strange "throttling" issue with pf on xDSL connection

Patrick Proniewski patpro at patpro.net
Thu Aug 2 07:03:29 UTC 2007


Hi,

On 02 août 2007, at 08:24, Daniel Hartmeier wrote:

> Enable pf debug logging (pfctl -xm), note output of pfctl -si,  
> reproduce
> the problem. Then run pfctl -si again. See /var/log/messages for lines
> from pf. Post all three outputs ;)

before reproducing the problem:

Interface Stats for fxp0              IPv4             IPv6
   Bytes In                      1317430142                0
   Bytes Out                       37184782                0
   Packets In
     Passed                          952956                0
     Blocked                          13070                0
   Packets Out
     Passed                          627949                0
     Blocked                             51                0

State Table                          Total             Rate
   current entries                       67
   searches                         6108082           50.7/s
   inserts                            18628            0.2/s
   removals                           18561            0.2/s
Counters
   match                              40003            0.3/s
   bad-offset                             0            0.0/s
   fragment                               0            0.0/s
   short                                  0            0.0/s
   normalize                              0            0.0/s
   memory                                 0            0.0/s
   bad-timestamp                          0            0.0/s
   congestion                             0            0.0/s
   ip-option                              0            0.0/s
   proto-cksum                            0            0.0/s
   state-mismatch                        35            0.0/s
   state-insert                           0            0.0/s
   state-limit                            0            0.0/s
   src-limit                              0            0.0/s
   synproxy                               0            0.0/s


after reproducing the problem:

Interface Stats for fxp0              IPv4             IPv6
   Bytes In                      1328709722                0
   Bytes Out                       37542784                0
   Packets In
     Passed                          960543                0
     Blocked                          13076                0
   Packets Out
     Passed                          634137                0
     Blocked                             51                0

State Table                          Total             Rate
   current entries                       52
   searches                         6124426           50.8/s
   inserts                            18636            0.2/s
   removals                           18584            0.2/s
Counters
   match                              40017            0.3/s
   bad-offset                             0            0.0/s
   fragment                               0            0.0/s
   short                                  0            0.0/s
   normalize                              0            0.0/s
   memory                                 0            0.0/s
   bad-timestamp                          0            0.0/s
   congestion                             0            0.0/s
   ip-option                              0            0.0/s
   proto-cksum                            0            0.0/s
   state-mismatch                        35            0.0/s
   state-insert                           0            0.0/s
   state-limit                            0            0.0/s
   src-limit                              0            0.0/s
   synproxy                               0            0.0/s


nothing in /var/log/message nor in /var/log/debug.log

regards,
patpro



More information about the freebsd-pf mailing list