[pf4freebsd] Strange problem/Need help

Max Laier max at love2party.net
Wed Sep 15 21:09:30 PDT 2004


Hi,

Christian S.J. Peron reported a very strange problem with pf in a recent 
current kernel. It turned out (after days of brainwracking debugging) that 
the problem went away by disabling the i386 optimized version of in4_cksum(). 
The problem I am having with this, is that I can't explain why this 
(standalone) thing would break all of a sudden (earlier kernel seemed to 
work). So what I am looking for are other examples for this behavior or 
possible explanations.

If anybody else was/is seeing high numbers of "bad checksum" in #netstat -ssp 
tcp or #netstat -ssp udp with rescent current, please try the attached patch 
and report in if it fixed the problem.

I am really really disturbed by this as I just can't explain. Hence I am 
really really hoping for you to explain what's going on here or at least 
providing additional data points to get an idea. Thanks in advance.

I am not commiting this is order to keep the code exposed and hope for active 
users to report!

-- 
/"\  Best regards,			| mlaier at freebsd.org
\ /  Max Laier				| ICQ #67774661
 X   http://pf4freebsd.love2party.net/	| mlaier at EFnet
/ \  ASCII Ribbon Campaign		| Against HTML Mail and News
-------------- next part --------------
A non-text attachment was scrubbed...
Name: maybe_broken.patch
Type: text/x-diff
Size: 825 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20040916/5b1d7273/maybe_broken.bin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: signature
Url : http://lists.freebsd.org/pipermail/freebsd-pf/attachments/20040916/5b1d7273/attachment.bin


More information about the freebsd-pf mailing list