kern/178116: [tcp] [panic] Kernel panic: general protection fault in tcp_do_segment

[Nate Denning]

The following reply was made to PR kern/178116; it has been noted by GNATS.

From: Nate Denning <nate.denning at gmail.com>
To: Gleb Smirnoff <glebius at FreeBSD.org>
Cc: bug-followup at FreeBSD.org
Subject: Re: kern/178116: [tcp] [panic] Kernel panic: general protection fault in tcp_do_segment
Date: Wed, 8 May 2013 08:30:01 -0600

 On May 1, 2013, at 9:32 AM, Nate Denning <nate.denning at gmail.com> wrote:
 
 >=20
 > On May 1, 2013, at 9:27 AM, Gleb Smirnoff <glebius at FreeBSD.org> wrote:
 >=20
 >> Nate,
 >>=20
 >> On Wed, May 01, 2013 at 09:26:04AM -0600, Nate Denning wrote:
 >> N> >  do you run any additional network modules: ipfw, pf, netgraph,
 >> N> > accept filters, etc? How your system differes from a default
 >> N> > installation?
 >> N>=20
 >> N> Yes, ipfilter, accf_http and accf_data (accf is for Apache). No =
 ipfw, pf, or netgraph. Output of kldstat:
 >>=20
 >> I would suspect ipfilter. :(
 >>=20
 >> Is it possible for you to rewrite your rules to ipfw or pf and try
 >> running with that?
 >>=20
 >=20
 > Certainly, I'll switch to pf and see how that goes.
 
 I switched to pf and I'm at about a week now with no panics where there =
 were typically several per day with ipfilter. I need this host to be =
 stable so I would like to stick to pf, but is there any more info, =
 configs, etc. I can provide to help debug the ipfilter issue?
 
 Thanks,
 
 Nate=