Re: dtrace to trace incoming connection not suceeding ?

From: Kurt Jaeger <>
Date: Fri, 12 Nov 2021 15:29:18 UTC

> >>> The basic ipfw firewall is active, but
> >> Does it work, if you disable ipfw?

> > No, unfortunatly not.

> OK. Can you provide the output of
> netstat -sptcp
> after some packets were dropped.

4 connection attempts in that time.

On the same 10g ix0 interface we have three VLANs:
- one (vlan551) of them uses tcp-md5 for another bgp session
- one (vlan500) does not use tcp-md5, and has the problem
- one (vlan724) does not use tcp-md5 for bgp, and works fine

--         +49 171 3101372                  Now what ?