Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Sep 2004 03:56:24 -0000
From:      Pyun YongHyeon <yongari@kt-is.co.kr>
To:        pf4freebsd@freelists.org
Subject:   [pf4freebsd] Re: nfsd send error 1 probably caused by pf ?
Message-ID:  <20031114092424.GA32359@kt-is.co.kr>
In-Reply-To: <3FB3EBBA.5070405@kasimir.com>
References:  <3FB2ACA6.7030302@kasimir.com> <20031112220709.GO17343@insomnia.benzedrine.cx> <3FB2B203.1030704@kasimir.com> <3FB2B5AB.50601@kasimir.com> <20031113163911.GR17343@insomnia.benzedrine.cx> <3FB3EBBA.5070405@kasimir.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Nov 13, 2003 at 09:38:18PM +0100, Florian C. Smeets wrote:
 > Daniel Hartmeier wrote:
 > > On Wed, Nov 12, 2003 at 11:35:23PM +0100, Florian C. Smeets wrote:
 > >=20
 > >=20
 > >>I get a lot of these BAD state messages with debug leve misc:
 > >>
 > >>Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049=20
 > >>172.30.1.1:2049 172.30.1.2:1021 [lo=3D2879006265 high=3D2879023465=20
 > >>win=3D16588 modulator=3D0] [lo=3D1139973024 high=3D1139974122 win=3D=
17200=20
 > >>modulator=3D0] 4:4 A
 > >>  seq=3D1139974472 ack=3D2879006265 len=3D1448 ackskew=3D0 pkts=3D40=
6886:392362=20
 > >>dir=3Din,rev
 > >=20
 > >=20
 > > To prove this theory, you'd need a tcpdump -nvvvS of the entire
 > > connection (or at least a couple of packets before the first BAD sta=
te
 > > message). The connection doesn't use window scaling, so either the p=
eer
 > > is at fault or pf saw a packet reducing your window size which got l=
ost
 > > before the peer saw it. How regularly does this occur?
 > >=20
 >=20
 > I'm going to test this in the weekend. I don't have much time at the m=
oment.
 >=20
 > If i get the time i'm going to try to reproduce this at work tomorrow.
 >=20
 > Thanks alot for your help,
 > flo
 >=20
It seems that your problem is reproducable on my SMP machine.
I used a single rule 'pass out on xl0 keep state'.
However, I can't see 'nfsd send error' message. nfs client
works well even though pf still outputs 'BAD state' message.

Does your xl interface has a facility of H/W checksum offload?
(check with `ifconfig xl0`)

--=20
Pyun YongHyeon <http://www.kr.freebsd.org/~yongari>;




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031114092424.GA32359>