Re: dtrace to trace incoming connection not suceeding ?

Hi!

> >>> The basic ipfw firewall is active, but
> >> Does it work, if you disable ipfw?

> > No, unfortunatly not.

> OK. Can you provide the output of
> netstat -sptcp
> after some packets were dropped.

https://people.freebsd.org/~pi/logs/netstat-t1.txt
https://people.freebsd.org/~pi/logs/netstat-t2.txt

4 connection attempts in that time.

On the same 10g ix0 interface we have three VLANs:
- one (vlan551) of them uses tcp-md5 for another bgp session
- one (vlan500) does not use tcp-md5, and has the problem
- one (vlan724) does not use tcp-md5 for bgp, and works fine

-- 
pi@FreeBSD.org         +49 171 3101372                  Now what ?