Date: Fri, 14 Mar 2008 20:58:35 +0300 From: Oleg Bulyzhin <oleg@freebsd.org> To: "Vladimir V. Kobal" <vlad@prokk.net> Cc: freebsd-ipfw@freebsd.org Subject: Re: Dummynet causes kernel trap and system freeze Message-ID: <20080314175835.GA62177@lath.rinet.ru> In-Reply-To: <A819E572B67B4032B281A2B81D1D3C2F@base> References: <A819E572B67B4032B281A2B81D1D3C2F@base>
next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Mar 14, 2008 at 12:48:43PM +0200, Vladimir V. Kobal wrote:
> The system is PPTP NAS (mpd5) with NAT (ng_nat), firewall (ipfw2) and
> shaping (dummynet). FreeBSD 7.0-RELEASE, Quad-Core AMD Phenom, AMD 690V
> chipset, two em interfaces (EXPI9400PT 82572GI). On high load there are
> about 500 simultaneous PPTP users snd 50Mbps/15Mbps of downlink/uplink
> traffic going through.
>
> Kernel is patched against rtfree problem. We've replaced rtfree to
> RTFREE_LOCKED at
> net/route.c
> netinet/if_ether.c
>
> Sometimes immediately after boot, sometimes after 10 hours of work, we get a
> kernel trap because of the page fault and system freeze. The first few
> seconds or minutes after the trap there is a possibility to Scroll Lock and
> go through debug console. Then the system hangs totally and can be rebooted
> only by hardware reset. The current process on kernel trap is always
> dummynet.
>
> Rarely we get a series of four sequential kernel traps and automatic
> reboots.
>
> Today the following happened: the dummynet pipes just stoped working but
> other traffic flows worked well and the system console had been freezed.
>
> Without a load the system runs for days.
>
> We've tryed to:
> apply patch-2 from kern/113548
> apply patch-3 from kern/113548
> change NICs to bge, mks, rl
> change processor to Dual-Core AMD 64 x2
> use motherboard with Nvidia chipset
>
> We always get the same symptoms.
>
> Backtrace and appropriate dummynet source file are attached.
>
> We have in production the same system on FreeBSD 6.1-RELEASE. We have never
> had traps on it, but the load on it wasn't more than 400 PPTP users and
> 30Mbps/10Mbps because of lack of CPU resources.
>
> The problem looks rather like mentioned in kern/118128, kern/113548,
> kern/106534 but there are no working solutions. Could someone help to solve
> the problem with dummynet?
>
> Best regards,
> Vladimir Kobal
> [GDB will not be able to debug user-mode threads: /usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
> GNU gdb 6.1.1 [FreeBSD]
> Copyright 2004 Free Software Foundation, Inc.
> GDB is free software, covered by the GNU General Public License, and you are
> welcome to change it and/or distribute copies of it under certain conditions.
> Type "show copying" to see the conditions.
> There is absolutely no warranty for GDB. Type "show warranty" for details.
> This GDB was configured as "amd64-marcel-freebsd".
>
> Unread portion of the kernel message buffer:
> Copyright (c) 1992-2008 The FreeBSD Project.
> Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
> The Regents of the University of California. All rights reserved.
> FreeBSD is a registered trademark of The FreeBSD Foundation.
> FreeBSD 7.0-RELEASE #12: Thu Mar 13 12:27:02 EET 2008
> natalie@firewall.prokk.net:/usr/src/sys/amd64/compile/FIREWALL
> Timecounter "i8254" frequency 1193182 Hz quality 0
> CPU: AMD Phenom(tm) 9600 Quad-Core Processor (2305.24-MHz K8-class CPU)
> Origin = "AuthenticAMD" Id = 0x100f22 Stepping = 2
> Features=0x178bfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,MMX,FXSR,SSE,SSE2,HTT>
> Features2=0x802009<SSE3,MON,CX16,<b23>>
> AMD Features=0xee500800<SYSCALL,NX,MMX+,FFXSR,<b26>,RDTSCP,LM,3DNow!+,3DNow!>
> AMD Features2=0x7ff<LAHF,CMP,SVM,ExtAPIC,CR8,<b5>,<b6>,<b7>,Prefetch,<b9>,<b10>>
> Cores per package: 4
> usable memory = 2105335808 (2007 MB)
> avail memory = 2031869952 (1937 MB)
> ACPI APIC Table: <GBT GBTUACPI>
> FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
> cpu0 (BSP): APIC ID: 0
> cpu1 (AP): APIC ID: 1
> cpu2 (AP): APIC ID: 2
> cpu3 (AP): APIC ID: 3
> ioapic0: Changing APIC ID to 2
> ioapic0 <Version 2.1> irqs 0-23 on motherboard
> kbd1 at kbdmux0
> acpi0: <GBT GBTUACPI> on motherboard
> acpi0: [ITHREAD]
> acpi0: Power Button (fixed)
> acpi0: reservation of 0, a0000 (3) failed
> acpi0: reservation of 100000, 7dde0000 (3) failed
> Timecounter "ACPI-safe" frequency 3579545 Hz quality 850
> acpi_timer0: <32-bit timer at 3.579545MHz> port 0x4008-0x400b on acpi0
> acpi_hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
> acpi_hpet0: HPET never increments, disabling
> device_attach: acpi_hpet0 attach returned 6
> cpu0: <ACPI CPU> on acpi0
> cpu1: <ACPI CPU> on acpi0
> cpu2: <ACPI CPU> on acpi0
> cpu3: <ACPI CPU> on acpi0
> acpi_button0: <Power Button> on acpi0
> pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
> pci0: <ACPI PCI bus> on pcib0
> pcib1: <ACPI PCI-PCI bridge> at device 1.0 on pci0
> pci1: <ACPI PCI bus> on pcib1
> vgapci0: <VGA-compatible display> port 0xce00-0xceff mem 0xfa000000-0xfbffffff,0xfdcf0000-0xfdcfffff,0xfdb00000-0xfdbfffff irq 18 at device 5.0 on pci1
> pcib2: <ACPI PCI-PCI bridge> at device 2.0 on pci0
> pci2: <ACPI PCI bus> on pcib2
> em0: <Intel(R) PRO/1000 Network Connection Version - 6.7.3> port 0xef00-0xef1f mem 0xfdae0000-0xfdafffff,0xfdac0000-0xfdadffff irq 18 at device 0.0 on pci2
> em0: Using MSI interrupt
> em0: Ethernet address: 00:15:17:68:58:84
> em0: [FILTER]
> pcib3: <ACPI PCI-PCI bridge> at device 4.0 on pci0
> pci3: <ACPI PCI bus> on pcib3
> em1: <Intel(R) PRO/1000 Network Connection Version - 6.7.3> port 0xdf00-0xdf1f mem 0xfdee0000-0xfdefffff,0xfdec0000-0xfdedffff irq 16 at device 0.0 on pci3
> em1: Using MSI interrupt
> em1: Ethernet address: 00:15:17:67:49:49
> em1: [FILTER]
> atapci0: <ATI ATA controller> port 0xff00-0xff07,0xfe00-0xfe03,0xfd00-0xfd07,0xfc00-0xfc03,0xfb00-0xfb0f mem 0xfe02f000-0xfe02f3ff irq 22 at device 18.0 on pci0
> atapci0: [ITHREAD]
> ata2: <ATA channel 0> on atapci0
> ata2: [ITHREAD]
> ata3: <ATA channel 1> on atapci0
> ata3: [ITHREAD]
> pci0: <serial bus, SMBus> at device 20.0 (no driver attached)
> atapci1: <ATI IXP600 UDMA133 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0xf900-0xf90f at device 20.1 on pci0
> ata0: <ATA channel 0> on atapci1
> ata0: [ITHREAD]
> isab0: <PCI-ISA bridge> at device 20.3 on pci0
> isa0: <ISA bus> on isab0
> pcib4: <ACPI PCI-PCI bridge> at device 20.4 on pci0
> pci4: <ACPI PCI bus> on pcib4
> re0: <RealTek 8169SC/8110SC Single-chip Gigabit Ethernet> port 0xbe00-0xbeff mem 0xfd9ff000-0xfd9ff0ff irq 23 at device 15.0 on pci4
> miibus0: <MII bus> on re0
> rgephy0: <RTL8169S/8110S/8211B media interface> PHY 1 on miibus0
> rgephy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, 1000baseT, 1000baseT-FDX, auto
> re0: Ethernet address: 00:1a:4d:f6:aa:4a
> re0: [FILTER]
> atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0
> atkbd0: <AT Keyboard> irq 1 on atkbdc0
> kbd0 at atkbd0
> atkbd0: [GIANT-LOCKED]
> atkbd0: [ITHREAD]
> psm0: <PS/2 Mouse> irq 12 on atkbdc0
> psm0: [GIANT-LOCKED]
> psm0: [ITHREAD]
> psm0: model Generic PS/2 mouse, device ID 0
> acpi_hpet0: <High Precision Event Timer> iomem 0xfed00000-0xfed003ff on acpi0
> acpi_hpet0: HPET never increments, disabling
> device_attach: acpi_hpet0 attach returned 6
> sc0: <System console> at flags 0x100 on isa0
> sc0: VGA <16 virtual consoles, flags=0x300>
> vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
> Timecounters tick every 1.000 msec
> ipfw2 initialized, divert enabled, rule-based forwarding enabled, default to accept, logging limited to 100 packets/entry by default
> ad4: 76318MB <WDC WD800JD-00MSA1 10.01E01> at ata2-master UDMA33
> SMP: AP CPU #3 Launched!
> SMP: AP CPU #1 Launched!
> SMP: AP CPU #2 Launched!
> Trying to mount root from ufs:/dev/ad4s1a
> <118>Loading configuration files.
> <118>kernel dumps on /dev/ad4s1b
> <118>Entropy harvesting:
> <118> interrupts
> <118> ethernet
> <118> point_to_point
> <118> kickstart
> <118>.
> <118>swapon: adding /dev/ad4s1b as swap device
> <118>Starting file system checks:
> <118>/dev/ad4s1a: FILE SYSTEM CLEAN; SKIPPING CHECKS
> <118>/dev/ad4s1a: clean, 35547366 free (100502 frags, 4430858 blocks, 0.3% fragmentation)
> <118>Setting hostuuid: 42c32a0e-ef7a-11dc-b498-001517685884.
> <118>Setting hostid: 0x5e99e61e.
> <118>Mounting local file systems:
> <118>.
> <118>Setting hostname: firewall.prokk.net.
> <118>net.inet.ip.fastforwarding:
> <118>0
> <118> ->
> <118>1
> <118>
> <118>lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
> <118>inet 127.0.0.1 netmask 0xff000000
> <118>em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=19b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4>
> <118>ether 00:15:17:68:58:84
> <118>inet 195.16.76.6 netmask 0xfffffff8 broadcast 195.16.76.7
> <118>inet 195.16.77.2 netmask 0xfffffff0 broadcast 195.16.77.15
> <118>inet 10.100.1.1 netmask 0xfffffffc broadcast 10.100.1.3
> <118>inet 10.100.2.1 netmask 0xfffffff0 broadcast 10.100.2.15
> <118>inet 217.119.114.186 netmask 0xfffffffc broadcast 217.119.114.187
> <118>inet 195.16.77.33 netmask 0xfffffff8 broadcast 195.16.77.39
> <118>inet 10.110.1.17 netmask 0xfffffff0 broadcast 10.110.1.31
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>em1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=19b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4>
> <118>ether 00:15:17:67:49:49
> <118>inet 192.168.99.1 netmask 0xffffc000 broadcast 192.168.127.255
> <118>inet 195.16.76.129 netmask 0xffffffe0 broadcast 195.16.76.159
> <118>inet 192.168.2.1 netmask 0xffffff00 broadcast 192.168.2.255
> <118>inet 192.168.4.33 netmask 0xfffffffc broadcast 192.168.4.35
> <118>inet 192.168.5.1 netmask 0xfffffff8 broadcast 192.168.5.7
> <118>inet 192.168.11.1 netmask 0xfffffff8 broadcast 192.168.11.7
> <118>inet 192.168.129.1 netmask 0xffffff00 broadcast 192.168.129.255
> <118>inet 192.168.250.1 netmask 0xfffffff8 broadcast 192.168.250.7
> <118>inet 192.168.231.1 netmask 0xffffff00 broadcast 192.168.231.255
> <118>inet 195.16.76.225 netmask 0xffffffe0 broadcast 195.16.76.255
> <118>inet 10.1.1.1 netmask 0xffffff00 broadcast 10.1.1.255
> <118>inet 195.16.76.29 netmask 0xfffffffc broadcast 195.16.76.31
> <118>inet 195.16.76.9 netmask 0xfffffff8 broadcast 195.16.76.15
> <118>inet 195.16.76.17 netmask 0xfffffffc broadcast 195.16.76.19
> <118>inet 10.2.1.1 netmask 0xfffffff0 broadcast 10.2.1.15
> <118>inet 10.2.2.1 netmask 0xffffff00 broadcast 10.2.2.255
> <118>inet 195.16.76.93 netmask 0xfffffffc broadcast 195.16.76.95
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>vlan2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=3<RXCSUM,TXCSUM>
> <118>ether 00:15:17:67:49:49
> <118>inet 192.168.11.241 netmask 0xfffffff8 broadcast 192.168.11.247
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>vlan: 2 parent interface: em1
> <118>vlan3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=3<RXCSUM,TXCSUM>
> <118>ether 00:15:17:67:49:49
> <118>inet 192.168.11.20 netmask 0xfffffff0 broadcast 192.168.11.31
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>vlan: 3 parent interface: em1
> <118>vlan4: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=3<RXCSUM,TXCSUM>
> <118>ether 00:15:17:67:49:49
> <118>inet 192.168.11.249 netmask 0xfffffff8 broadcast 192.168.11.255
> <118>inet 192.168.20.1 netmask 0xffffff00 broadcast 192.168.20.255
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>vlan: 4 parent interface: em1
> <118>vlan5: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=3<RXCSUM,TXCSUM>
> <118>ether 00:15:17:67:49:49
> <118>inet 192.168.19.1 netmask 0xffffff00 broadcast 192.168.19.255
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>vlan: 5 parent interface: em1
> <118>vlan6: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=3<RXCSUM,TXCSUM>
> <118>ether 00:15:17:67:49:49
> <118>inet 192.168.11.33 netmask 0xffffffe0 broadcast 192.168.11.63
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>vlan: 6 parent interface: em1
> <118>vlan7: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=3<RXCSUM,TXCSUM>
> <118>ether 00:15:17:67:49:49
> <118>inet 192.168.230.1 netmask 0xffffff00 broadcast 192.168.230.255
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>vlan: 7 parent interface: em1
> <118>vlan8: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=3<RXCSUM,TXCSUM>
> <118>ether 00:15:17:67:49:49
> <118>inet 195.16.76.209 netmask 0xfffffff0 broadcast 195.16.76.223
> <118>inet 10.1.5.1 netmask 0xffffff00 broadcast 10.1.5.255
> <118>inet 10.2.5.1 netmask 0xffffff00 broadcast 10.2.5.255
> <118>media: Ethernet autoselect
> <118>status: no carrier
> <118>vlan: 8 parent interface: em1
> <118>add net default: gateway 217.119.114.185
> <118>Additional routing options:
> <118> IP gateway=YES
> <118> ARP proxyall=YES
> <118>.
> <118>Starting devd.
> <118>re0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
> <118>options=9b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM>
> <118>ether 00:1a:4d:f6:aa:4a
> <118>inet 195.16.77.4 netmask 0xfffffff0 broadcast 195.16.77.15
> <118>media: Ethernet autoselect (none)
> <118>status: no carrier
> <118>route:
> <118>writing to routing socket
> <118>:
> <118>File exists
> <118>add net default: gateway 217.119.114.185: route already in table
> <118>hw.acpi.cpu.cx_lowest:
> <118>C1
> <118> ->
> <118>C1
> <118>
> <118>Flushed all rules.
> <118>Flushed all pipes.
> <118>00020 deny tcp from any 2022,2023 to any
> <118>00020 deny tcp from any to any dst-port 2022,2023
> <118>00047 deny ip from 10.5.0.0/24 to any
> <118>00047 deny ip from any to 10.5.0.0/24
> <118>00049 deny ip from 60.48.0.0/13 to any
> <118>00049 deny ip from 60.240.195.0/24 to any
> <118>00049 deny ip from 192.168.0.0/24 to any
> <118>00049 deny ip from any to 169.254.0.0/16
> <118>00049 deny ip from 169.254.0.0/16 to any
> <118>00050 allow ip from 195.16.77.5 to any dst-port 25 via em0
> <118>00050 allow ip from any 25 to 195.16.77.5 via em0
> <118>00050 pipe 5362 ip from any 25 to { 195.16.76.32/27 or dst-ip 195.16.76.64/30 or dst-ip 195.16.76.68/30 }
> <118>00050 pipe 5367 ip from { 195.16.76.32/27 or 195.16.76.64/30 or 195.16.76.68/30 } to any dst-port 25
> <118>00050 pipe 5212 ip from any 25 to 194.60.77.0/24
> <118>00050 pipe 5217 ip from 194.60.77.0/24 to any dst-port 25
> <118>00050 allow ip from 195.16.76.208/28 to any dst-port 25
> <118>00050 allow ip from any 25 to 195.16.76.208/28
> <118>00050 allow ip from 195.16.76.86 to any dst-port 25
> <118>00050 allow ip from any 25 to 195.16.76.86
> <118>00050 pipe 5172 ip from 195.16.76.232 to any dst-port 25
> <118>00050 pipe 5177 ip from any 25 to 195.16.76.232
> <118>00050 pipe 5552 ip from 195.16.76.253 to any dst-port 25
> <118>00050 pipe 5557 ip from any 25 to 195.16.76.253
> <118>00050 pipe 5152 ip from 195.16.76.137 to any dst-port 25
> <118>00050 pipe 5157 ip from any 25 to 195.16.76.137
> <118>00050 pipe 5182 ip from 195.16.76.140 to any dst-port 25
> <118>00050 pipe 5187 ip from any 25 to 195.16.76.140
> <118>00050 pipe 5492 ip from 195.16.76.134 to any dst-port 25
> <118>00050 pipe 5497 ip from any 25 to 195.16.76.134
> <118>00050 pipe 5212 ip from 194.0.157.100 to any dst-port 25
> <118>00050 pipe 5217 ip from any 25 to 194.0.157.100
> <118>00050 pipe 5212 ip from 194.0.157.1 to any dst-port 25
> <118>00050 pipe 5217 ip from any 25 to 194.0.157.1
> <118>00050 pipe 5212 ip from 194.60.77.0/24 to any dst-port 25
> <118>00050 pipe 5217 ip from any 25 to 194.60.77.0/24
> <118>00051 deny ip from not table(1) 25 to any
> <118>00051 deny ip from any to not table(1) dst-port 25
> <118>00053 allow icmp from 195.16.77.7 to any
> <118>00053 allow icmp from any to 195.16.77.7
> <118>00053 allow icmp from 195.16.77.2 to any
> <118>00053 allow icmp from any to 195.16.77.2
> <118>00054 allow udp from 195.16.77.0/28 to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,30001,57030
> <118>00054 allow tcp from 195.16.76.0/23 to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,30001,57030
> <118>00054 allow tcp from 192.168.0.0/16 to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,57030
> <118>00054 allow tcp from 10.0.0.0/8 to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,57030
> <118>00055 deny tcp from any to me dst-port 53,123,137,138,139,161,199,445,514,953,1723,8668,30001,57030
> <118>00056 allow tcp from 192.168.0.0/16 to 195.16.77.3 dst-port 20,21
> <118>00056 allow tcp from 172.16.0.0/16 to 195.16.77.3 dst-port 20,21
> <118>00056 allow tcp from 195.16.76.0/23 to 195.16.77.3 dst-port 20,21
> <118>00056 allow ip from 194.88.220.30 to 195.16.77.3 dst-port 20,21
> <118>00056 allow ip from 195.16.77.3 20,21 to 194.88.220.30
> <118>00056 deny tcp from any to 195.16.77.3 dst-port 20,21
> <118>00057 allow tcp from 192.168.0.0/16 to 195.16.77.1 dst-port 53
> <118>00057 allow udp from 192.168.0.0/16 to 195.16.77.1 dst-port 53
> <118>00057 allow tcp from 195.16.77.1 53 to 192.168.0.0/16
> <118>00057 allow udp from 195.16.77.1 53 to 192.168.0.0/16
> <118>00058 allow udp from 195.16.77.0/28 to me dst-port 5005
> <118>00059 deny udp from any to me dst-port 5005
> <118>00062 count ip from 195.16.76.208/30 to any
> <118>00063 count ip from any to 195.16.76.208/30
> <118>00065 allow ip from 10.100.2.0/24 to 195.16.77.0/28
> <118>00065 allow ip from 195.16.77.0/28 to 10.100.2.0/24
> <118>00065 allow ip from 10.100.2.0/24 to me
> <118>00065 allow ip from me to 10.100.2.0/24
> <118>00065 allow ip from 10.2.5.0/24 to 195.16.77.0/28
> <118>00065 allow ip from 195.16.77.0/28 to 10.2.5.0/24
> <118>00066 allow ip from 195.16.77.7 69 to 192.168.230.0/24
> <118>00066 allow ip from 192.168.230.0/24 to 195.16.77.7 dst-port 69
> <118>00075 allow tcp from 195.16.76.212 to 195.16.77.7 dst-port 3389
> <118>00075 allow tcp from 195.16.77.7 3389 to 195.16.76.212
> <118>00076 allow tcp from 192.168.2.65 to 195.16.77.7 dst-port 3389,137,138,139,445
> <118>00076 allow tcp from 192.168.99.65 to 195.16.77.7 dst-port 3389,137,138,139,445
> <118>00076 allow tcp from 195.16.76.152 to 195.16.77.7 dst-port 3389,137,138,139,445
> <118>00076 allow tcp from 195.16.77.7 3389,137,138,139,445 to 192.168.2.65
> <118>00076 allow tcp from 195.16.77.7 3389,137,138,139,445 to 192.168.99.65
> <118>00076 allow tcp from 195.16.77.7 3389,137,138,139,445 to 195.16.76.152
> <118>00076 allow tcp from 195.16.76.152 to 195.16.77.2
> <118>00076 allow tcp from 195.16.77.2 to 195.16.76.152
> <118>00076 allow tcp from 195.16.76.99 to 195.16.77.2
> <118>00076 allow tcp from 195.16.77.2 to 195.16.76.99
> <118>00076 allow tcp from 195.16.76.99 to 195.16.77.7 dst-port 3389,137,138,139,445
> <118>00076 allow tcp from 195.16.77.7 3389,137,138,139,445 to 195.16.76.99
> <118>00076 allow tcp from 195.234.148.238 to 195.16.77.7
> <118>00076 allow tcp from 195.16.77.7 to 195.234.148.238
> <118>00077 allow tcp from 192.168.99.235 to 195.16.77.7 dst-port 3389
> <118>00077 allow tcp from 172.16.1.235 to 195.16.77.7 dst-port 3389
> <118>00077 allow tcp from 195.16.77.7 3389 to 192.168.99.235
> <118>00077 allow tcp from 195.16.77.7 3389 to 172.16.1.235
> <118>00077 allow tcp from 192.168.97.91 to 195.16.77.7 dst-port 3389
> <118>00077 allow tcp from 172.16.3.91 to 195.16.77.7 dst-port 3389
> <118>00077 allow tcp from 192.168.96.2 to 195.16.77.7 dst-port 3389
> <118>00077 allow tcp from 195.16.77.7 3389 to 192.168.96.2
> <118>00077 allow tcp from 195.16.77.7 3389 to 192.168.97.91
> <118>00077 allow tcp from 195.16.77.7 3389 to 172.16.3.91
> <118>00077 allow tcp from 192.168.99.61 to 195.16.77.7 dst-port 3389
> <118>00077 allow tcp from 172.16.1.61 to 195.16.77.7 dst-port 3389
> <118>00077 allow tcp from 195.16.77.7 3389 to 192.168.99.61
> <118>00077 allow tcp from 195.16.77.7 3389 to 172.16.1.61
> <118>00079 allow tcp from 195.16.76.144 to 195.16.77.7 dst-port 3389
> <118>00079 allow tcp from 195.16.77.7 3389 to 195.16.76.144
> <118>00080 allow tcp from 195.16.76.145 to 195.16.77.7 dst-port 3389
> <118>00080 allow tcp from 195.16.77.7 3389 to 195.16.76.145
> <118>00080 allow tcp from 192.168.94.165 to 195.16.77.7 dst-port 3389
> <118>00080 allow tcp from 195.16.77.7 3389 to 192.168.94.165
> <118>00080 allow tcp from 192.168.92.49 to 195.16.77.7 dst-port 3389
> <118>00080 allow tcp from 195.16.77.7 3389 to 192.168.92.49
> <118>00081 allow tcp from 192.168.99.252 to 195.16.77.7 dst-port 3389
> <118>00081 allow tcp from 172.16.1.252 to 195.16.77.7 dst-port 3389
> <118>00081 allow tcp from 195.16.76.146 to 195.16.77.7 dst-port 3389
> <118>00081 allow tcp from 195.16.76.98 to 195.16.77.7 dst-port 3389
> <118>00081 allow tcp from 195.16.77.7 3389 to 192.168.99.252
> <118>00081 allow tcp from 195.16.77.7 3389 to 172.16.1.252
> <118>00081 allow tcp from 195.16.77.7 3389 to 195.16.76.146
> <118>00081 allow tcp from 195.16.77.7 3389 to 195.16.76.98
> <118>00081 allow tcp from 195.16.76.146 to 195.16.77.0/28 dst-port 22
> <118>00081 allow tcp from 192.168.99.252 to 195.16.77.0/28 dst-port 22
> <118>00081 allow tcp from 172.16.1.252 to 195.16.77.0/28 dst-port 22
> <118>00081 allow tcp from 195.16.76.98 to 195.16.77.0/28 dst-port 22
> <118>00081 allow tcp from 195.16.77.0/28 22 to 195.16.76.146
> <118>00081 allow tcp from 195.16.77.0/28 22 to 192.168.99.252
> <118>00081 allow tcp from 195.16.77.0/28 22 to 172.16.1.252
> <118>00081 allow tcp from 195.16.77.0/28 22 to 195.16.76.98
> <118>00082 allow tcp from 192.168.96.1 to 195.16.77.7 dst-port 3389
> <118>00082 allow tcp from 172.16.4.1 to 195.16.77.7 dst-port 3389
> <118>00082 allow tcp from 195.16.77.7 3389 to 192.168.96.1
> <118>00082 allow tcp from 195.16.77.7 3389 to 172.16.4.1
> <118>00082 allow tcp from 192.168.91.60 to 195.16.77.7 dst-port 3389
> <118>00082 allow tcp from 195.16.77.7 3389 to 192.168.91.60
> <118>00082 allow tcp from 172.16.9.60 to 195.16.77.7 dst-port 3389
> <118>00082 allow tcp from 195.16.77.7 3389 to 172.16.9.60
> <118>00082 allow tcp from 10.10.133.3 to 195.16.77.7 dst-port 3389
> <118>00082 allow tcp from 172.16.6.8 to 195.16.77.7 dst-port 3389
> <118>00082 allow tcp from 195.16.77.7 3389 to 10.10.133.3
> <118>00082 allow tcp from 195.16.77.7 3389 to 172.16.6.8
> <118>00083 allow tcp from 192.168.92.160 to 195.16.77.7 dst-port 3389
> <118>00083 allow tcp from 195.16.77.7 3389 to 192.168.92.160
> <118>00083 allow tcp from 172.16.8.160 to 195.16.77.7 dst-port 3389
> <118>00083 allow tcp from 195.16.77.7 3389 to 172.16.8.160
> <118>00086 allow tcp from 192.168.97.116 to 195.16.77.7 dst-port 3389
> <118>00086 allow tcp from 195.16.77.7 3389 to 192.168.97.116
> <118>00086 allow tcp from 172.16.3.116 to 195.16.77.7 dst-port 3389
> <118>00086 allow tcp from 195.16.77.7 3389 to 172.16.3.116
> <118>00087 allow tcp from 192.168.99.2 to 195.16.77.7 dst-port 3389
> <118>00087 allow tcp from 192.168.96.1 to 195.16.77.7 dst-port 3389
> <118>00087 allow tcp from 192.168.99.9 to 195.16.77.7 dst-port 3389
> <118>00087 allow tcp from 192.168.97.7 to 195.16.77.7 dst-port 3389
> <118>00087 allow tcp from 192.168.99.2 to 195.16.77.7 dst-port 3389
> <118>00087 allow tcp from 195.16.77.7 3389 to 192.168.99.9
> <118>00087 allow tcp from 195.16.77.7 3389 to 192.168.97.7
> <118>00087 allow tcp from 195.16.77.7 3389 to 192.168.99.2
> <118>00087 allow tcp from 195.16.77.7 3389 to 192.168.96.1
> <118>00088 deny tcp from any to 195.16.77.7 dst-port 3389,137,138,139,445
> <118>00088 deny udp from any to 195.16.77.7 dst-port 3389,137,138,139,445
> <118>00088 deny tcp from 195.16.77.7 3389,137,138,139,445 to any
> <118>00088 deny udp from 195.16.77.7 3389,137,138,139,445 to any
> <118>00088 deny udp from any 1433,1434 to not 195.16.76.34
> <118>00088 deny udp from any to not 195.16.76.34 dst-port 1433,1434
> <118>00089 allow ip from 10.0.0.0/8 to 195.16.77.0/24
> <118>00089 allow ip from 195.16.76.0/22 to 195.16.77.7
> <118>00089 allow icmp from any to 195.16.77.7 icmptypes 0
> <118>00090 pipe 7 ip from 195.16.76.0/22 to 195.16.77.7 in recv em0
> <118>00090 pipe 90 ip from any to 195.16.77.7 in recv em0
> <118>00091 count ip from 195.16.77.7 to any out via em0
> <118>00092 pipe 92 ip from 195.16.77.3 to any out via em0
> <118>00096 pipe 96 ip from 10.100.2.6 to 10.100.2.1
> <118>00096 pipe 96 ip from 10.100.2.7 to 10.100.2.1
> <118>00096 pipe 96 ip from 10.100.2.1 to 10.100.2.6
> <118>00096 pipe 96 ip from 10.100.2.1 to 10.100.2.7
> <118>00096 pipe 96 ip from 192.168.98.169 to 10.100.2.6
> <118>00096 pipe 96 ip from 192.168.98.169 to 10.100.2.7
> <118>00096 pipe 96 ip from 10.100.2.6 to 192.168.98.169
> <118>00096 pipe 96 ip from 10.100.2.7 to 192.168.98.169
> <118>00096 pipe 96 ip from 172.16.2.169 to 10.100.2.6
> <118>00096 pipe 96 ip from 172.16.2.169 to 10.100.2.7
> <118>00096 pipe 96 ip from 10.100.2.6 to 172.16.2.169
> <118>00096 pipe 96 ip from 10.100.2.7 to 172.16.2.169
> <118>00096 pipe 96 ip from 10.100.2.6 to 10.100.2.7
> <118>00096 pipe 96 ip from 10.100.2.7 to 10.100.2.6
> <118>00097 deny ip from any to 10.100.2.6
> <118>00097 deny ip from any to 10.100.2.7
> <118>00097 deny ip from 10.100.2.6 to any
> <118>00097 deny ip from 10.100.2.7 to any
> <118>00098 netgraph 60 ip from 192.168.200.0/24 to any out recv em0 xmit em0
> <118>00098 allow ip from any to 192.168.200.0/24 recv em0
> <118>00099 allow ip from me to 10.110.1.0/27
> <118>00100 deny ip from any to 10.0.0.0/8 out via em0
> <118>00101 deny ip from any to 172.16.0.0/16 out via em0
> <118>00102 deny ip from any to 192.168.0.0/16 out via em0
> <118>00109 allow ip from any to 195.16.77.3
> <118>00109 allow ip from 195.16.77.3 to any
> <118>00120 allow tcp from 195.16.77.7 to me dst-port 22
> <118>00120 allow tcp from 195.16.77.12 to me dst-port 22
> <118>00120 allow tcp from 195.16.76.144 to me dst-port 22
> <118>00120 allow tcp from 195.16.76.99 to me dst-port 22
> <118>00120 allow tcp from 195.16.77.11 to me dst-port 22
> <118>00121 deny tcp from any to 195.16.77.0/28 dst-port 22
> <118>00123 deny ip from any to 195.16.78.0/24
> <118>00123 deny ip from any to 195.16.79.0/24
> <118>00123 deny ip from any to 195.16.77.128/25
> <118>00123 deny ip from any to 195.16.77.64/26
> <118>00123 deny ip from any to 195.16.77.48/28
> <118>00123 deny ip from any to 195.16.77.40/29
> <118>00123 deny ip from any to 195.16.77.16/28
> <118>00129 allow udp from any to any dst-port 137,138,139,445 via em1
> <118>00129 allow udp from any 137,138,139,445 to any via em1
> <118>00130 allow tcp from any to any dst-port 137,138,139,445 via em1
> <118>00130 allow tcp from any 137,138,139,445 to any via em1
> <118>00131 deny tcp from any to any dst-port 69,135,136,137,138,139,445
> <118>00131 deny udp from any to any dst-port 69,135,136,445
> <118>00131 deny tcp from any 69,135,136,137,138,139,445 to any
> <118>00131 deny udp from any 69,135,136,445 to any
> <118>00142 deny ip from any to 224.0.0.0/12
> <118>00143 deny ip from 224.0.0.0/12 to any
> <118>00144 deny ip from any to 225.0.0.0/12
> <118>00145 deny ip from 225.0.0.0/12 to any
> <118>00146 deny ip from any to 255.0.0.0/8
> <118>00147 deny ip from 255.0.0.0/8 to any
> <118>00148 deny ip from any to 255.255.255.255
> <118>00149 deny ip from 255.255.255.255 to any
> <118>00159 deny igmp from any to any
> <118>00192 pipe 192 icmp from 195.16.77.0/28 to any
> <118>00192 pipe 192 icmp from any to 195.16.77.0/28
> <118>00200 count ip from 192.168.19.0/24 to any
> <118>00210 count ip from any to 192.168.19.0/24
> <118>00220 count ip from 192.168.20.0/24 to any
> <118>00230 count ip from any to 192.168.20.0/24
> <118>04000 netgraph 60 ip from 172.16.0.0/18 to any out xmit em0
> <118>04010 netgraph 61 ip from any to me in via em0
> <118>04100 skipto 20000 ip from 172.16.0.0/18 to any
> <118>04100 skipto 20000 ip from any to 172.16.0.0/18
> <118>64500 pipe 192 icmp from any to any via em0
> <118>65000 pipe 65000 log ip from any to 172.16.0.0/18
> <118>65050 skipto 65500 ip from any to any
> <118>65100 pipe 65100 ip from any to any
> <118>65101 skipto 65500 ip from any to any
> <118>65110 pipe 65110 ip from any to any
> <118>65111 skipto 65500 ip from any to any
> <118>00196 deny ip from 192.168.64.0/18 to any via em0
> <118>00196 deny ip from any to 192.168.64.0/18 via em0
> <118>00199 deny ip from 192.168.152.0/22 to any
> <118>00199 deny ip from any to 192.168.152.0/22
> <118>00202 count ip from any to 192.168.2.0/24 via em1
> <118>00521 deny udp from any 520 to 195.16.76.0/22
> <118>65530 allow ip from any to 192.168.2.0/24 via em1
> <118>65530 allow ip from 192.168.2.0/24 to any via em1
> <118>65530 allow ip from any to 192.168.3.0/24 via em1
> <118>65530 allow ip from 192.168.3.0/24 to any via em1
> <118>65530 allow ip from any to 192.168.4.0/24 via em1
> <118>65530 allow ip from 192.168.4.0/24 to any via em1
> <118>65530 allow ip from any to 192.168.5.0/29 via em1
> <118>65530 allow ip from 192.168.5.0/29 to any via em1
> <118>65530 allow ip from any to 192.168.11.0/24 via em1
> <118>65530 allow ip from 192.168.11.0/24 to any via em1
> <118>65530 allow ip from any to 192.168.129.0/24 via em1
> <118>65530 allow ip from 192.168.129.0/24 to any via em1
> <118>65530 allow ip from any to 192.168.230.0/24 via em1
> <118>65530 allow ip from 192.168.230.0/24 to any via em1
> <118>65530 allow ip from any to 192.168.231.0/24 via em1
> <118>65530 allow ip from 192.168.231.0/24 to any via em1
> <118>65530 allow ip from any to 10.1.1.0/24 via em1
> <118>65530 allow ip from 10.1.1.0/24 to any via em1
> <118>65530 allow ip from any to 192.168.13.0/24 via em1
> <118>65530 allow ip from 192.168.13.0/24 to any via em1
> <118>65531 allow ip from any to 195.16.76.0/22 via em1
> <118>65531 allow ip from 195.16.76.0/22 to any via em1
> <118>65532 allow ip from any to 195.16.77.32/29 via em1
> <118>65532 allow ip from 195.16.77.32/29 to any via em1
> <118>65533 allow ip from any to 192.168.64.0/18 via em1
> <118>65533 allow ip from 192.168.64.0/18 to any via em1
> <118>65534 deny ip from any to any via em1
> <118>15032 pipe 15032 ip from any to 192.168.2.4 via em1
> <118>15033 skipto 65100 ip from any to 192.168.2.4 via em1
> <118>15037 netgraph 60 ip from 192.168.2.4 to any out recv em1 xmit em0
> <118>15038 pipe 15037 ip from 192.168.2.4 to any via em1
> <118>15039 skipto 65110 ip from 192.168.2.4 to any via em1
> <118>15042 pipe 15042 ip from any to 192.168.2.31 via em1
> <118>15043 skipto 65100 ip from any to 192.168.2.31 via em1
> <118>15047 netgraph 60 ip from 192.168.2.31 to any out recv em1 xmit em0
> <118>15048 pipe 15047 ip from 192.168.2.31 to any via em1
> <118>15049 skipto 65110 ip from 192.168.2.31 to any via em1
> <118>15052 pipe 15052 ip from any to 192.168.2.32 via em1
> <118>15053 skipto 65100 ip from any to 192.168.2.32 via em1
> <118>15057 netgraph 60 ip from 192.168.2.32 to any out recv em1 xmit em0
> <118>15058 pipe 15057 ip from 192.168.2.32 to any via em1
> <118>15059 skipto 65110 ip from 192.168.2.32 to any via em1
> <118>15062 pipe 15062 ip from any to 192.168.2.35 via em1
> <118>15063 skipto 65500 ip from any to 192.168.2.35 via em1
> <118>15067 netgraph 60 ip from 192.168.2.35 to any out recv em1 xmit em0
> <118>15068 pipe 15067 ip from 192.168.2.35 to any via em1
> <118>15069 skipto 65510 ip from 192.168.2.35 to any via em1
> <118>15072 pipe 15072 ip from any to 192.168.2.37 via em1
> <118>15073 skipto 65100 ip from any to 192.168.2.37 via em1
> <118>15077 netgraph 60 ip from 192.168.2.37 to any out recv em1 xmit em0
> <118>15078 pipe 15077 ip from 192.168.2.37 to any via em1
> <118>15079 skipto 65110 ip from 192.168.2.37 to any via em1
> <118>15092 pipe 15092 ip from any to 192.168.2.7 via em1
> <118>15093 skipto 65500 ip from any to 192.168.2.7 via em1
> <118>15097 netgraph 60 ip from 192.168.2.7 to any out recv em1 xmit em0
> <118>15098 pipe 15097 ip from 192.168.2.7 to any via em1
> <118>15099 skipto 65510 ip from 192.168.2.7 to any via em1
> <118>15102 pipe 15102 ip from any to 192.168.2.8 via em1
> <118>15103 skipto 65100 ip from any to 192.168.2.8 via em1
> <118>15107 netgraph 60 ip from 192.168.2.8 to any out recv em1 xmit em0
> <118>15108 pipe 15107 ip from 192.168.2.8 to any via em1
> <118>15109 skipto 65110 ip from 192.168.2.8 to any via em1
> <118>15112 pipe 15112 ip from any to 192.168.2.52 via em1
> <118>15113 skipto 65100 ip from any to 192.168.2.52 via em1
> <118>15117 netgraph 60 ip from 192.168.2.52 to any out recv em1 xmit em0
> <118>15118 pipe 15117 ip from 192.168.2.52 to any via em1
> <118>15119 skipto 65110 ip from 192.168.2.52 to any via em1
> <118>15122 pipe 15122 ip from any to 192.168.2.9 via em1
> <118>15123 skipto 65100 ip from any to 192.168.2.9 via em1
> <118>15127 netgraph 60 ip from 192.168.2.9 to any out recv em1 xmit em0
> <118>15128 pipe 15127 ip from 192.168.2.9 to any via em1
> <118>15129 skipto 65110 ip from 192.168.2.9 to any via em1
> <118>15132 pipe 15132 ip from any to 192.168.2.12 via em1
> <118>15133 skipto 65100 ip from any to 192.168.2.12 via em1
> <118>15137 netgraph 60 ip from 192.168.2.12 to any out recv em1 xmit em0
> <118>15138 pipe 15137 ip from 192.168.2.12 to any via em1
> <118>15139 skipto 65110 ip from 192.168.2.12 to any via em1
> <118>15142 pipe 15142 ip from any to 192.168.2.13 via em1
> <118>15143 skipto 65100 ip from any to 192.168.2.13 via em1
> <118>15147 netgraph 60 ip from 192.168.2.13 to any out recv em1 xmit em0
> <118>15148 pipe 15147 ip from 192.168.2.13 to any via em1
> <118>15149 skipto 65110 ip from 192.168.2.13 to any via em1
> <118>15152 pipe 15152 ip from any to 192.168.2.14 via em1
> <118>15153 skipto 65100 ip from any to 192.168.2.14 via em1
> <118>15157 netgraph 60 ip from 192.168.2.14 to any out recv em1 xmit em0
> <118>15158 pipe 15157 ip from 192.168.2.14 to any via em1
> <118>15159 skipto 65110 ip from 192.168.2.14 to any via em1
> <118>15162 pipe 15162 ip from any to 192.168.2.62 via em1
> <118>15163 skipto 65100 ip from any to 192.168.2.62 via em1
> <118>15167 netgraph 60 ip from 192.168.2.62 to any out recv em1 xmit em0
> <118>15168 pipe 15167 ip from 192.168.2.62 to any via em1
> <118>15169 skipto 65110 ip from 192.168.2.62 to any via em1
> <118>15172 pipe 15172 ip from any to 192.168.2.65 via em1
> <118>15173 skipto 65100 ip from any to 192.168.2.65 via em1
> <118>15177 netgraph 60 ip from 192.168.2.65 to any out recv em1 xmit em0
> <118>15178 pipe 15177 ip from 192.168.2.65 to any via em1
> <118>15179 skipto 65110 ip from 192.168.2.65 to any via em1
> <118>15182 pipe 15182 ip from any to 192.168.2.74 via em1
> <118>15183 skipto 65100 ip from any to 192.168.2.74 via em1
> <118>15187 netgraph 60 ip from 192.168.2.74 to any out recv em1 xmit em0
> <118>15188 pipe 15187 ip from 192.168.2.74 to any via em1
> <118>15189 skipto 65110 ip from 192.168.2.74 to any via em1
> <118>15192 pipe 15192 ip from any to 192.168.2.27 via em1
> <118>15193 skipto 65100 ip from any to 192.168.2.27 via em1
> <118>15197 netgraph 60 ip from 192.168.2.27 to any out recv em1 xmit em0
> <118>15198 pipe 15197 ip from 192.168.2.27 to any via em1
> <118>15199 skipto 65110 ip from 192.168.2.27 to any via em1
> <118>15202 pipe 15202 ip from any to 192.168.2.15 via em1
> <118>15203 skipto 65100 ip from any to 192.168.2.15 via em1
> <118>15207 netgraph 60 ip from 192.168.2.15 to any out recv em1 xmit em0
> <118>15208 pipe 15207 ip from 192.168.2.15 to any via em1
> <118>15209 skipto 65110 ip from 192.168.2.15 to any via em1
> <118>15212 pipe 15212 ip from any to 192.168.2.16 via em1
> <118>15213 skipto 65100 ip from any to 192.168.2.16 via em1
> <118>15217 netgraph 60 ip from 192.168.2.16 to any out recv em1 xmit em0
> <118>15218 pipe 15217 ip from 192.168.2.16 to any via em1
> <118>15219 skipto 65110 ip from 192.168.2.16 to any via em1
> <118>tokar4: not found
> <118>15222 pipe 15222 ip from any to 192.168.2.17 via em1
> <118>15223 skipto 65100 ip from any to 192.168.2.17 via em1
> <118>15227 netgraph 60 ip from 192.168.2.17 to any out recv em1 xmit em0
> <118>15228 pipe 15227 ip from 192.168.2.17 to any via em1
> <118>15229 skipto 65110 ip from 192.168.2.17 to any via em1
> <118>15232 pipe 15232 ip from any to 192.168.2.18 via em1
> <118>15233 skipto 65100 ip from any to 192.168.2.18 via em1
> <118>15237 netgraph 60 ip from 192.168.2.18 to any out recv em1 xmit em0
> <118>15238 pipe 15237 ip from 192.168.2.18 to any via em1
> <118>15239 skipto 65110 ip from 192.168.2.18 to any via em1
> <118>15252 pipe 15252 ip from any to 192.168.2.20 via em1
> <118>15253 skipto 65100 ip from any to 192.168.2.20 via em1
> <118>15257 netgraph 60 ip from 192.168.2.20 to any out recv em1 xmit em0
> <118>15258 pipe 15257 ip from 192.168.2.20 to any via em1
> <118>15259 skipto 65110 ip from 192.168.2.20 to any via em1
> <118>15262 pipe 15262 ip from any to 192.168.2.19 via em1
> <118>15263 skipto 65100 ip from any to 192.168.2.19 via em1
> <118>15267 netgraph 60 ip from 192.168.2.19 to any out recv em1 xmit em0
> <118>15268 pipe 15267 ip from 192.168.2.19 to any via em1
> <118>15269 skipto 65110 ip from 192.168.2.19 to any via em1
> <118>15272 pipe 15272 ip from any to 192.168.2.21 via em1
> <118>15273 skipto 65100 ip from any to 192.168.2.21 via em1
> <118>15277 netgraph 60 ip from 192.168.2.21 to any out recv em1 xmit em0
> <118>15278 pipe 15277 ip from 192.168.2.21 to any via em1
> <118>15279 skipto 65110 ip from 192.168.2.21 to any via em1
> <118>15282 pipe 15282 ip from any to 192.168.2.115 via em1
> <118>15283 skipto 65100 ip from any to 192.168.2.115 via em1
> <118>15287 netgraph 60 ip from 192.168.2.115 to any out recv em1 xmit em0
> <118>15288 pipe 15287 ip from 192.168.2.115 to any via em1
> <118>15289 skipto 65110 ip from 192.168.2.115 to any via em1
> <118>15292 pipe 15292 ip from any to 192.168.2.116 via em1
> <118>15293 skipto 65100 ip from any to 192.168.2.116 via em1
> <118>15297 netgraph 60 ip from 192.168.2.116 to any out recv em1 xmit em0
> <118>15298 pipe 15297 ip from 192.168.2.116 to any via em1
> <118>15299 skipto 65110 ip from 192.168.2.116 to any via em1
> <118>15302 pipe 15302 ip from any to 192.168.2.22 via em1
> <118>15303 skipto 65100 ip from any to 192.168.2.22 via em1
> <118>15307 netgraph 60 ip from 192.168.2.22 to any out recv em1 xmit em0
> <118>15308 pipe 15307 ip from 192.168.2.22 to any via em1
> <118>15309 skipto 65110 ip from 192.168.2.22 to any via em1
> <118>15312 pipe 15312 ip from any to 192.168.2.23 via em1
> <118>15313 skipto 65100 ip from any to 192.168.2.23 via em1
> <118>15317 netgraph 60 ip from 192.168.2.23 to any out recv em1 xmit em0
> <118>15318 pipe 15317 ip from 192.168.2.23 to any via em1
> <118>15319 skipto 65110 ip from 192.168.2.23 to any via em1
> <118>15322 pipe 15322 ip from any to 192.168.2.24 via em1
> <118>15323 skipto 65100 ip from any to 192.168.2.24 via em1
> <118>15327 netgraph 60 ip from 192.168.2.24 to any out recv em1 xmit em0
> <118>15328 pipe 15327 ip from 192.168.2.24 to any via em1
> <118>15329 skipto 65110 ip from 192.168.2.24 to any via em1
> <118>15332 pipe 15332 ip from any to 192.168.2.25 via em1
> <118>15333 skipto 65100 ip from any to 192.168.2.25 via em1
> <118>15337 netgraph 60 ip from 192.168.2.25 to any out recv em1 xmit em0
> <118>15338 pipe 15337 ip from 192.168.2.25 to any via em1
> <118>15339 skipto 65110 ip from 192.168.2.25 to any via em1
> <118>15342 pipe 15342 ip from any to 192.168.2.90 via em1
> <118>15343 skipto 65100 ip from any to 192.168.2.90 via em1
> <118>15347 netgraph 60 ip from 192.168.2.90 to any out recv em1 xmit em0
> <118>15348 pipe 15347 ip from 192.168.2.90 to any via em1
> <118>15349 skipto 65110 ip from 192.168.2.90 to any via em1
> <118>15352 pipe 15352 ip from any to 192.168.2.245 via em1
> <118>15353 skipto 65500 ip from any to 192.168.2.245 via em1
> <118>15357 netgraph 60 ip from 192.168.2.245 to any out recv em1 xmit em0
> <118>15358 pipe 15357 ip from 192.168.2.245 to any via em1
> <118>15359 skipto 65510 ip from 192.168.2.245 to any via em1
> <118>15362 pipe 15362 ip from any to 192.168.4.0/27 via em1
> <118>15363 skipto 65100 ip from any to 192.168.4.0/27 via em1
> <118>15367 netgraph 60 ip from 192.168.4.0/27 to any out recv em1 xmit em0
> <118>15368 pipe 15367 ip from 192.168.4.0/27 to any via em1
> <118>15369 skipto 65110 ip from 192.168.4.0/27 to any via em1
> <118>15372 pipe 15372 ip from any to 192.168.5.2 via em1
> <118>15373 skipto 65100 ip from any to 192.168.5.2 via em1
> <118>15377 netgraph 60 ip from 192.168.5.2 to any out recv em1 xmit em0
> <118>15378 pipe 15377 ip from 192.168.5.2 to any via em1
> <118>15379 skipto 65110 ip from 192.168.5.2 to any via em1
> <118>15662 pipe 15372 ip from any to 192.168.5.3 via em1
> <118>15663 skipto 65100 ip from any to 192.168.5.3 via em1
> <118>15667 netgraph 60 ip from 192.168.5.3 to any out recv em1 xmit em0
> <118>15668 pipe 15377 ip from 192.168.5.3 to any via em1
> <118>15669 skipto 65110 ip from 192.168.5.3 to any via em1
> <118>15402 pipe 15412 ip from any to 192.168.11.21 via vlan3
> <118>15403 skipto 65100 ip from any to 192.168.11.21 via vlan3
> <118>15407 netgraph 60 ip from 192.168.11.21 to any out recv vlan3 xmit em0
> <118>15408 pipe 15417 ip from 192.168.11.21 to any via vlan3
> <118>15409 skipto 65110 ip from 192.168.11.21 to any via vlan3
> <118>15412 pipe 15412 ip from any to 192.168.11.18 via vlan3
> <118>15413 skipto 65100 ip from any to 192.168.11.18 via vlan3
> <118>15417 netgraph 60 ip from 192.168.11.18 to any out recv vlan3 xmit em0
> <118>15418 pipe 15417 ip from 192.168.11.18 to any via vlan3
> <118>15419 skipto 65110 ip from 192.168.11.18 to any via vlan3
> <118>15432 pipe 15432 ip from any to 192.168.11.36 via em1
> <118>15433 skipto 65100 ip from any to 192.168.11.36 via em1
> <118>15437 netgraph 60 ip from 192.168.11.36 to any out recv em1 xmit em0
> <118>15438 pipe 15437 ip from 192.168.11.36 to any via em1
> <118>15439 skipto 65110 ip from 192.168.11.36 to any via em1
> <118>15452 pipe 15452 ip from any to 192.168.129.4 via em1
> <118>15453 skipto 65100 ip from any to 192.168.129.4 via em1
> <118>15457 netgraph 60 ip from 192.168.129.4 to any out recv em1 xmit em0
> <118>15458 pipe 15457 ip from 192.168.129.4 to any via em1
> <118>15459 skipto 65110 ip from 192.168.129.4 to any via em1
> <118>15462 pipe 15462 ip from any to 192.168.129.10 via em1
> <118>15463 skipto 65100 ip from any to 192.168.129.10 via em1
> <118>15467 netgraph 60 ip from 192.168.129.10 to any out recv em1 xmit em0
> <118>15468 pipe 15467 ip from 192.168.129.10 to any via em1
> <118>15469 skipto 65110 ip from 192.168.129.10 to any via em1
> <118>15502 pipe 15502 ip from any to 192.168.129.205 via em1
> <118>15503 skipto 65100 ip from any to 192.168.129.205 via em1
> <118>15507 netgraph 60 ip from 192.168.129.205 to any out recv em1 xmit em0
> <118>15508 pipe 15507 ip from 192.168.129.205 to any via em1
> <118>15509 skipto 65110 ip from 192.168.129.205 to any via em1
> <118>15552 pipe 15552 ip from any to 192.168.129.26 via em1
> <118>15553 skipto 65100 ip from any to 192.168.129.26 via em1
> <118>15557 netgraph 60 ip from 192.168.129.26 to any out recv em1 xmit em0
> <118>15558 pipe 15557 ip from 192.168.129.26 to any via em1
> <118>15559 skipto 65110 ip from 192.168.129.26 to any via em1
> <118>15562 pipe 15562 ip from any to 192.168.129.85 via em1
> <118>15563 skipto 65100 ip from any to 192.168.129.85 via em1
> <118>15567 netgraph 60 ip from 192.168.129.85 to any out recv em1 xmit em0
> <118>15568 pipe 15567 ip from 192.168.129.85 to any via em1
> <118>15569 skipto 65110 ip from 192.168.129.85 to any via em1
> <118>15572 pipe 15572 ip from any to 192.168.129.173 via em1
> <118>15573 skipto 65100 ip from any to 192.168.129.173 via em1
> <118>15577 netgraph 60 ip from 192.168.129.173 to any out recv em1 xmit em0
> <118>15578 pipe 15577 ip from 192.168.129.173 to any via em1
> <118>15579 skipto 65110 ip from 192.168.129.173 to any via em1
> <118>15582 pipe 15582 ip from any to 192.168.11.19 via vlan3
> <118>15583 skipto 65100 ip from any to 192.168.11.19 via vlan3
> <118>15587 netgraph 60 ip from 192.168.11.19 to any out recv vlan3 xmit em0
> <118>15588 pipe 15587 ip from 192.168.11.19 to any via vlan3
> <118>15589 skipto 65110 ip from 192.168.11.19 to any via vlan3
> <118>15592 pipe 15592 ip from any to 192.168.129.215 via em1
> <118>15593 skipto 65100 ip from any to 192.168.129.215 via em1
> <118>15597 netgraph 60 ip from 192.168.129.215 to any out recv em1 xmit em0
> <118>15598 pipe 15597 ip from 192.168.129.215 to any via em1
> <118>15599 skipto 65110 ip from 192.168.129.215 to any via em1
> <118>15622 pipe 15622 ip from any to 192.168.2.239 via em1
> <118>15623 skipto 65100 ip from any to 192.168.2.239 via em1
> <118>15627 netgraph 60 ip from 192.168.2.239 to any out recv em1 xmit em0
> <118>15628 pipe 15627 ip from 192.168.2.239 to any via em1
> <118>15629 skipto 65110 ip from 192.168.2.239 to any via em1
> <118>15632 pipe 5232 ip from any to 192.168.2.10 via em1
> <118>15633 skipto 65100 ip from any to 192.168.2.10 via em1
> <118>15637 netgraph 60 ip from 192.168.2.10 to any out recv em1 xmit em0
> <118>15638 pipe 5237 ip from 192.168.2.10 to any via em1
> <118>15639 skipto 65110 ip from 192.168.2.10 to any via em1
> <118>15652 pipe 15652 ip from any to 192.168.2.100 via em1
> <118>15653 skipto 65100 ip from any to 192.168.2.100 via em1
> <118>15657 netgraph 60 ip from 192.168.2.100 to any out recv em1 xmit em0
> <118>15658 pipe 15657 ip from 192.168.2.100 to any via em1
> <118>15659 skipto 65110 ip from 192.168.2.100 to any via em1
> <118>15672 pipe 15672 ip from any to 192.168.2.5 via em1
> <118>15673 skipto 65500 ip from any to 192.168.2.5 via em1
> <118>15677 netgraph 60 ip from 192.168.2.5 to any out recv em1 xmit em0
> <118>15678 pipe 15677 ip from 192.168.2.5 to any via em1
> <118>15679 skipto 65510 ip from 192.168.2.5 to any via em1
> <118>15682 pipe 15682 ip from any to 192.168.129.112 via em1
> <118>15683 skipto 65100 ip from any to 192.168.129.112 via em1
> <118>15687 netgraph 60 ip from 192.168.129.112 to any out recv em1 xmit em0
> <118>15688 pipe 15687 ip from 192.168.129.112 to any via em1
> <118>15689 skipto 65110 ip from 192.168.129.112 to any via em1
> <118>15692 pipe 15692 ip from any to 192.168.129.55 via em1
> <118>15693 skipto 65100 ip from any to 192.168.129.55 via em1
> <118>15697 netgraph 60 ip from 192.168.129.55 to any out recv em1 xmit em0
> <118>15698 pipe 15697 ip from 192.168.129.55 to any via em1
> <118>15699 skipto 65110 ip from 192.168.129.55 to any via em1
> <118>15702 pipe 15702 ip from any to 192.168.129.129 via em1
> <118>15703 skipto 65100 ip from any to 192.168.129.129 via em1
> <118>15707 netgraph 60 ip from 192.168.129.129 to any out recv em1 xmit em0
> <118>15708 pipe 15707 ip from 192.168.129.129 to any via em1
> <118>15709 skipto 65110 ip from 192.168.129.129 to any via em1
> <118>15712 pipe 15712 ip from any to 192.168.2.26 via em1
> <118>15713 skipto 65100 ip from any to 192.168.2.26 via em1
> <118>15717 netgraph 60 ip from 192.168.2.26 to any out recv em1 xmit em0
> <118>15718 pipe 15717 ip from 192.168.2.26 to any via em1
> <118>15719 skipto 65110 ip from 192.168.2.26 to any via em1
> <118>17002 pipe 17002 ip from any to 192.168.2.30 via em1
> <118>17003 skipto 65100 ip from any to 192.168.2.30 via em1
> <118>17007 netgraph 60 ip from 192.168.2.30 to any out recv em1 xmit em0
> <118>17008 pipe 17009 ip from 192.168.2.30 to any via em1
> <118>17009 skipto 65110 ip from 192.168.2.30 to any via em1
> <118>05002 pipe 5002 ip from any to 195.16.76.10 in via em0
> <118>05003 skipto 65500 ip from any to 195.16.76.10 in via em0
> <118>05007 pipe 5007 ip from 195.16.76.10 to any out via em0
> <118>05008 skipto 65510 ip from 195.16.76.10 to any out via em0
> <118>05012 pipe 5012 ip from any to 195.16.76.14 in via em0
> <118>05013 skipto 65500 ip from any to 195.16.76.14 in via em0
> <118>05017 pipe 5017 ip from 195.16.76.14 to any out via em0
> <118>05018 skipto 65510 ip from 195.16.76.14 to any out via em0
> <118>05022 pipe 5022 ip from any to { 195.16.76.30 or dst-ip 195.16.76.18 } in via em0
> <118>05023 skipto 65500 ip from any to { 195.16.76.30 or dst-ip 195.16.76.18 } in via em0
> <118>05027 pipe 5027 ip from { 195.16.76.30 or 195.16.76.18 } to any out via em0
> <118>05028 skipto 65510 ip from { 195.16.76.30 or 195.16.76.18 } to any out via em0
> <118>05032 count ip from 213.70.83.33 to 195.16.76.32/27{34} in via em0
> <118>05033 skipto 65500 ip from 213.70.83.33 to 195.16.76.32/27{34} in via em0
> <118>05037 count ip from 195.16.76.32/27{34} to 213.70.83.33 out via em0
> <118>05038 skipto 65510 ip from 195.16.76.32/27{34} to 213.70.83.33 out via em0
> <118>05042 pipe 5042 ip from any to 195.16.76.156 in via em0
> <118>05043 skipto 65500 ip from any to 195.16.76.156 in via em0
> <118>05047 pipe 5047 ip from 195.16.76.156 to any out via em0
> <118>05048 skipto 65510 ip from 195.16.76.156 to any out via em0
> <118>05062 pipe 5062 ip from any to 195.16.76.12 in via em0
> <118>05063 skipto 65500 ip from any to 195.16.76.12 in via em0
> <118>05067 count ip from 195.16.76.12 to any out via em0
> <118>05069 pipe 5067 ip from 195.16.76.12 to any out via em0
> <118>05068 skipto 65510 ip from 195.16.76.12 to any out via em0
> <118>05072 pipe 5072 ip from any to 195.16.76.143 in via em0
> <118>05073 skipto 65100 ip from any to 195.16.76.143 in via em0
> <118>05077 pipe 5077 ip from 195.16.76.143 to any out via em0
> <118>05078 skipto 65110 ip from 195.16.76.143 to any out via em0
> <118>05082 pipe 5082 ip from any to 195.16.76.13 in via em0
> <118>05083 skipto 65500 ip from any to 195.16.76.13 in via em0
> <118>05087 pipe 5087 ip from 195.16.76.13 to any out via em0
> <118>05088 skipto 65510 ip from 195.16.76.13 to any out via em0
> <118>05092 pipe 5092 ip from any to 195.16.76.130 in via em0
> <118>05093 skipto 65500 ip from any to 195.16.76.130 in via em0
> <118>05097 pipe 5097 ip from 195.16.76.130 to any out via em0
> <118>05098 skipto 65510 ip from 195.16.76.130 to any out via em0
> <118>05102 pipe 5102 ip from any to 195.16.76.132 in via em0
> <118>05103 skipto 65100 ip from any to 195.16.76.132 in via em0
> <118>05107 pipe 5107 ip from 195.16.76.132 to any out via em0
> <118>05108 skipto 65110 ip from 195.16.76.132 to any out via em0
> <118>05112 pipe 5112 ip from any to 195.16.76.133 in via em0
> <118>05113 skipto 65100 ip from any to 195.16.76.133 in via em0
> <118>05117 pipe 5117 ip from 195.16.76.133 to any out via em0
> <118>05118 skipto 65110 ip from 195.16.76.133 to any out via em0
> <118>05122 pipe 5122 ip from any to 195.16.77.34
> <118>05123 skipto 65100 ip from any to 195.16.77.34
> <118>05127 pipe 5127 ip from 195.16.77.34 to any
> <118>05128 skipto 65110 ip from 195.16.77.34 to any
> <118>05132 pipe 5132 ip from any to 195.16.76.135 in via em0
> <118>05133 skipto 65100 ip from any to 195.16.76.135 in via em0
> <118>05137 pipe 5137 ip from 195.16.76.135 to any out via em0
> <118>05138 skipto 65110 ip from 195.16.76.135 to any out via em0
> <118>05142 pipe 5142 ip from any to 195.16.76.136 in via em0
> <118>05143 skipto 65500 ip from any to 195.16.76.136 in via em0
> <118>05147 pipe 5147 ip from 195.16.76.136 to any out via em0
> <118>05148 skipto 65510 ip from 195.16.76.136 to any out via em0
> <118>05152 pipe 5152 ip from any to 195.16.76.137 in via em0
> <118>05153 skipto 65500 ip from any to 195.16.76.137 in via em0
> <118>05157 pipe 5157 ip from 195.16.76.137 to any out via em0
> <118>05158 skipto 65510 ip from 195.16.76.137 to any out via em0
> <118>05162 pipe 5162 ip from any to 195.16.76.138 in via em0
> <118>05163 skipto 65500 ip from any to 195.16.76.138 in via em0
> <118>05167 pipe 5167 ip from 195.16.76.138 to any out via em0
> <118>05168 skipto 65510 ip from 195.16.76.138 to any out via em0
> <118>05172 pipe 5172 ip from any to 195.16.76.232 in via em0
> <118>05173 skipto 65500 ip from any to 195.16.76.232 in via em0
> <118>05177 pipe 5177 ip from 195.16.76.232 to any out via em0
> <118>05178 skipto 65510 ip from 195.16.76.232 to any out via em0
> <118>05182 pipe 5182 ip from any to 195.16.76.140 in via em0
> <118>05183 skipto 65500 ip from any to 195.16.76.140 in via em0
> <118>05187 pipe 5187 ip from 195.16.76.140 to any out via em0
> <118>05188 skipto 65510 ip from 195.16.76.140 to any out via em0
> <118>05212 count ip from any to 192.168.157.10
> <118>05213 pipe 5212 ip from { 192.168.11.0/30 or 195.16.76.0/29 or 195.16.77.0/28 } to 192.168.157.10
> <118>05214 skipto 65500 ip from { 192.168.11.0/30 or 195.16.76.0/29 or 195.16.77.0/28 } to 192.168.157.10
> <118>05217 count ip from 192.168.157.10 to any
> <118>05218 pipe 5217 ip from 192.168.157.10 to { 192.168.11.0/30 or dst-ip 195.16.76.0/29 or dst-ip 195.16.77.0/28 }
> <118>05219 skipto 65510 ip from 192.168.157.10 to { 192.168.11.0/30 or dst-ip 195.16.76.0/29 or dst-ip 195.16.77.0/28 }
> <118>05222 pipe 5222 ip from any to 195.16.76.144 in via em0
> <118>05223 skipto 65500 ip from any to 195.16.76.144 in via em0
> <118>05227 pipe 5227 ip from 195.16.76.144 to any out via em0
> <118>05228 skipto 65510 ip from 195.16.76.144 to any out via em0
> <118>05232 pipe 5232 ip from any to 195.16.76.147 in via em0
> <118>05233 skipto 65100 ip from any to 195.16.76.147 in via em0
> <118>05237 pipe 5237 ip from 195.16.76.147 to any out via em0
> <118>05238 skipto 65110 ip from 195.16.76.147 to any out via em0
> <118>05252 pipe 5252 ip from any to 195.16.76.148 in via em0
> <118>05253 skipto 65100 ip from any to 195.16.76.148 in via em0
> <118>05257 pipe 5257 ip from 195.16.76.148 to any out via em0
> <118>05258 skipto 65110 ip from 195.16.76.148 to any out via em0
> <118>05262 pipe 5262 ip from any to 195.16.76.149 in via em0
> <118>05263 skipto 65100 ip from any to 195.16.76.149 in via em0
> <118>05267 pipe 5267 ip from 195.16.76.149 to any out via em0
> <118>05268 skipto 65110 ip from 195.16.76.149 to any out via em0
> <118>05272 pipe 5272 ip from any to 195.16.76.150 in via em0
> <118>05273 skipto 65100 ip from any to 195.16.76.150 in via em0
> <118>05277 pipe 5277 ip from 195.16.76.150 to any out via em0
> <118>05278 skipto 65110 ip from 195.16.76.150 to any out via em0
> <118>05282 pipe 5282 ip from any to 195.16.76.151 in via em0
> <118>05283 skipto 65100 ip from any to 195.16.76.151 in via em0
> <118>05287 pipe 5287 ip from 195.16.76.151 to any out via em0
> <118>05288 skipto 65110 ip from 195.16.76.151 to any out via em0
> <118>05292 pipe 5292 ip from any to 195.16.76.154 in via em0
> <118>05293 skipto 65100 ip from any to 195.16.76.154 in via em0
> <118>05297 pipe 5297 ip from 195.16.76.154 to any out via em0
> <118>05298 skipto 65110 ip from 195.16.76.154 to any out via em0
> <118>05302 pipe 5302 ip from any to 195.16.76.155 in via em0
> <118>05303 skipto 65500 ip from any to 195.16.76.155 in via em0
> <118>05307 pipe 5307 ip from 195.16.76.155 to any out via em0
> <118>05308 skipto 65510 ip from 195.16.76.155 to any out via em0
> <118>05312 pipe 5312 ip from any to 195.16.76.235 in via em0
> <118>05313 skipto 65500 ip from any to 195.16.76.235 in via em0
> <118>05317 pipe 5317 ip from 195.16.76.235 to any out via em0
> <118>05318 skipto 65510 ip from 195.16.76.235 to any out via em0
> <118>05322 pipe 5322 ip from any to 195.16.76.222 in via em0
> <118>05323 skipto 65500 ip from any to 195.16.76.222 in via em0
> <118>05327 pipe 5327 ip from 195.16.76.222 to any out via em0
> <118>05328 skipto 65510 ip from 195.16.76.222 to any out via em0
> <118>05332 pipe 5332 ip from any to 195.16.76.142 via em0
> <118>05333 skipto 65100 ip from any to 195.16.76.142 via em0
> <118>05337 pipe 5337 ip from 195.16.76.142 to any via em0
> <118>05338 skipto 65110 ip from 195.16.76.142 to any via em0
> <118>05342 pipe 5342 ip from any to 195.16.76.145 via em0
> <118>05343 skipto 65100 ip from any to 195.16.76.145 via em0
> <118>05347 count ip from 195.16.76.145 to any via em0
> <118>05348 pipe 5347 ip from 195.16.76.145 to any via em0
> <118>05349 skipto 65110 ip from 195.16.76.145 to any via em0
> <118>05352 pipe 5352 ip from any to 195.16.76.157 via em0
> <118>05353 skipto 65100 ip from any to 195.16.76.157 via em0
> <118>05357 pipe 5357 ip from 195.16.76.157 to any via em0
> <118>05358 skipto 65110 ip from 195.16.76.157 to any via em0
> <118>05362 pipe 5362 ip from any to { 195.16.76.32/27{33,35-63} or dst-ip 195.16.76.64/30 or dst-ip 195.16.76.68/30 } in via em0
> <118>05363 skipto 65500 ip from any to { 195.16.76.32/27{33,35-63} or dst-ip 195.16.76.64/30 or dst-ip 195.16.76.68/30 } in via em0
> <118>05367 pipe 5367 ip from { 195.16.76.32/27{33,35-63} or 195.16.76.64/30 or 195.16.76.68/30 } to any out via em0
> <118>05368 skipto 65510 ip from { 195.16.76.32/27{33,35-63} or 195.16.76.64/30 or 195.16.76.68/30 } to any out via em0
> <118>05372 pipe 5372 ip from any to 195.16.76.153 in via em0
> <118>05373 skipto 65100 ip from any to 195.16.76.153 in via em0
> <118>05377 pipe 5377 ip from 195.16.76.153 to any out via em0
> <118>05378 skipto 65110 ip from 195.16.76.153 to any out via em0
> <118>05382 pipe 15372 ip from any to 195.16.76.158 in via em0
> <118>05383 skipto 65100 ip from any to 195.16.76.158 in via em0
> <118>05387 pipe 15377 ip from 195.16.76.158 to any out via em0
> <118>05388 skipto 65110 ip from 195.16.76.158 to any out via em0
> <118>05392 pipe 5392 ip from 62.64.120.62 to 195.16.76.141 in via em0
> <118>05393 skipto 65500 ip from 62.64.120.62 to 195.16.76.141 in via em0
> <118>05394 deny ip from any to 195.16.76.141 in via em0
> <118>05397 pipe 5397 ip from 195.16.76.141 to 62.64.120.62 out via em0
> <118>05398 skipto 65510 ip from 195.16.76.141 to 62.64.120.62 out via em0
> <118>05399 deny ip from 195.16.76.141 to any out via em0
> <118>05402 pipe 5402 ip from any to 195.16.76.152 in via em0
> <118>05403 skipto 65100 ip from any to 195.16.76.152 in via em0
> <118>05407 pipe 5407 ip from 195.16.76.152 to any out via em0
> <118>05408 skipto 65110 ip from 195.16.76.152 to any out via em0
> <118>05412 pipe 5412 ip from any to 195.16.76.226 in via em0
> <118>05413 skipto 65500 ip from any to 195.16.76.226 in via em0
> <118>05417 pipe 5417 ip from 195.16.76.226 to any out via em0
> <118>05418 skipto 65510 ip from 195.16.76.226 to any out via em0
> <118>05432 pipe 5432 ip from any to 195.16.76.139 in via em0
> <118>05433 skipto 65500 ip from any to 195.16.76.139 in via em0
> <118>05437 pipe 5437 ip from 195.16.76.139 to any out via em0
> <118>05438 skipto 65510 ip from 195.16.76.139 to any out via em0
> <118>05462 pipe 5412 ip from any to 195.16.76.228 in via em0
> <118>05463 skipto 65100 ip from any to 195.16.76.228 in via em0
> <118>05467 pipe 5417 ip from 195.16.76.228 to any out via em0
> <118>05468 skipto 65110 ip from 195.16.76.228 to any out via em0
> <118>05482 pipe 5412 ip from any to 195.16.76.230 in via em0
> <118>05483 skipto 65100 ip from any to 195.16.76.230 in via em0
> <118>05487 pipe 5417 ip from 195.16.76.230 to any out via em0
> <118>05488 skipto 65110 ip from 195.16.76.230 to any out via em0
> <118>05492 pipe 5492 ip from any to 195.16.76.134 in via em0
> <118>05493 skipto 65500 ip from any to 195.16.76.134 in via em0
> <118>05497 pipe 5497 ip from 195.16.76.134 to any out via em0
> <118>05498 skipto 65510 ip from 195.16.76.134 to any out via em0
> <118>05512 pipe 5512 ip from any to 195.16.76.231 in via em0
> <118>05513 skipto 65100 ip from any to 195.16.76.231 in via em0
> <118>05517 pipe 5517 ip from 195.16.76.231 to any out via em0
> <118>05518 skipto 65110 ip from 195.16.76.231 to any out via em0
> <118>05522 pipe 5522 ip from any to 195.16.76.233 in via em0
> <118>05523 skipto 65500 ip from any to 195.16.76.233 in via em0
> <118>05527 pipe 5527 ip from 195.16.76.233 to any out via em0
> <118>05528 skipto 65510 ip from 195.16.76.233 to any out via em0
> <118>05532 pipe 5532 ip from any to 195.16.76.254 in via em0
> <118>05533 skipto 65500 ip from any to 195.16.76.254 in via em0
> <118>05537 pipe 5537 ip from 195.16.76.254 to any out via em0
> <118>05538 skipto 65510 ip from 195.16.76.254 to any out via em0
> <118>05542 pipe 5542 ip from any to 195.16.76.86 in via em0
> <118>05543 skipto 65500 ip from any to 195.16.76.86 in via em0
> <118>05547 pipe 5547 ip from 195.16.76.86 to any out via em0
> <118>05548 skipto 65510 ip from 195.16.76.86 to any out via em0
> <118>05552 pipe 5552 ip from any to 195.16.76.253 in via em0
> <118>05553 skipto 65500 ip from any to 195.16.76.253 in via em0
> <118>05557 pipe 5557 ip from 195.16.76.253 to any out via em0
> <118>05558 skipto 65510 ip from 195.16.76.253 to any out via em0
> <118>05562 pipe 5552 ip from any to 195.16.76.131 in via em0
> <118>05563 skipto 65100 ip from any to 195.16.76.131 in via em0
> <118>05567 pipe 5557 ip from 195.16.76.131 to any out via em0
> <118>05568 skipto 65110 ip from 195.16.76.131 to any out via em0
> <118>05572 pipe 5532 ip from any to 195.16.76.252 in via em0
> <118>05573 skipto 65200 ip from any to 195.16.76.252 in via em0
> <118>05577 pipe 5537 ip from 195.16.76.252 to any out via em0
> <118>05578 skipto 65210 ip from 195.16.76.252 to any out via em0
> <118>05582 pipe 5582 ip from any to 195.16.76.229 in via em0
> <118>05583 skipto 65100 ip from any to 195.16.76.229 in via em0
> <118>05587 pipe 5587 ip from 195.16.76.229 to any out via em0
> <118>05588 skipto 65110 ip from 195.16.76.229 to any out via em0
> <118>05592 pipe 5592 ip from any to 195.16.76.236 in via em0
> <118>05593 skipto 65100 ip from any to 195.16.76.236 in via em0
> <118>05597 pipe 5597 ip from 195.16.76.236 to any out via em0
> <118>05598 skipto 65110 ip from 195.16.76.236 to any out via em0
> <118>05602 pipe 5602 ip from any to 195.16.76.227 in via em0
> <118>05603 skipto 65500 ip from any to 195.16.76.227 in via em0
> <118>05607 pipe 5607 ip from 195.16.76.227 to any out via em0
> <118>05608 skipto 65510 ip from 195.16.76.227 to any out via em0
> <118>05612 pipe 5612 ip from any to 195.16.76.237 in via em0
> <118>05613 skipto 65100 ip from any to 195.16.76.237 in via em0
> <118>05617 pipe 5617 ip from 195.16.76.237 to any out via em0
> <118>05618 skipto 65110 ip from 195.16.76.237 to any out via em0
> <118>05622 pipe 5622 ip from any to 195.16.76.239 in via em0
> <118>05623 skipto 65500 ip from any to 195.16.76.239 in via em0
> <118>05627 pipe 5627 ip from 195.16.76.239 to any out via em0
> <118>05628 skipto 65510 ip from 195.16.76.239 to any out via em0
> <118>05632 pipe 5632 ip from any to 195.16.76.238 in via em0
> <118>05633 skipto 65100 ip from any to 195.16.76.238 in via em0
> <118>05637 pipe 5637 ip from 195.16.76.238 to any out via em0
> <118>05638 skipto 65110 ip from 195.16.76.238 to any out via em0
> <118>Firewall rules loaded.
> <118>net.inet.ip.fw.enable:
> <118>1
> <118> ->
> <118>1
> <118>
> <118>Additional IP options:
> <118>.
> <118>Mounting NFS file systems:
> <118>.
>
>
> Fatal trap 12: page fault while in kernel mode
> cpuid = 1; apic id = 01
> fault virtual address= 0x28
> fault code= supervisor write data, page not present
> instruction pointer= 0x8:0xffffffff803430b3
> stack pointer = 0x10:0xffffffffac0d6af0
> frame pointer = 0x10:0xffffff0001b7ba00
> code segment= base 0x0, limit 0xfffff, type 0x1b
> = DPL 0, pres 1, long 1, def32 0, gran 1
> processor eflags= interrupt enabled, resume, IOPL = 0
> current process= 29 (dummynet)
> trap number= 12
> panic: page fault
> cpuid = 1
> Uptime: 6s
> Physical memory: 2007 MB
> Dumping 101 MB: 86 70 54 38 22 6
>
> #0 doadump () at pcpu.h:194
> 194pcpu.h: No such file or directory.
> in pcpu.h
> (kgdb) bt
> #0 doadump () at pcpu.h:194
> #1 0xffffff0001925000 in ?? ()
> #2 0xffffffff8024c659 in boot (howto=260) at ../../../kern/kern_shutdown.c:409
> #3 0xffffffff8024ca5d in panic (fmt=0x104 <Address 0x104 out of bounds>) at ../../../kern/kern_shutdown.c:563
> #4 0xffffffff803ea974 in trap_fatal (frame=0xffffff0001925000, eva=18446742974216222928) at ../../../amd64/amd64/trap.c:724
> #5 0xffffffff803ead45 in trap_pfault (frame=0xffffffffac0d6a40, usermode=0) at ../../../amd64/amd64/trap.c:641
> #6 0xffffffff803eb688 in trap (frame=0xffffffffac0d6a40) at ../../../amd64/amd64/trap.c:410
> #7 0xffffffff803d12ee in calltrap () at ../../../amd64/amd64/exception.S:169
> #8 0xffffffff803430b3 in move_pkt (pkt=0xffffff0001b7ba00, q=0xffffff0001dd2000, p=0xffffff0001f67a00, len=191) at ../../../netinet/ip_dummynet.c:517
> #9 0xffffffff80343ae9 in ready_event (q=0xffffff0001dd2000, head=0xffffffffac0d6b88, tail=0xffffffffac0d6b80) at ../../../netinet/ip_dummynet.c:564
> #10 0xffffffff80345593 in dummynet_task (context=Variable "context" is not available.
> ) at ../../../netinet/ip_dummynet.c:802
> #11 0xffffffff8027cabf in taskqueue_run (queue=0xffffff0001948d80) at ../../../kern/subr_taskqueue.c:255
> #12 0xffffffff8027cd64 in taskqueue_thread_loop (arg=Variable "arg" is not available.
> ) at ../../../kern/subr_taskqueue.c:374
> #13 0xffffffff8022dd73 in fork_exit (callout=0xffffffff8027cd00 <taskqueue_thread_loop>, arg=0xffffffff805d7598, frame=0xffffffffac0d6c80)
> at ../../../kern/kern_fork.c:781
> #14 0xffffffff803d16be in fork_trampoline () at ../../../amd64/amd64/exception.S:415
> #15 0x0000000000000000 in ?? ()
> #16 0x0000000000000000 in ?? ()
> #17 0x0000000000000001 in ?? ()
> #18 0x0000000000000000 in ?? ()
> #19 0x0000000000000000 in ?? ()
> #20 0x0000000000000000 in ?? ()
> #21 0x0000000000000000 in ?? ()
> #22 0x0000000000000000 in ?? ()
> #23 0x0000000000000000 in ?? ()
> #24 0x0000000000000000 in ?? ()
> #25 0x0000000000000000 in ?? ()
> #26 0x0000000000000000 in ?? ()
> #27 0x0000000000000000 in ?? ()
> #28 0x0000000000000000 in ?? ()
> #29 0x0000000000000000 in ?? ()
> #30 0x0000000000000000 in ?? ()
> #31 0x0000000000000000 in ?? ()
> #32 0x0000000000000000 in ?? ()
> #33 0x0000000000000000 in ?? ()
> #34 0x0000000000000000 in ?? ()
> #35 0x0000000000000000 in ?? ()
> #36 0x0000000000000000 in ?? ()
> #37 0x0000000000000000 in ?? ()
> #38 0x0000000000000000 in ?? ()
> #39 0x00000000007a5000 in ?? ()
> #40 0x0000000000000002 in ?? ()
> #41 0x0000000000000000 in ?? ()
> #42 0xffffff00011738d0 in ?? ()
> #43 0xffffff00010c9000 in ?? ()
> #44 0xffffff0001925000 in ?? ()
> #45 0xffffffffac0d66e8 in ?? ()
> #46 0xffffff0001925000 in ?? ()
> #47 0xffffffff8026a319 in sched_switch (td=0xffffffff805d7598, newtd=0xffffffff8027cd00, flags=0) at ../../../kern/sched_4bsd.c:905
> #48 0x0000000000000000 in ?? ()
> #49 0x0000000000000000 in ?? ()
> #50 0x0000000000000000 in ?? ()
> #51 0x0000000000000000 in ?? ()
> #52 0x0000000000000000 in ?? ()
> #53 0x0000000000000000 in ?? ()
> #54 0x0000000000000000 in ?? ()
> #55 0x0000000000000000 in ?? ()
> #56 0x0000000000000000 in ?? ()
> #57 0x0000000000000000 in ?? ()
> #58 0x0000000000000000 in ?? ()
> #59 0x0000000000000000 in ?? ()
> #60 0x0000000000000000 in ?? ()
> #61 0x0000000000000000 in ?? ()
> #62 0x0000000000000000 in ?? ()
> #63 0x0000000000000000 in ?? ()
> #64 0x0000000000000000 in ?? ()
> #65 0x0000000000000000 in ?? ()
> #66 0x0000000000000000 in ?? ()
> #67 0x0000000000000000 in ?? ()
> #68 0x0000000000000000 in ?? ()
> #69 0x0000000000000000 in ?? ()
> #70 0x0000000000000000 in ?? ()
> #71 0x0000000000000000 in ?? ()
> #72 0x0000000000000000 in ?? ()
> #73 0x0000000000000000 in ?? ()
> #74 0x0000000000000000 in ?? ()
> #75 0x0000000000000000 in ?? ()
> #76 0x0000000000000000 in ?? ()
> #77 0x0000000000000000 in ?? ()
> #78 0x0000000000000000 in ?? ()
> #79 0x0000000000000000 in ?? ()
> #80 0x0000000000000000 in ?? ()
> #81 0x0000000000000000 in ?? ()
> #82 0x0000000000000000 in ?? ()
> #83 0x0000000000000000 in ?? ()
> #84 0x0000000000000000 in ?? ()
> #85 0x0000000000000000 in ?? ()
> #86 0x0000000000000000 in ?? ()
> #87 0x0000000000000000 in ?? ()
> #88 0x0000000000000000 in ?? ()
> #89 0x0000000000000000 in ?? ()
> #90 0x0000000000000000 in ?? ()
> #91 0x0000000000000000 in ?? ()
> #92 0x0000000000000000 in ?? ()
> #93 0x0000000000000000 in ?? ()
> #94 0x0000000000000000 in ?? ()
> #95 0x0000000000000000 in ?? ()
> #96 0x0000000000000000 in ?? ()
> #97 0x0000000000000000 in ?? ()
> #98 0x0000000000000000 in ?? ()
> #99 0x0000000000000000 in ?? ()
> #100 0x0000000000000000 in ?? ()
> #101 0x0000000000000000 in ?? ()
> #102 0x0000000000000000 in ?? ()
> #103 0x0000000000000000 in ?? ()
> #104 0x0000000000000000 in ?? ()
> #105 0x0000000000000000 in ?? ()
> #106 0x0000000000000000 in ?? ()
> #107 0x0000000000000000 in ?? ()
> #108 0x0000000000000000 in ?? ()
> #109 0x0000000000000000 in ?? ()
> #110 0x0000000000000000 in ?? ()
> #111 0x0000000000000000 in ?? ()
> #112 0x0000000000000000 in ?? ()
> #113 0x0000000000000000 in ?? ()
> #114 0x0000000000000000 in ?? ()
> #115 0x0000000000000000 in ?? ()
> #116 0x0000000000000000 in ?? ()
> #117 0x0000000000000000 in ?? ()
> #118 0x0000000000000000 in ?? ()
> #119 0x0000000000000000 in ?? ()
> Cannot access memory at address 0xffffffffac0d7000
> (kgdb) bt full
> #0 doadump () at pcpu.h:194
> No locals.
> #1 0xffffff0001925000 in ?? ()
> No symbol table info available.
> #2 0xffffffff8024c659 in boot (howto=260) at ../../../kern/kern_shutdown.c:409
> _ep = (struct eventhandler_entry *) 0xffffff0001925000
> _el = Variable "_el" is not available.
> (kgdb)
> _______________________________________________
> freebsd-ipfw@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-ipfw
> To unsubscribe, send any mail to "freebsd-ipfw-unsubscribe@freebsd.org"
Do you have "options INVARIANTS" in your kernel config? If no please compile it
in and then get crashdump again. I guess somehow we have packet without
dummynet tag inside dummynet.
--
Oleg.
================================================================
=== Oleg Bulyzhin -- OBUL-RIPN -- OBUL-RIPE -- oleg@rinet.ru ===
================================================================
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080314175835.GA62177>