[pf4freebsd] Re: nfsd send error 1 probably caused by pf ?
Florian C. Smeets
flo at kasimir.com
Wed Sep 15 20:55:58 PDT 2004
Florian C. Smeets wrote:
> Daniel Hartmeier wrote:
>
>
>>If that doesn't solve it, add 'log' to all block rules and watch pflog
>>for blocked packets. Enable debug logging (pfctl -xm) and watch
>>/var/log/messages for pf related messages. Do you see fragment
>>reassembly there?
>
I get a lot of these BAD state messages with debug leve misc:
Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049
172.30.1.1:2049 172.30.1.2:1021 [lo=2879006265 high=2879023465
win=16588 modulator=0] [lo=1139973024 high=1139974122 win=17200
modulator=0] 4:4 A
seq=1139974472 ack=2879006265 len=1448 ackskew=0 pkts=406886:392362
dir=in,rev
Nov 12 23:32:25 bender kernel: pf: State failure on: 1 |
Nov 12 23:32:25 bender kernel: pf: BAD state: TCP 172.30.1.1:2049
172.30.1.1:2049 172.30.1.2:1021 [lo=2879006265 high=2879023465
win=16588 modulator=0] [lo=1139974472 high=1139974846 win=17200
modulator=0] 4:4 A
seq=1139974472 ack=2879006265 len=1448 ackskew=0 pkts=406889:392365
dir=in,rev
Nov 12 23:32:25 bender kernel: pf: State failure on: 1 |
Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049
172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369
win=16588 modulator=0] [lo=1140040480 high=1140041578 win=17200
modulator=0] 4:4 A
seq=1140040480 ack=2879074169 len=1448 ackskew=0 pkts=406979:392451
dir=in,rev
Nov 12 23:32:27 bender kernel: pf: State failure on: 1 |
Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049
172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369
win=16588 modulator=0] [lo=1140040480 high=1140041578 win=17200
modulator=0] 4:4 A
seq=1140041928 ack=2879074169 len=1448 ackskew=0 pkts=406979:392451
dir=in,rev
Nov 12 23:32:27 bender kernel: pf: State failure on: 1 |
Nov 12 23:32:27 bender kernel: pf: BAD state: TCP 172.30.1.1:2049
172.30.1.1:2049 172.30.1.2:1021 [lo=2879074169 high=2879091369
win=16588 modulator=0] [lo=1140041928 high=1140042302 win=17200
modulator=0] 4:4 A
seq=1140041928 ack=2879074169 len=1448 ackskew=0 pkts=406982:392454
dir=in,rev
Nov 12 23:32:27 bender kernel: pf: State failure on: 1 |
Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049
172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273
win=16588 modulator=0] [lo=1140107936 high=1140109034 win=17200
modulator=0] 4:4 A
seq=1140107936 ack=2879142073 len=1448 ackskew=0 pkts=407072:392539
dir=in,rev
Nov 12 23:32:30 bender kernel: pf: State failure on: 1 |
Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049
172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273
win=16588 modulator=0] [lo=1140107936 high=1140109034 win=17200
modulator=0] 4:4 A
seq=1140109384 ack=2879142073 len=1448 ackskew=0 pkts=407072:392539
dir=in,rev
Nov 12 23:32:30 bender kernel: pf: State failure on: 1 |
Nov 12 23:32:30 bender kernel: pf: BAD state: TCP 172.30.1.1:2049
172.30.1.1:2049 172.30.1.2:1021 [lo=2879142073 high=2879159273
win=16588 modulator=0] [lo=1140109384 high=1140109758 win=17200
modulator=0] 4:4 A
seq=1140109384 ack=2879142073 len=1448 ackskew=0 pkts=407075:392542
dir=in,rev
Nov 12 23:32:30 bender kernel: pf: State failure on: 1 |
Regards,
flo
More information about the freebsd-pf
mailing list