Firewall system running nat pumping packets between 2 intel EM interfaces. When the system is running IPFW and has SMP turned on, the system will crash after a random (large) number of packets flow through the system. How-To-Repeat: Run SMP and IPFW and natd on a 5.4 i386 system and run iperf between one interface and the other (server outside the nat interface). After a minute or so, netstat -m will show something like: 4294266316 mbufs in use 4294737989/25600 mbuf clusters in use (current/max) 3560445 KBytes allocated to network 201 calls to protocol drain routines After another period of time, the system will eventually reboot. The behavior is not related to load or firewall rule changes.
On Fri, 7 Oct 2005, Chris Ulrich wrote: > Run SMP and IPFW and natd on a 5.4 i386 system and run iperf between one > interface and the other (server outside the nat interface). > > After a minute or so, netstat -m will show something like: > 4294266316 mbufs in use > 4294737989/25600 mbuf clusters in use (current/max) > 3560445 KBytes allocated to network > 201 calls to protocol drain routines > > After another period of time, the system will eventually reboot. The > behavior is not related to load or firewall rule changes. FYI, statistics errors in the mbuf allocator in 5.x are probably unrelated to the reboot, and occurs due to races in statistics gathering. 6.x corrects this problem, and I'm considering a merge of the changes to the 5.x branch following 6.0-RELEASE and some additional in-field testing. The reboot is, however, concerning. Do you get a panic and reboot, or just a reboot? In particular, if you compile in the kernel debugger, does it drop to the debugger at some point, or reboot? Could you try a 5-STABLE kernel and see if that works better? There have been a number of synchronization fixes that have not yet been released as errata, which might affect this. Thanks, Robert N M Watson
State Changed From-To: open->feedback This should have been set to feedback to note that the submitter had been asked for more information. http://www.freebsd.org/cgi/query-pr.cgi?pr=87094 Adding to audit trail from misfiled PR kern/90994: Date: Tue, 27 Dec 2005 18:41:30 -0800
State Changed From-To: feedback->suspended Copy text from misfiled PR kern/90994 here. Mark as 'suspended' since the submitter found a workaround, but it does indicate a problem that needs to be fixed.
Responsible Changed From-To: freebsd-bugs->freebsd-net Over to maintainer(s).
State Changed From-To: suspended->closed FreeBSD 5.x is no longer supported.