[Bug 171711] [dummynet] [panic] Kernel panic in dummynet

2015-04-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=171711

Andrey V. Elsukov a...@freebsd.org changed:

   What|Removed |Added

 CC||a...@freebsd.org

--- Comment #7 from Andrey V. Elsukov a...@freebsd.org ---
(In reply to dblais from comment #2)
 #6  0x80cdbd13 in calltrap ()
 at /usr/src/sys/amd64/amd64/exception.S:232
 #7  0x8090adb0 in _rw_rlock (rw=0xfe013aade5a8, file=0x0, 
 line=485069968) at /usr/src/sys/kern/kern_rwlock.c:382
 #8  0x809c5959 in bpf_mtap2 (bp=0xfe013aade580, 
 data=0xff88826429bc, dlen=4, m=0xfe0300f46700)
 at /usr/src/sys/net/bpf.c:2197
 #9  0x8188e11a in ng_iface_bpftap (ifp=value optimized out, m=0x0, 
 family=144 '\220')
 at /usr/src/sys/modules/netgraph/iface/../../../netgraph/ng_iface.c:444
 #10 0x8188eb11 in ng_iface_output (ifp=0xfe014566a000, 
 m=0xfe0300f46700, dst=0xff8882642aac, ro=value optimized out)
 at /usr/src/sys/modules/netgraph/iface/../../../netgraph/ng_iface.c:394

This panic looks different. Probably an interface has gone away and BPF's
interface departure handler already destroyed bif_lock.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


[Bug 171711] [dummynet] [panic] Kernel panic in dummynet

2015-04-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=171711

--- Comment #6 from eu...@grosbein.net ---
(In reply to Hiren Panchasara from comment #4)

This PR is probably duplicate of my later PR *195102* that contains more
details.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


[Bug 171711] [dummynet] [panic] Kernel panic in dummynet

2015-04-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=171711

--- Comment #5 from eu...@grosbein.net ---
(In reply to Hiren Panchasara from comment #4)

This PR is probably duplicate of my later PR 149513 that contains more details.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: tap(4): will it be more reasonable if it preserved UP/DOWN state, when closed?

2015-04-01 Thread Miroslav Lachman

Yuri wrote on 04/01/2015 01:39:

Currently tap(4) device gets to 'down' state when the last process
closes it, regardless of the original 'up/down' state.
Will it be reasonable to modify this behavior and keep this bit
'was_up_before_open', and leave it 'up' if it was 'up' when it was first
opened?

Practically speaking, I set it up in rc.conf to be 'up' with the
particular IP, but it goes to 'down' state  when VirtualBox closes it.

If tap(4) can be 'up' without users, there shouldn't be any problem in
leaving it 'up' after use as well?


Doesn't sysctl net.link.tap.up_on_open=1 fix your problem?

Miroslav Lachman

___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Urgent matter: LACP trunk stops distributing

2015-04-01 Thread Mark Schouten
Hi,

I've got an urgent matter on my hands, my FreeBSD iScsibox has dropped it's 
LACP trunk twice in the last 24 hours, which causes a whole lot of issues on my 
VPS cluster, using that storage. 

It's a FreeBSD box with two igb-interfaces in an LACP trunk with jumboframes 
and vlans. If the connection drops, the only thing I see is:

Apr  1 10:37:18 zstore02 kernel: igb0: Interface stopped DISTRIBUTING, possible 
flapping
Apr  1 10:37:28 zstore02 kernel: igb1: Interface stopped DISTRIBUTING, possible 
flapping

The switch has nothing to say, so it doesn't seem that there are acual 
linkflaps. I have a feeling that it's this LACP trunk that goes haywire 
somewhere on the FreeBSD side. If anyone can help me with this, I'd be 
grateful. If someone (preferably EU-based) wants to help out professionally as 
a consultant, that would be fine too. Or if anyone knows someone in .nl that 
offers this level of expertise on consultingbase, let me know.

I'm running 10.1-RELEASE on the box, see the (AFAICS) relevant config below. 
The switch is a Brocade ICX6430.

[root@zstore02 ~]# ifconfig lagg0
lagg0: flags=8843UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST metric 0 mtu 9000
    
options=4019bRXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,VLAN_HWTSO
    ether 0c:c4:7a:12:13:dc
    nd6 options=29PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL
    media: Ethernet autoselect
    status: active
    laggproto lacp lagghash l2,l3,l4
    laggport: em1 flags=0
    laggport: em0 flags=0
    laggport: igb1 flags=1cACTIVE,COLLECTING,DISTRIBUTING
    laggport: igb0 flags=1cACTIVE,COLLECTING,DISTRIBUTING

[root@zstore02 ~]# sysctl -a | grep lacp
net.link.lagg.lacp.debug: 0
net.link.lagg.0.lacp.lacp_strict_mode: 1
net.link.lagg.0.lacp.debug.rx_test: 0
net.link.lagg.0.lacp.debug.tx_test: 0



Met vriendelijke groeten,

-- 
Kerio Operator in de Cloud? https://www.kerioindecloud.nl/
Mark Schouten  | Tuxis Internet Engineering
KvK: 61527076 | http://www.tuxis.nl/
T: 0318 200208 | i...@tuxis.nl

smime.p7s
Description: Electronic Signature S/MIME


ng_netgraph and BGP

2015-04-01 Thread William Waites
I run a small network composed of even smaller networks each
encapsulated in an autonomous system. I'd like to do traffic
accounting using netflow aggregated by ASN. My border routers run
FreeBSD and BIRD.

Right now, and this is mentioned in ng_netflow(4), we do not fill in
the source and destination ASN because there is no information to get
this from the routing daemon's RIB. Probably if we come up with such a
way it should be generic so it could be used by Quagga, BIRD or
OpenBGPD.

I've done a little bit of thinking about how this could be done, and
come up with two main strategies:

  1. A new kind of netgraph node inserted before ng_netflow knows how
 to query the routing daemon and decorates the packet with the
 result, which ng_netflow then puts into the flow packet if
 present. This entails either a copy (tee) or putting the lookup
 in the data path which may be suboptimal.

  2. A new hook added to the ng_netflow node that allows it to query
 the routing daemon through a different new kind of netgraph
 node. This is probably better but may be slightly more
 complicated to implement.

Is anyone working on this or has given this though? I wasn't able to
find much by searching the list archives. It may be that I will soon
have some students that I can set on this task but would not like to
unnecessarily duplicate effort.

Cheers,
-w

--
William Waites wwai...@tardis.ed.ac.uk  |  School of Informatics
   http://tardis.ed.ac.uk/~wwaites/   | University of Edinburgh
   http://www.hubs.net.uk/|  HUBS AS60241

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.


pgp1LQF1oC6ij.pgp
Description: PGP signature


Re: ng_netgraph and BGP

2015-04-01 Thread Julian Elischer

On 4/1/15 6:50 PM, William Waites wrote:

I run a small network composed of even smaller networks each
encapsulated in an autonomous system. I'd like to do traffic
accounting using netflow aggregated by ASN. My border routers run
FreeBSD and BIRD.

Right now, and this is mentioned in ng_netflow(4), we do not fill in
the source and destination ASN because there is no information to get
this from the routing daemon's RIB. Probably if we come up with such a
way it should be generic so it could be used by Quagga, BIRD or
OpenBGPD.

I've done a little bit of thinking about how this could be done, and
come up with two main strategies:

   1. A new kind of netgraph node inserted before ng_netflow knows how
  to query the routing daemon and decorates the packet with the
  result, which ng_netflow then puts into the flow packet if
  present. This entails either a copy (tee) or putting the lookup
  in the data path which may be suboptimal.

   2. A new hook added to the ng_netflow node that allows it to query
  the routing daemon through a different new kind of netgraph
  node. This is probably better but may be slightly more
  complicated to implement.

Is anyone working on this or has given this though? I wasn't able to
find much by searching the list archives. It may be that I will soon
have some students that I can set on this task but would not like to
unnecessarily duplicate effort.


there is no reason the netflow node could not be modified to make 
external requests.. it could certainly spawn off a worker thread that 
could do those sorts of things.


Cheers,
-w

--
William Waites wwai...@tardis.ed.ac.uk  |  School of Informatics
http://tardis.ed.ac.uk/~wwaites/   | University of Edinburgh
http://www.hubs.net.uk/|  HUBS AS60241

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


[Bug 185967] [lagg] [patch] Link Aggregation LAGG: LACP not working in 10.0

2015-04-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=185967

--- Comment #18 from Jeroen van Heugten vanheug...@gmail.com ---
In our case the problem was due to a bug in TSO (tcp segment offloading). This
has been resolved in 10.1. You can easily exclude issues TSO by turning it
temporary off for your interfaces (ifconfig ix# -tso).

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: ng_netgraph and BGP

2015-04-01 Thread Paul S.
Additionally, pmacct doesn't seem to really work in FreeBSD -- as far as 
the latest versions go.


Their use of 'return' (with no args) on functions that are meant to 
return an int flat out makes it unable to compile on FreeBSD.


If you fix those by hand, it compiles, but just seems to segfault -- I 
didn't get the time to look into it further with GDB.


There's another option that claims to be able to do the same thing 
(introduce BGP accounting data to normal flows - ntop's nprobe 
(www.ntop.org/products/nprobe/), but it's not free. I don't know if it 
works in FreeBSD well either.)


As to the ng_netflow hook, +1, excellent idea.

On 4/2/2015 午前 03:08, Nikolay Denev wrote:

On Wed, Apr 1, 2015 at 12:50 PM, William Waites wwai...@tardis.ed.ac.uk
wrote:


I run a small network composed of even smaller networks each
encapsulated in an autonomous system. I'd like to do traffic
accounting using netflow aggregated by ASN. My border routers run
FreeBSD and BIRD.

Right now, and this is mentioned in ng_netflow(4), we do not fill in
the source and destination ASN because there is no information to get
this from the routing daemon's RIB. Probably if we come up with such a
way it should be generic so it could be used by Quagga, BIRD or
OpenBGPD.

I've done a little bit of thinking about how this could be done, and
come up with two main strategies:

   1. A new kind of netgraph node inserted before ng_netflow knows how
  to query the routing daemon and decorates the packet with the
  result, which ng_netflow then puts into the flow packet if
  present. This entails either a copy (tee) or putting the lookup
  in the data path which may be suboptimal.

   2. A new hook added to the ng_netflow node that allows it to query
  the routing daemon through a different new kind of netgraph
  node. This is probably better but may be slightly more
  complicated to implement.

Is anyone working on this or has given this though? I wasn't able to
find much by searching the list archives. It may be that I will soon
have some students that I can set on this task but would not like to
unnecessarily duplicate effort.

Cheers,
-w

--
William Waites wwai...@tardis.ed.ac.uk  |  School of Informatics
http://tardis.ed.ac.uk/~wwaites/   | University of Edinburgh
http://www.hubs.net.uk/|  HUBS AS60241

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.



Hi,

It's not ng_netflow, but if you need this today you can take a look at
http://www.pmacct.net ? (there is a package/port too).
It comes with BGP daemon (stripped down quagga) and can export this data.

--Nikolay
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org

Re: ng_netgraph and BGP

2015-04-01 Thread Nikolay Denev
On Wed, Apr 1, 2015 at 12:50 PM, William Waites wwai...@tardis.ed.ac.uk
wrote:

 I run a small network composed of even smaller networks each
 encapsulated in an autonomous system. I'd like to do traffic
 accounting using netflow aggregated by ASN. My border routers run
 FreeBSD and BIRD.

 Right now, and this is mentioned in ng_netflow(4), we do not fill in
 the source and destination ASN because there is no information to get
 this from the routing daemon's RIB. Probably if we come up with such a
 way it should be generic so it could be used by Quagga, BIRD or
 OpenBGPD.

 I've done a little bit of thinking about how this could be done, and
 come up with two main strategies:

   1. A new kind of netgraph node inserted before ng_netflow knows how
  to query the routing daemon and decorates the packet with the
  result, which ng_netflow then puts into the flow packet if
  present. This entails either a copy (tee) or putting the lookup
  in the data path which may be suboptimal.

   2. A new hook added to the ng_netflow node that allows it to query
  the routing daemon through a different new kind of netgraph
  node. This is probably better but may be slightly more
  complicated to implement.

 Is anyone working on this or has given this though? I wasn't able to
 find much by searching the list archives. It may be that I will soon
 have some students that I can set on this task but would not like to
 unnecessarily duplicate effort.

 Cheers,
 -w

 --
 William Waites wwai...@tardis.ed.ac.uk  |  School of Informatics
http://tardis.ed.ac.uk/~wwaites/   | University of Edinburgh
http://www.hubs.net.uk/|  HUBS AS60241

 The University of Edinburgh is a charitable body, registered in
 Scotland, with registration number SC005336.



Hi,

It's not ng_netflow, but if you need this today you can take a look at
http://www.pmacct.net ? (there is a package/port too).
It comes with BGP daemon (stripped down quagga) and can export this data.

--Nikolay
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


New BR 199096 about mpd / ipfw causing kernel panics

2015-04-01 Thread Dominic Blais
Hi,

I posted into BR 171711 but as Andrey V. Elsukov pointed out, my issue is a bit 
different so I opened a new one (BR 199096).


--
[cid:image001.gif@01D06C87.8255CBF0]




___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


[Bug 171711] [dummynet] [panic] Kernel panic in dummynet

2015-04-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=171711

--- Comment #8 from dbl...@interplex.ca ---
I just opened a new bug:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=199096 since my error is
similar but different.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: pagefault in IPv6 codepath in defrouter_select()

2015-04-01 Thread hiren panchasara
On 03/26/15 at 12:08P, hiren panchasara wrote:
 My mailclient is doing something funny. Sorry for that. Trying again to
 reply to this tread actually.
 
 On 03/26/15 at 09:55P, Andrey V. Elsukov wrote:
  On 26.03.2015 00:48, hiren panchasara wrote:
   This is 3rd occurence of this panic. What could be the cause?
   I have vmcore and can provide more info if needed.
  
  Hi,
  
  the problem is that ND6 code maintains at least two lists of prefixes
  without any locking: V_nd_defrouter and V_nd_prefix.
 
 I am not too familiar with the code here but is following relevant here?
 https://lists.freebsd.org/pipermail/freebsd-net/2013-February/034695.html
 
 Also ccing markj@

Andrey,

Did you get a chance to look at this or have any comments?

Thanks in advance,
Hiren


pgpEcBi4V0hq4.pgp
Description: PGP signature


Re: ng_netflow and BGP

2015-04-01 Thread William Waites
(Fixing the subject header. Oops)

On Wed, 1 Apr 2015 20:08:54 +0200, Nikolay Denev nik...@cytexbg.com said:

 It's not ng_netflow, but if you need this today you can take a
 look at http://www.pmacct.net ? (there is a package/port too).
 It comes with BGP daemon (stripped down quagga) and can export
 this data.

Hi Nikolay. Thanks, we are actually doing exactly that, so there's no
immediate pressure. It's just not the most elegant solution for
various reasons.

-w
--
William Waites wwai...@tardis.ed.ac.uk  |  School of Informatics
   http://tardis.ed.ac.uk/~wwaites/   | University of Edinburgh
   http://www.hubs.net.uk/|  HUBS AS60241

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.


pgpEHGKxfGfFs.pgp
Description: PGP signature


[Bug 197076] Only One Port Of Dual Port EC2000S (RTL8111E, r8169) Detected

2015-04-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197076

--- Comment #3 from commit-h...@freebsd.org ---
A commit references this bug:

Author: jhb
Date: Wed Apr  1 21:48:59 UTC 2015
New revision: 280970
URL: https://svnweb.freebsd.org/changeset/base/280970

Log:
  MFC 261790:
  Add support for managing PCI bus numbers.  As with BARs and PCI-PCI bridge
  I/O windows, the default is to preserve the firmware-assigned resources.
  PCI bus numbers are only managed if NEW_PCIB is enabled and the architecture
  defines a PCI_RES_BUS resource type.
  - Add a helper API to create top-level PCI bus resource managers for each
PCI domain/segment.  Host-PCI bridge drivers use this API to allocate
bus numbers from their associated domain.
  - Change the PCI bus and CardBus drivers to allocate a bus resource for
their bus number from the parent PCI bridge device.
  - Change the PCI-PCI and PCI-CardBus bridge drivers to allocate the
full range of bus numbers from secbus to subbus from their parent bridge.
The drivers also always program their primary bus register.  The bridge
drivers also support growing their bus range by extending the bus resource
and updating subbus to match the larger range.
  - Add support for managing PCI bus resources to the Host-PCI bridge drivers
used for amd64 and i386 (acpi_pcib, mptable_pcib, legacy_pcib, and
qpi_pcib).
  - Define a PCI_RES_BUS resource type for amd64 and i386.

  PR:197076

Changes:
_U  stable/10/
  stable/10/sys/amd64/include/resource.h
  stable/10/sys/dev/acpica/acpi_pcib_acpi.c
  stable/10/sys/dev/acpica/acpi_pcib_pci.c
  stable/10/sys/dev/cardbus/cardbus.c
  stable/10/sys/dev/cardbus/cardbusvar.h
  stable/10/sys/dev/pccbb/pccbb.c
  stable/10/sys/dev/pccbb/pccbb_isa.c
  stable/10/sys/dev/pccbb/pccbb_pci.c
  stable/10/sys/dev/pccbb/pccbbvar.h
  stable/10/sys/dev/pci/pci.c
  stable/10/sys/dev/pci/pci_pci.c
  stable/10/sys/dev/pci/pci_private.h
  stable/10/sys/dev/pci/pci_subr.c
  stable/10/sys/dev/pci/pcib_private.h
  stable/10/sys/i386/include/resource.h
  stable/10/sys/sparc64/pci/apb.c
  stable/10/sys/x86/include/legacyvar.h
  stable/10/sys/x86/pci/pci_bus.c
  stable/10/sys/x86/pci/qpi.c
  stable/10/sys/x86/x86/mptable_pci.c

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


[Bug 197076] Only One Port Of Dual Port EC2000S (RTL8111E, r8169) Detected

2015-04-01 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=197076

John Baldwin j...@freebsd.org changed:

   What|Removed |Added

 Resolution|--- |FIXED
 Status|New |Closed

--- Comment #4 from John Baldwin j...@freebsd.org ---
I have merged the change that I believe should fix this back to stable/10.  I
do not plan on merging this to 9.x, and I do not plan on trying to get this
into 10.1 as an EN.  It should be present in 10.2 when that is released. 
Please reopen if this fix does not work for you when you test it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org


Re: tap(4): will it be more reasonable if it preserved UP/DOWN state, when closed?

2015-04-01 Thread Yuri

On 04/01/2015 03:13, Miroslav Lachman wrote:


Doesn't sysctl net.link.tap.up_on_open=1 fix your problem? 


net.link.tap.up_on_open only works on open.

I am going to create the corresponding net.link.tap.down_on_close.
It will have 3 values:
0: up/down state will not change on close
1: (default) state will be preserved as it was before close - makes 
sense for most users I believe

2: state will change to down (like tap works now)

Yuri
___
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to freebsd-net-unsubscr...@freebsd.org