] Re: nfsd send error 1 probably caused by pf ? Message-ID: <3FB2B5AB.50601@kasimir.com> In-Reply-To: <3FB2B203.1030704@kasimir.com> References: <3FB2ACA6.7030302@kasimir.com> <20031112220709.GO17343@insomnia.benzedrine.cx> <3FB2B203.1030704@kasimir.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Florian C. Smeets wrote: > Daniel Hartmeier wrote: >=20 >=20 >>If that doesn't solve it, add 'log' to all block rules and watch pflog >>for blocked packets. Enable debug logging (pfctl -xm) and watch >>/var/log/messages for pf related messages. Do you see fragment >>reassembly there? >=20 I get a lot of these BAD state messages with debug leve misc: Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879006265 high=3D2879023465=20 win=3D16588 modulator=3D0] [lo=3D1139973024 high=3D1139974122 win=3D17200= =20 modulator=3D0] 4:4 A seq=3D1139974472 ack=3D2879006265 len=3D1448 ackskew=3D0 pkts=3D406886:= 392362=20 dir=3Din,rev Nov 12 23:32:25 bender kernel: pf: State failure on: 1 | Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879006265 high=3D2879023465=20 win=3D16588 modulator=3D0] [lo=3D1139974472 high=3D1139974846 win=3D17200= =20 modulator=3D0] 4:4 A seq=3D1139974472 ack=3D2879006265 len=3D1448 ackskew=3D0 pkts=3D406889:= 392365=20 dir=3Din,rev Nov 12 23:32:25 bender kernel: pf: State failure on: 1 | Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879074169 high=3D2879091369=20 win=3D16588 modulator=3D0] [lo=3D1140040480 high=3D1140041578 win=3D17200= =20 modulator=3D0] 4:4 A seq=3D1140040480 ack=3D2879074169 len=3D1448 ackskew=3D0 pkts=3D406979:= 392451=20 dir=3Din,rev Nov 12 23:32:27 bender kernel: pf: State failure on: 1 | Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879074169 high=3D2879091369=20 win=3D16588 modulator=3D0] [lo=3D1140040480 high=3D1140041578 win=3D17200= =20 modulator=3D0] 4:4 A seq=3D1140041928 ack=3D2879074169 len=3D1448 ackskew=3D0 pkts=3D406979:= 392451=20 dir=3Din,rev Nov 12 23:32:27 bender kernel: pf: State failure on: 1 | Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879074169 high=3D2879091369=20 win=3D16588 modulator=3D0] [lo=3D1140041928 high=3D1140042302 win=3D17200= =20 modulator=3D0] 4:4 A seq=3D1140041928 ack=3D2879074169 len=3D1448 ackskew=3D0 pkts=3D406982:= 392454=20 dir=3Din,rev Nov 12 23:32:27 bender kernel: pf: State failure on: 1 | Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879142073 high=3D2879159273=20 win=3D16588 modulator=3D0] [lo=3D1140107936 high=3D1140109034 win=3D17200= =20 modulator=3D0] 4:4 A seq=3D1140107936 ack=3D2879142073 len=3D1448 ackskew=3D0 pkts=3D407072:= 392539=20 dir=3Din,rev Nov 12 23:32:30 bender kernel: pf: State failure on: 1 | Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879142073 high=3D2879159273=20 win=3D16588 modulator=3D0] [lo=3D1140107936 high=3D1140109034 win=3D17200= =20 modulator=3D0] 4:4 A seq=3D1140109384 ack=3D2879142073 len=3D1448 ackskew=3D0 pkts=3D407072:= 392539=20 dir=3Din,rev Nov 12 23:32:30 bender kernel: pf: State failure on: 1 | Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20 172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879142073 high=3D2879159273=20 win=3D16588 modulator=3D0] [lo=3D1140109384 high=3D1140109758 win=3D17200= =20 modulator=3D0] 4:4 A seq=3D1140109384 ack=3D2879142073 len=3D1448 ackskew=3D0 pkts=3D407075:= 392542=20 dir=3Din,rev Nov 12 23:32:30 bender kernel: pf: State failure on: 1 | Regards, flo
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3FB2B5AB.50601>