ath0 timeout problem - again

[JoaoBR]

On Sunday 31 December 2006 01:31, Sam Leffler wrote:
> >>> I really do not know what this event means (ether type 5e4), for my
> >>> understandings it is vague in the source, so I am lost here
> >>
> >> Seems pretty clear: it's the type field extracted from the ethernet
> >> header of the oversized packet.  A quick check of sys/net/ethernet.h
> >> shows no such ETHERTYPE defined.  So something in your network is
> >> transmitting packets that either being rx'd incorrectly or, more likely,
> >> corrupted in transit.
> >
> > good so far, point here is that we can not limit that someone tx this
> > kind of packets but should find a way that this traffic do not DoS the
> > AP.
> >
> > ipfw accepts 0x5e4 but at the end it does not get this packages
> > changing mtu on any interface does not change a thing
> >
> >
> > when we track the oversized packages they we found they are coming from
> > nat servers where wingate and similar softwares are running, when we cut
> > them out the mentioned traffic stopps and the AP does not interrupt
> > service anymore
>
> So the packet is real and it's being dropped at the 802.3 layer as it
> should.  If the printf is the problem remove it or rate limit it.  I
> think it should be rate-limited or just stuck under a debug flag but
> I'll leave that to someone else.  Alternatively we can enforce the mtu
> in the ath driver and drop it there.

the problem is that the ath card stops working rendering the machine useless

I do not get this problem with a wi prism card, when I switch to a wi card I 
get some wi timeout events but the card does not stop as the ath does

when I run the server with ath card not as bridge but as a gateway it also 
does not stop working and the mentioned packages do also exist on the network 
but are not even mentioned/noticed by the AP

enforcing a mtu limit and dropping the larger packages sounds as a good start 
for me. If you could be so kind and make such a patch to try it out I get the 
results in a day or two since I have machines which hang several times a day.


-- 

João







A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura.
Service fornecido pelo Datacenter Matik  https://datacenter.matik.com.br