addendum: 4.7 causes different problem Re: spurious "need to frag" messages

2010-03-17 Thread Toni Mueller
Hi,

On Mon, 15.03.2010 at 19:10:12 +0100, Toni Mueller  
wrote:
> # pfctl -s a |grep mss
> # ifconfig|grep mtu|grep -v 1500
> lo0: flags=8049 mtu 33152
> enc0: flags=41 mtu 1536
> pflog0: flags=141 mtu 33152
> #
> 
> And that's it...

> Sample message from tcpdump:
> 
> 19:03:59.805030 1.2.3.4 > 5.6.7.8: icmp: 1.2.3.20 unreachable - need to frag 
> (mtu 1420) for 5.6.7.8.80 > 1.2.3.20.59495: 2079874237 [|tcp] (DF) (ttl 243, 
> id 22121, len 1500) (ttl 255, id 23060, len 56)


I've rebooted the machine, and the problem went away. I don't know for
how long, though.


-- 
Kind regards,
--Toni++



Re: addendum: 4.7 causes different problem Re: spurious "need to frag" messages

2010-05-03 Thread Toni Mueller
Hi,

On Wed, 17.03.2010 at 17:48:21 +0100, Toni Mueller  
wrote:
> On Mon, 15.03.2010 at 19:10:12 +0100, Toni Mueller  
> wrote:
> > # pfctl -s a |grep mss
> > # ifconfig|grep mtu|grep -v 1500
> > lo0: flags=8049 mtu 33152
> > enc0: flags=41 mtu 1536
> > pflog0: flags=141 mtu 33152
> > #
> > 
> > And that's it...
> 
> > Sample message from tcpdump:
> > 
> > 19:03:59.805030 1.2.3.4 > 5.6.7.8: icmp: 1.2.3.20 unreachable - need to 
> > frag (mtu 1420) for 5.6.7.8.80 > 1.2.3.20.59495: 2079874237 [|tcp] (DF) 
> > (ttl 243, id 22121, len 1500) (ttl 255, id 23060, len 56)
> 
> 
> I've rebooted the machine, and the problem went away. I don't know for
> how long, though.

after doing this now for some time, I go out on a limb and say that
this is a memory management problem somewhere in the realm of 'pf', as
the problem apparently correllates to the amount of traffic pushed.

If someone is willing to help me debug this, please contact me
off-list. Thank you!


-- 
Kind regards,
--Toni++