Bug 167793

Summary: [arp] mbuf leak if arp address is multicast
Product: Base System Reporter: Andrey Smagin <samspeed>
Component: kernAssignee: Andrey V. Elsukov <ae>
Status: Closed FIXED    
Severity: Affects Only Me    
Priority: Normal    
Version: Unspecified   
Hardware: Any   
OS: Any   

Description Andrey Smagin 2012-05-11 10:20:14 UTC
System leak mbufs with multicast arp adresses

Fix: 

Don't use large number multicast arp adressed in one LAN.
How-To-Repeat: Create in one box static arp table for 65533 entries 172.16.0.0/16 with
multicast arp adresses, example eb:ee:00:00:xx:yy. xx yy - count number.
From another box after time we will see:

root samnote# netstat -m
*26078/427/26505 mbufs in use (current/cache/total)
*26076/170/26246/65536 mbuf clusters in use (current/cache/total/max)
*26076/164 mbuf+clusters out of packet secondary zone in use (current/cache)
0/20/20/65536 4k (page size) jumbo clusters in use (current/cache/total/max)
0/0/0/6400 9k jumbo clusters in use (current/cache/total/max)
0/0/0/3200 16k jumbo clusters in use (current/cache/total/max)
*58671K/526K/59198K bytes allocated to network (current/cache/total)
0/0/0 requests for mbufs denied (mbufs/clusters/mbuf+clusters)
0/0/0 requests for jumbo clusters denied (4k/9k/16k)
0/5/6656 sfbufs in use (current/peak/max)
0 requests for sfbufs denied
0 requests for sfbufs delayed
0 requests for I/O initiated by sendfile
0 calls to protocol drain routines

* values will increment. after some hours network stack will fail with
error: not free mbuf. By this bug I make DDOS for myself.
Comment 1 Mark Linimon freebsd_committer freebsd_triage 2014-04-20 01:11:03 UTC
Responsible Changed
From-To: freebsd-bugs->freebsd-net

Over to maintainer(s).
Comment 2 Andrey V. Elsukov freebsd_committer freebsd_triage 2014-04-21 13:08:23 UTC
State Changed
From-To: open->feedback

Do you able reproduce that? 
It seems the problem was fixed in r249742. 


Comment 3 Andrey V. Elsukov freebsd_committer freebsd_triage 2014-04-21 13:08:23 UTC
Responsible Changed
From-To: freebsd-net->ae

Take it.
Comment 4 Andrey V. Elsukov freebsd_committer freebsd_triage 2015-04-23 09:06:25 UTC
Close this PR again. It should be fixed in r249742.