Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Adrian Chadd
On 12 June 2015 at 10:57, Christopher Forgeron wrote: > I agree it shouldn't run out of memory. Here's what mine does under network > load, or rsync load: > > 2 0 9 1822M 1834M 0 0 0 014 8 0 0 22750 724 136119 > 0 23 77 > > 0 0 9 1822M 1823M 0 0 0 0 0 8

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Christopher Forgeron
I agree it shouldn't run out of memory. Here's what mine does under network load, or rsync load: 2 0 9 1822M 1834M 0 0 0 014 8 0 0 22750 724 136119 0 23 77 0 0 9 1822M 1823M 0 0 0 0 0 8 0 0 44317 347 138151 0 16 84 0 0 9 1822M 1761M 0 0

Re: RFC: Dropping support for scrub fragment crop/drop-ovl

2015-06-12 Thread Ermal Luçi
On Fri, Jun 12, 2015 at 11:43 AM, Kristof Provost wrote: > Hi all, > > I've recently been looking at bug 200330. I broke things while adding > the reassembly support for ipv6 to pf. > > Those issues should be fixed now, but having looked at the fragment > crop/drop-ovl code, I'm starting to think

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Adrian Chadd
Hi, It shouldn't "run out of memory" like this in a way that pisses off em, not unless it's leaking memory and it can't allocate mbufs. netstat -m wil list mbuf allocations and what's failed. vmstat -z will list all the memory pools and which allocations have failed. Both would be good to post.

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Cs
I'll take your advice and give it a shot, thanks :) 2015.06.12. 14:43 keltezéssel, Christopher Forgeron írta: Ah, but the 'why' will come later, after we know for sure what the 'what' is in your problem. I'm just pointing out the problems that I'm having, as yours sound similar. Once the box

Re: Realtek Issues (re) on PC Engines APU1 Board...

2015-06-12 Thread Jim Thompson
Do we even know that Karl’s APU(s) aren’t running the current version of firmware (which was released last September)? jim > On Jun 12, 2015, at 11:53 AM, Adrian Chadd wrote: > > Hi, > > If this works for people then we should document this somewhere and > include the firmware/tool. > > Doe

Re: Realtek Issues (re) on PC Engines APU1 Board...

2015-06-12 Thread Adrian Chadd
Hi, If this works for people then we should document this somewhere and include the firmware/tool. Does flashrom come with the above firmware rom image? -a On 12 June 2015 at 03:02, Julian Kornberger wrote: > Hi Karl, > > did you already upgrade your Firmware? > > You get it from: > http://

RFC: Dropping support for scrub fragment crop/drop-ovl

2015-06-12 Thread Kristof Provost
Hi all, I've recently been looking at bug 200330. I broke things while adding the reassembly support for ipv6 to pf. Those issues should be fixed now, but having looked at the fragment crop/drop-ovl code, I'm starting to think support for those options should just be removed. For context: in Fre

Re: Freebsd's contact info

2015-06-12 Thread André Lopes via Brewster
André Lopes André asked us to reach out and confirm they have your latest info Here's what they have for you now: [email.png] [1]freebsd-net@freebsd.org [phone-red.png] [2]Mobile Number [3]Confirm/Update f

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Christopher Forgeron
Ah, but the 'why' will come later, after we know for sure what the 'what' is in your problem. I'm just pointing out the problems that I'm having, as yours sound similar. Once the box runs out of memory, all sorts of interesting things can happen. Perhaps that's not your case, but it's quite possib

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Cs
but why is that machine runs fine except the network if it's memory related? swap didn't increased before the network outage. 2015.06.12. 14:37 keltezéssel, Christopher Forgeron írta: rsycn burns memory - I'd say you have a good chance you're running out of mem before it's replenished. For vm

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Christopher Forgeron
rsycn burns memory - I'd say you have a good chance you're running out of mem before it's replenished. For vmstat 5 - Don't run it on console. Connect via a second box with ssh, and run it there - That way it's the last thing on the ssh terminal screen when the box dies, and you'll have your proof

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Cs
machine has been restarted before I could check the "vmstat 5" output. Yep, it's rsync. Anyway I disabled the backup transfer it'll solve, but I can't really accept this for solution. 2015.06.12. 14:29 keltezéssel, Christopher Forgeron írta: Well, even at low speed it could drop due to memory

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Christopher Forgeron
Well, even at low speed it could drop due to memory from what I've seen. What was the last line from vmstat 5 before it locked up? I find that the em driver isn't crap, but there is a deeper problem inside of FreeBSD that is being exposed now - For me it's due to faster network connections. Ar

Re: question on NAT + IPFW

2015-06-12 Thread Ian Smith
On Fri, 12 Jun 2015 10:24:05 +0200, Guido Falsi wrote: > On 06/12/15 10:07, Ian Smith wrote: > > On Fri, 12 Jun 2015 08:59:40 +0200, Guido Falsi wrote: > > > > > > looks correct, assuming xl0 is your internal interface (better put it > > in > > > > a variable and use the variable in your

Re: Realtek Issues (re) on PC Engines APU1 Board...

2015-06-12 Thread Julian Kornberger
Hi Karl, did you already upgrade your Firmware? You get it from: http://www.pcengines.ch/apu1d4.htm (Build 9/8/2014) You install it with: flashrom --programmer internal -w apu140908.rom \ -c "MX25L1605A/MX25L1606E" That solved our realtek issues. Kind regards Julian __

Re: FreeBSD 10.1-REL - network unaccessible after high traffic

2015-06-12 Thread Cs
it seems it's not memory related. Server just died a few minutes ago during transporting the backup (400GB) around 800Mbps speed.. will disable remote backup, it's a shame that em driver is such a crap. 2015.06.08. 5:01 keltezéssel, Christopher Forgeron írta: You know what helped me: 'vmstat 5

Re: Realtek Issues (re) on PC Engines APU1 Board...

2015-06-12 Thread Julian Kornberger
Hi Karl, did you already upgrade your Firmware? You get it from: http://www.pcengines.ch/apu1d4.htm (Build 9/8/2014) You install it with: flashrom --programmer internal -w apu140908.rom \ -c "MX25L1605A/MX25L1606E" That solved our realtek issues. Kind regards Julian __

Re: question on NAT + IPFW

2015-06-12 Thread Guido Falsi
On 06/12/15 10:07, Ian Smith wrote: > On Fri, 12 Jun 2015 08:59:40 +0200, Guido Falsi wrote: > > > > looks correct, assuming xl0 is your internal interface (better put it in > > > a variable and use the variable in your rules imho) > > > > Forgot one thing, working around this block is as eas

Re: question on NAT + IPFW

2015-06-12 Thread Ian Smith
On Fri, 12 Jun 2015 08:59:40 +0200, Guido Falsi wrote: > > looks correct, assuming xl0 is your internal interface (better put it in > > a variable and use the variable in your rules imho) > > Forgot one thing, working around this block is as easy as changing the > machine IP, teenager can le

Re: question on NAT + IPFW

2015-06-12 Thread Ian Smith
On Thu, 11 Jun 2015 19:49:06 -0700, John Reynolds wrote: > Hello all, I've read in sections 30.4.4 and 30.4.3 of the handbook about > using IPFW and I've got some clarification questions. > > 1) When you're using any sort of firewall rules outside the > open/client/simple/closed, etc. pre-ca

Re: question on NAT + IPFW

2015-06-12 Thread Guido Falsi
On 06/12/15 08:49, Guido Falsi wrote: > On 06/12/15 04:49, John Reynolds wrote: >> >> I have a situation where I need to just simply "block all traffic" from >> some teenagers' mobile devices after a certain period of the day (don't >> ask teenagers..). So, would that rule look like this: