Re: CARP strangeness after 5.0 upgrade

2012-02-02 Thread Camiel Dobbelaar
On 2-2-2012 17:34, Matt Hamilton wrote: > Camiel Dobbelaar sentia.nl> writes: > >> Can you post the output of "netstat -m" and a dmesg? > > # netstat -m > 94 mbufs in use: > 88 mbufs allocated to data > 3 mbufs allocated to packet headers > 3 mbufs allocated to socket nam

Re: CARP strangeness after 5.0 upgrade

2012-02-02 Thread Matt Hamilton
Camiel Dobbelaar sentia.nl> writes: > Can you post the output of "netstat -m" and a dmesg? # netstat -m 94 mbufs in use: 88 mbufs allocated to data 3 mbufs allocated to packet headers 3 mbufs allocated to socket names and addresses 87/938/8192 mbuf 2048 byte clusters in u

Re: CARP strangeness after 5.0 upgrade

2012-02-02 Thread Camiel Dobbelaar
On 2-2-2012 16:38, Matt Hamilton wrote: > Camiel Dobbelaar sentia.nl> writes: > >> Can you show the output of: >> - ifconfig carp >> - ifconfig -g carp >> - netstat -s -p carp >> - sysctl net.inet.carp > > Ahhh... actually, I noticed mbuf memory error with one of these: > > # netstat -s -p carp

Re: CARP strangeness after 5.0 upgrade

2012-02-02 Thread Matt Hamilton
Camiel Dobbelaar sentia.nl> writes: > Can you show the output of: > - ifconfig carp > - ifconfig -g carp > - netstat -s -p carp > - sysctl net.inet.carp Ahhh... actually, I noticed mbuf memory error with one of these: # netstat -s -p carp carp: 3112793 packets received (IPv4) 0

Re: CARP strangeness after 5.0 upgrade

2012-01-26 Thread Markus Wernig
On 01/25/12 18:23, Matt Hamilton wrote: > > pass in quick on $ext_if proto carp from $fw_ext_ips to 224.0.0.18 > queue carp_out > pass in quick on $int_if proto carp from $fw_int_ips to 224.0.0.18 > queue carp_in > pass out quick on $ext_if proto carp from $fw_ext_ips to 224.0.0.18 > queue carp_ou

Re: CARP strangeness after 5.0 upgrade

2012-01-25 Thread Camiel Dobbelaar
On 25-1-2012 18:23, Matt Hamilton wrote: > I'm also getting strange weirdnesses with carp on 5.0. I too upgraded > from quite an old 4.x version (4.6 IIRC). > > The main thing I'm seeing is my master and backup switching back and > forth quite a few times. This is a pair of firewalls with carp > r

Re: CARP strangeness after 5.0 upgrade

2012-01-25 Thread Matt Hamilton
I'm also getting strange weirdnesses with carp on 5.0. I too upgraded from quite an old 4.x version (4.6 IIRC). The main thing I'm seeing is my master and backup switching back and forth quite a few times. This is a pair of firewalls with carp running on both the inside and outside firewall interf

Re: CARP strangeness after 5.0 upgrade

2012-01-11 Thread Markus Wernig
On 01/12/12 00:05, Markus Wernig wrote: > If I set net.inet.carp.log=7, I get lots of the following on both fws, > only for carp1 and carp2, never for carp0 and carp3: > carp2: ip_output failed: 65 > carp1: ip_output failed: 65 > carp2: ip_output failed: 65 > carp1: ip_output failed: 65 > carp2: i

CARP strangeness after 5.0 upgrade

2012-01-11 Thread Markus Wernig
Hello all I have recently upgraded a pair of CARPed firewalls from 4.6 to 5.0 (late, I know ...) after almost 2 years of absolutely flawless operation (ipv4 interfaces only). I have changed all the nat/rdr rules in pf.conf to the new syntax, not changed any other fw/nw setting (at least to my kno