From owner-freebsd-net@FreeBSD.ORG  Thu Jan  5 09:58:57 2012
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 434BB106564A
	for <freebsd-net@FreeBSD.org>; Thu,  5 Jan 2012 09:58:57 +0000 (UTC)
	(envelope-from glebius@FreeBSD.org)
Received: from cell.glebius.int.ru (glebius.int.ru [81.19.64.117])
	by mx1.freebsd.org (Postfix) with ESMTP id AC4C28FC08
	for <freebsd-net@FreeBSD.org>; Thu,  5 Jan 2012 09:58:56 +0000 (UTC)
Received: from cell.glebius.int.ru (localhost [127.0.0.1])
	by cell.glebius.int.ru (8.14.5/8.14.5) with ESMTP id q059wtiO056795;
	Thu, 5 Jan 2012 13:58:55 +0400 (MSK)
	(envelope-from glebius@FreeBSD.org)
Received: (from glebius@localhost)
	by cell.glebius.int.ru (8.14.5/8.14.5/Submit) id q059wtgk056794;
	Thu, 5 Jan 2012 13:58:55 +0400 (MSK)
	(envelope-from glebius@FreeBSD.org)
X-Authentication-Warning: cell.glebius.int.ru: glebius set sender to
	glebius@FreeBSD.org using -f
Date: Thu, 5 Jan 2012 13:58:55 +0400
From: Gleb Smirnoff <glebius@FreeBSD.org>
To: Sami Halabi <sodynet1@gmail.com>
Message-ID: <20120105095855.GI34721@glebius.int.ru>
References: <CAEW+ogbn6jizawgLCHCcTLMSmdjCKFvPkJa33jrJ5AAnjww=fg@mail.gmail.com>
	<20111227044754.GK8035@FreeBSD.org>
	<CAEW+ogY_iHUb=n=G45d5U_r5XfD39YDwgNkowu1QN+eWL5K5Fw@mail.gmail.com>
	<20111227083503.GP8035@glebius.int.ru>
	<CAEW+ogYHtvPFqMAM17_fHWzvKAiSqEOyQ3dtQRwmD6DJSHsrEA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
In-Reply-To: <CAEW+ogYHtvPFqMAM17_fHWzvKAiSqEOyQ3dtQRwmD6DJSHsrEA@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Cc: freebsd-net@FreeBSD.org
Subject: Re: ng_mppc_decompress: too many (4094) packets dropped, disabling
 node
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 05 Jan 2012 09:58:57 -0000

  Sami,

  I'm trying to reproduce a reordering problem with a new node, and
I've found that:

1) PPTP uses sequencing, that would not pass out of sequence datagram
   to the PPP, and thus to MPPE.
2) L2TP uses sequencing optionally, so the problem in subject may
   appear only on an L2TP link with disabled sequencing.

I wonder how often L2TP is running w/o sequencing control. Can you
please run this script on your mpd box to estimate?

#!/bin/sh

IDS=$(ngctl ls | awk '{ if ($4 == "l2tp") print $6}')
for id in $IDS; do
        id="[$id]:";
        sess=$(ngctl show $id | sed -En 's/.*session_([0-9a-f]+).*/\1/p');
        ngctl msg $id getsessconfig 0x$sess
done

In my small installation I've got only a couple of L2TP clients, and both
use sequencing, so patched code in ng_mppc won't be ever executed.

Rec'd response "getsessconfig" (4) from "[11f]:":
Args:   { session_id=0xafb6 peer_id=0x2fcf control_dseq=1 enable_dseq=1 }
Rec'd response "getsessconfig" (4) from "[f3]:":
Args:   { session_id=0xd34b peer_id=0x2654 control_dseq=1 enable_dseq=1 }

I'd like to explicitly test the code in ng_mppc to make sure, that node
can rekey up to 4096 times and continue operation.

-- 
Totus tuus, Glebius.