Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-06-07 Thread Ralph
Erich Titl schrieb: > I guess your routing is at best problematic. I don't think receiving > packets twice is the normal mode of operation. I would start digging for > the reason of the packet duplication. Yes of course. This problem we will fix at first. We have a ticket and our carrier are still

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-06-07 Thread Erich Titl
Ralph wrote: > We have here a similar problem. A Linux box with Kernel 2.4.34 and > Openswan 2.4.6 have a redundantly internet connection. From some net's > we get all packets two times. That is not the normal condition but if > we transmit data through a tunnel to this net's we loses memory. The

[leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-06-07 Thread Ralph
We have here a similar problem. A Linux box with Kernel 2.4.34 and Openswan 2.4.6 have a redundantly internet connection. From some net's we get all packets two times. That is not the normal condition but if we transmit data through a tunnel to this net's we loses memory. The skbuff_head_cache in /

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-11 Thread Erich Titl
David David HUSSER wrote: > Just for curiosity, which monitoring software you use for that ? MRTG with a little sript on the firewall side. Erich - This SF.net email is sponsored by DB2 Express Download DB2 Express C - th

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-10 Thread David HUSSER
Just for curiosity, which monitoring software you use for that ? David On 5/10/07, Erich Titl <[EMAIL PROTECTED]> wrote: > > Brad Langhorst schrieb: > > > > > > I don't think this is the same problem. > > I don't actually see increase in memory usage in userspace (pluto). > > I think it must be a

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-10 Thread Erich Titl
Brad Langhorst schrieb: > > > I don't think this is the same problem. > I don't actually see increase in memory usage in userspace (pluto). > I think it must be a kernel leak in KLIPS. > Possible, but noone else has reported on that one yet. I installed memory monitoring software on my firewall

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-10 Thread Brad Langhorst
On Thu, 2007-05-10 at 14:43 +, Erich Titl wrote: > > bummer... I've done some searching of openswan's mailing list and bug > > tracker but I did not find any reference to a KLIPS memory leak. > > What did you find? > > > > I'm going to start a thread on openswan-users to see if they know > >

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-10 Thread Erich Titl
Brad Brad Langhorst wrote: > On Thu, 2007-05-10 at 06:06 +, Erich Titl wrote: > >> I was scouting the net a bit last night. Apparently a leak appeared in >> OpenSwan 2.4.5 some time ago and still persists up to 2.4.7 and kernel >> 2.4.34 :-( >> > bummer... I've done some searching of openswa

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-10 Thread Erich Titl
Brad Langhorst wrote: > On Thu, 2007-05-10 at 06:06 +, Erich Titl wrote: > >> I was scouting the net a bit last night. Apparently a leak appeared in >> OpenSwan 2.4.5 some time ago and still persists up to 2.4.7 and kernel >> 2.4.34 :-( >> > bummer... I've done some searching of openswan's

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-10 Thread Brad Langhorst
On Thu, 2007-05-10 at 06:06 +, Erich Titl wrote: > I was scouting the net a bit last night. Apparently a leak appeared in > OpenSwan 2.4.5 some time ago and still persists up to 2.4.7 and kernel > 2.4.34 :-( > bummer... I've done some searching of openswan's mailing list and bug tracker but

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-09 Thread Erich Titl
Hi Brad Brad Langhorst wrote: > > it is certainly related the the traffic... more with more traffic. > if you have a look at those graphs you can see the free memory decreases > in steps where there is a lot of traffic over ipsec0. > > i thought I mentioned the release... sorry > LEAF Beri

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-09 Thread Brad Langhorst
On Wed, 2007-05-09 at 14:05 +, Erich Titl wrote: > > Brad Langhorst wrote: > > I have a bering ulibc firewall running shorwall and ipsec. > > > > It's badly leaking memory. > > see: > > https://development.coopmetrics.coop/munin/mcgruff/mcgruff.html > > > > you can see that it leaks pretty h

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-09 Thread Erich Titl
More info Brad Langhorst wrote: ... > > Any ideas? > Anybody seen this problem before? it appears to leak at word boundaries, 4 bytes at a time, pretty regularly, possibly with each encapsulated packet. Erich - This SF.n

Re: [leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-09 Thread Erich Titl
Brad Langhorst wrote: > I have a bering ulibc firewall running shorwall and ipsec. > > It's badly leaking memory. > see: > https://development.coopmetrics.coop/munin/mcgruff/mcgruff.html > > you can see that it leaks pretty hard during the nightly backups. > > i have to reboot every few days o

[leaf-user] bering ulibc firewall leaking memory... ipsec?

2007-05-08 Thread Brad Langhorst
I have a bering ulibc firewall running shorwall and ipsec. It's badly leaking memory. see: https://development.coopmetrics.coop/munin/mcgruff/mcgruff.html you can see that it leaks pretty hard during the nightly backups. i have to reboot every few days or the machine runs out of ram and becomes