From owner-freebsd-pf@FreeBSD.ORG Sat Nov 11 23:04:30 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 62BCF16A4A7 for ; Sat, 11 Nov 2006 23:04:30 +0000 (UTC) (envelope-from kimimeister@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.172]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3E85343D53 for ; Sat, 11 Nov 2006 23:04:26 +0000 (GMT) (envelope-from kimimeister@gmail.com) Received: by ug-out-1314.google.com with SMTP id o2so712033uge for ; Sat, 11 Nov 2006 15:04:25 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=fXFCfoSZwzlZjr34zK9vdajkvypssXjILsg5kmA2ffJbUWnPiis6ei23DZnJ5YXfzFCXmuQOhYfKd4Up4MnEdEVgoIpBQPoC7EQc//P+0vjPW1EBp/a+OKwO9mS3BMrMckLgwzn8GLodt5rF3I9Pw8TMR04cxlJIJ+1KS0FD+f4= Received: by 10.67.27.3 with SMTP id e3mr5658019ugj.1163286265518; Sat, 11 Nov 2006 15:04:25 -0800 (PST) Received: by 10.67.86.17 with HTTP; Sat, 11 Nov 2006 15:04:25 -0800 (PST) Message-ID: <42b497160611111504q3a287bf9qa439e62deac62c36@mail.gmail.com> Date: Sat, 11 Nov 2006 23:04:25 +0000 From: "Kimi Ostro" To: freebsd-pf@freebsd.org In-Reply-To: <200611112329.43326.max@love2party.net> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <42b497160611111207t2e168afdnba91607fd66371d2@mail.gmail.com> <200611112329.43326.max@love2party.net> Cc: Subject: Re: Having a couple of issues X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 11 Nov 2006 23:04:30 -0000 On 11/11/06, Max Laier wrote: > On Saturday 11 November 2006 21:07, Kimi Ostro wrote: > You get these when there is something strange going on in your tcp-stack. It > means that your tcp stack and pf disagree about something in the tcp > exchange. Unfortunately, the message you are quoting (in part) is not really > telling us, which part the disagreement was about. Can you look for messages > that have "State failure on: some number" in them? > All of those messages "State failure on:" messages are like this: Nov 10 15:40:24 ehost kernel: pf: State failure on: | which doesn't help I guess? more here: Nov 10 15:40:24 ehost kernel: pf: BAD state: TCP IiP.IiP.IiP.8:54188 XiP.XiP.XiP.199:56092 66.35.250.150:80 [lo=3278961269 high=3278967062 win=32768 modulator=2503785894 wscale=1] [lo=164575658 high=164641194 win=5792 modulator=2389911175 wscale=2] 4:2 R seq=3278961269 ack=164575658 len=0 ackskew=0 pkts=1:4 dir=out,fwd Nov 10 15:40:24 ehost kernel: pf: State failure on: | Nov 10 15:40:25 ehost kernel: pf: BAD state: TCP IiP.IiP.IiP.8:62611 XiP.XiP.XiP.199:58398 66.35.250.150:80 [lo=4085132808 high=4085138601 win=32768 modulator=3334704359 wscale=1] [lo=172073751 high=172139287 win=5792 modulator=2536699106 wscale=2] 4:2 R seq=4085132808 ack=172073751 len=0 ackskew=0 pkts=1:4 dir=out,fwd Nov 10 15:40:25 ehost kernel: pf: State failure on: | Nov 10 15:40:48 ehost kernel: pf: BAD state: TCP IiP.IiP.IiP.8:54188 XiP.XiP.XiP.199:56092 66.35.250.150:80 [lo=3278961269 high=3278967062 win=32768 modulator=2503785894 wscale=1] [lo=164575658 high=164641194 win=5792 modulator=2389911175 wscale=2] 4:2 R seq=3278961269 ack=164575658 len=0 ackskew=0 pkts=1:5 dir=out,fwd Nov 10 15:40:48 ehost kernel: pf: State failure on: | Nov 10 15:40:49 ehost kernel: pf: BAD state: TCP IiP.IiP.IiP.8:62611 XiP.XiP.XiP.199:58398 66.35.250.150:80 [lo=4085132808 high=4085138601 win=32768 modulator=3334704359 wscale=1] [lo=172073751 high=172139287 win=5792 modulator=2536699106 wscale=2] 4:2 R seq=4085132808 ack=172073751 len=0 ackskew=0 pkts=1:5 dir=out,fwd Nov 10 15:40:49 ehost kernel: pf: State failure on: | oh I forgot dmesg: Copyright (c) 1992-2006 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.1-STABLE #1: Fri Jun 16 13:03:02 BST 2006 root@ehost:/usr/obj/usr/src/sys/EHOST Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Pentium II/Pentium II Xeon/Celeron (448.05-MHz 686-class CPU) Origin = "GenuineIntel" Id = 0x652 Stepping = 2 Features=0x183f9ff real memory = 201326592 (192 MB) avail memory = 191696896 (182 MB) acpi0: on motherboard acpi: bad write to port 0x070 (8), val 0x31 acpi: bad read from port 0x071 (8) acpi: bad write to port 0x070 (8), val 0x30 acpi: bad read from port 0x071 (8) acpi: bad write to port 0x070 (8), val 0x31 acpi: bad read from port 0x071 (8) acpi: bad write to port 0x070 (8), val 0x30 acpi: bad read from port 0x071 (8) Timecounter "ACPI-safe" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0xf808-0xf80b on acpi0 cpu0: on acpi0 acpi_throttle0: on cpu0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 pcib1: at device 1.0 on pci0 pci1: on pcib1 pci1: at device 0.0 (no driver attached) vr0: port 0x2400-0x247f mem 0x42100000-0x4210007f irq 11 at device 14.0 on pci0 miibus0: on vr0 amphy0: on miibus0 amphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto vr0: Ethernet address: 00:50:ba:e5:ea:e6 fxp0: port 0x2000-0x203f mem 0x42200000-0x42200fff,0x42000000-0x420fffff irq 11 at device 15.0 on pci0 miibus1: on fxp0 inphy0: on miibus1 inphy0: 10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto fxp0: Ethernet address: 00:90:27:90:b1:31 isab0: at device 20.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x24a0-0x24af at device 20.1 on pci0 ata0: on atapci0 ata1: on atapci0 pci0: at device 20.2 (no driver attached) pci0: at device 20.3 (no driver attached) acpi_button0: on acpi0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] pmtimer0 on isa0 orm0: at iomem 0xc0000-0xc7fff,0xc8000-0xc8fff,0xe0000-0xe7fff on isa0 sc0: at flags 0x100 on isa0 sc0: VGA <12 virtual consoles, flags=0x300> vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Timecounter "TSC" frequency 448054799 Hz quality 800 Timecounters tick every 1.000 msec ad0: FAILURE - SETFEATURES SET TRANSFER MODE status=51 error=4 ad0: 405MB at ata0-master PIO3 Trying to mount root from ufs:/dev/ad0s1a WARNING: / was not properly dismounted fxp0: Microcode loaded, int_delay: 1000 usec bundle_max: 6 fxp0: Microcode loaded, int_delay: 1000 usec bundle_max: 6 pf: started altq: started -- Kimi