pfsync broadcasts without CARP/pfsync enabled

husnu demir hdemir at metu.edu.tr
Fri May 26 00:49:45 PDT 2006


Just write 

ifconfig pfsync0 -syncif


It will stop the sending of pfsync packets.


Regards.

Husnu Demir.

On Thu, May 25, 2006 at 10:53:02PM -0700, Wes Santee wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>  
> Greetings!
> 
> I noticed that in FreeBSD 6.1-RELEASE, I'm seeing a lot of pfsync
> broadcasts.  However, I have neither CARP nor pfsync enabled on the
> box.  Anyone know where these are coming from and how I can stop them?
> 
> $ tcpdump -n -i ath0 proto pfsync
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on ath0, link-type EN10MB (Ethernet), capture size 96 bytes
> 22:40:41.232887 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:41.273770 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:42.232928 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:43.232635 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:44.282448 IP 10.0.0.2 > 0.0.0.0:  pfsync 452
> 22:40:45.291284 IP 10.0.0.2 > 0.0.0.0:  pfsync 452
> 22:40:45.771212 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:46.514065 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:46.517593 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:47.514947 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:48.574785 IP 10.0.0.2 > 0.0.0.0:  pfsync 228
> 22:40:48.919877 IP 10.0.0.2 > 0.0.0.0:  pfsync 452
> 22:40:48.992723 IP 10.0.0.2 > 0.0.0.0:  pfsync 900
> ^C
> 13 packets captured
> 21 packets received by filter
> 0 packets dropped by kernel
> 
> I've got 2 interfaces in the box, but it's only happening on ath0
> (which is the only wireless NIC).  Note that these appear to be pfsync
> protocol broadcast packets, not pfsync multicast packets.
> 
> Cheers,
> - -Wes
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.2 (MingW32)
>  
> iQIVAwUBRHaXuorq8W17hxGfAQiCpw//QcjjtnI+/v/HFXVo1wO1pFnUK4rcwvk0
> bsapBxmadE64ryLEz3uTfsGHRh777OP3owPRSnvVlzo8MMob6Rofj8ZRdBvQZaV2
> vinR/lqXi8ZuXIMdiZAqHgAHfRGkLYRFjw71k/Aj+1bbhZh14ty1r7UZ4F3Y8nim
> cjyFIFs9wgFeddFyffNJKkuhyp2/IYeXu8BRJAhrdVEBnkjKcpTVmbGc/z5IJQkO
> YB4C/kkCfdUtGv60xwnYAYjDKAXlPAA5svfpmIe8jpSSwIUStBJK70kLdv0PkaWh
> +QN/G/uDPavYXwlblu3zHMdpemQaz91B4TUT7cGoVinbk/sOisHlWRb+HAHDhhks
> WejDhyo6QozqcXmzm8TweD95dF0cszEj3uGV/a7BT2pHd6VtwYhvv4veGStOdf01
> MZ3UzVPs5QVasa07XID8bGkoTJlXvUn47FmP5OWJU97ys8tg0/8/CVdJ5Uwdo/3m
> auyxxSeDqAlx8w8reksRXWO68wNre4lj8G35IVNUgSvJhOgl5MrvYvAfhOswvGA+
> x2W5e+zQ16pPsUEPxRO8TVJPW2V8EopcZZy1k5FilKa6ZTHM1MlZu9BCM/anApN2
> +QomvIWomekXhkUyaCItXKINARAE3zBEQjXUY+RZCJ26NpqiTXEVEiFSbdWuqmWn
> jCzxlwM35kE=
> =upDG
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> freebsd-pf at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-pf
> To unsubscribe, send any mail to "freebsd-pf-unsubscribe at freebsd.org"


More information about the freebsd-pf mailing list