From owner-freebsd-net@FreeBSD.ORG Thu Oct 18 09:02:34 2007 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id BFA2F16A417 for ; Thu, 18 Oct 2007 09:02:34 +0000 (UTC) (envelope-from kl@vsen.dk) Received: from www.EnableIT.dk (r2d2.enableit.dk [195.35.83.82]) by mx1.freebsd.org (Postfix) with ESMTP id 7B54A13C468 for ; Thu, 18 Oct 2007 09:02:34 +0000 (UTC) (envelope-from kl@vsen.dk) Received: from localhost (localhost [127.0.0.1]) by www.EnableIT.dk (Postfix) with ESMTP id F3C79A1776 for ; Thu, 18 Oct 2007 10:34:00 +0200 (CEST) X-Virus-Scanned: amavisd-new at EnableIT.dk Received: from www.enableit.dk (localhost [127.0.0.1]) by www.EnableIT.dk (Postfix) with ESMTP id 48373A15A7 for ; Thu, 18 Oct 2007 10:33:59 +0200 (CEST) Received: from 62.242.232.132 (SquirrelMail authenticated user klavs) by www.enableit.dk with HTTP; Thu, 18 Oct 2007 10:33:59 +0200 (CEST) Message-ID: <2385.62.242.232.132.1192696439.squirrel@www.enableit.dk> Date: Thu, 18 Oct 2007 10:33:59 +0200 (CEST) From: "Klavs Klavsen" To: freebsd-net@freebsd.org User-Agent: SquirrelMail/1.4.4 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal Subject: packet loss with carp on 6.2 X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Oct 2007 09:02:34 -0000 Hi guys, I have had a FreeBSD 6.2 (-p1 - yes I know :) firewall running for a while, with pf fw rules. It has worked fine, and was a replacement for a fbsd 4.x ipfw firewall. Now I just replaced the 6.2 pf firewall, with a 6.2 (-p7) and carp interfaces enabled. It's using the same cables and the same type of network cards (bge and em). The new one, is a HP dl385 (amd) where the old one, was a HP dl380 (Intel). On the new one, fping (and ping -f) pinging through the firewall, gives me a packet loss. fping in nagios, reports up to 55% packet loss :( - a ping -f gives me 1-3%, but bad enough :( pinging from the firewall itself, to one of the hosts, that packets are lost to (when pinging from other networks) does not give any packet loss. The old 6.2, had polling enabled - and I've tried to disable polling on the new, but to no effect. Any ideas what else to try? -- Regards, Klavs Klavsen, GSEC - kl@vsen.dk - http://www.vsen.dk PGP: 7E063C62/2873 188C 968E 600D D8F8 B8DA 3D3A 0B79 7E06 3C62 "Those who do not understand Unix are condemned to reinvent it, poorly." --Henry Spencer