"Halid Faith" <[EMAIL PROTECTED]> writes: > I have a freebsd5.4 server. I sometimes get a message on the screen as below; > > kernel: ipfw: pullup failed > > What cause this problem cause ?
There weren't enough mbufs available for ipfw to properly inspect a packet. So one packet was dropped by the firewall that perhaps would not have been if an extra mbuf were available. It's not a problem in itself, but if happening extremely often, you should allocate more mbufs. > I see the below lines when I type netstat -ni > > 1# netstat -ni > Name Mtu Network Address Ipkts Ierrs Opkts Oerrs > Coll > bge0 1500 <Link#1> 00:13:d4:51:5d:e9 1618711264 0 4211116941 0 > 0 > bge0 1500 212.175.51.68 212.175.51.70 3389522 - 11038161 - > - > bge0 1500 fe80:1::213:d fe80:1::213:d4ff: 0 - 3 - > - > bge1 1500 <Link#2> 00:13:d4:51:5d:ea 307271458 0 808964464 0 > 0 > bge1 1500 192.168.12.1 192.168.12.63 2276942 - 193982504 - - > bge1 1500 fe80:2::213:d fe80:2::213:d4ff: 0 - 4 - > - > lo0 16384 <Link#3> 1465002 0 1465002 0 > 0 > lo0 16384 127 127.0.0.1 1463512 - 1463566 - > - > lo0 16384 ::1/128 ::1 0 - 0 - > - > lo0 16384 fe80:3::1/64 fe80:3::1 0 - 0 - > - > > sysctl net.inet.ip | grep queue > net.inet.ip.intr_queue_maxlen: 50 > net.inet.ip.intr_queue_drops: 19512403 > > What shall I do ? You don't have to do anything. You could turn off the "verbose" flag for ipfw, and then you wouldn't see these messages. Or you could increase the number of mbufs available in the kernel. _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "[EMAIL PROTECTED]"
