PF error message looping on screen. System Locked.

Roger Miranda rmiranda at digitalrelay.ca
Thu Jun 14 18:00:32 UTC 2007


> Roger,
>
> I don't think this message is related to your trouble. I think you can
> also avoid these messages by adding 'no scrub' to your pf.conf (I'm
> currently not aware of any side effects by adding this).
>
> Probably Max has some more suggestions on not scrubbing packets.
>
> You should get a debugger into your kernel (like Max suggested) and
> probably also use `pfctl -x loud' or `pfctl -x misc' to get more
> messages out of pf. If these messages are popping up again, break the
> system into the debugger and look for the messages (using 'scroll
> lock' to scroll back some pages), ps and a backtrace.
>
> HTH
>
> Volker


I found the following in Dmesg just a while ago ("BAD STATE" Line).  Look 
simalier to what is loop on the screen when the sytem locks up.  Could Pf be 
mixing or confusing states?

pf_normalize_ip: reass frag 21897 @ 0-1480
pf_normalize_ip: reass frag 21897 @ 1480-2960
pf_normalize_ip: reass frag 21897 @ 2960-4440
pf_normalize_ip: reass frag 21897 @ 4440-5920
pf_normalize_ip: reass frag 21897 @ 5920-5940
pf_reassemble: 5940 < 5940?
pf_reassemble: complete: 0xc413be00(5960)
pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700 
[lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172 
high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172 
len=0 ackskew=0 pkts=1:1 dir=in,fwd
pf: State failure on:         |    
pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700 
[lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172 
high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172 
len=0 ackskew=0 pkts=1:2 dir=in,fwd
pf: State failure on:         |    
pf: BAD state: TCP 127.0.0.1:3128 207.253.106.226:80 192.168.0.103:2700 
[lo=2780948104 high=2781013640 win=16384 modulator=0] [lo=3673678172 
high=3673694556 win=65535 modulator=0] 4:2 R seq=2780948104 ack=3673678172 
len=0 ackskew=0 pkts=1:3 dir=in,fwd
pf: State failure on:         |    
pf_normalize_ip: reass frag 22153 @ 0-1480
pf_normalize_ip: reass frag 22153 @ 1480-2960
pf_normalize_ip: reass frag 22153 @ 2960-4440
pf_normalize_ip: reass frag 22153 @ 4440-5920
pf_normalize_ip: reass frag 22153 @ 5920-5940
pf_reassemble: 5940 < 5940?
pf_reassemble: complete: 0xc43c1800(5960)
pf_normalize_ip: reass frag 22409 @ 0-1480
pf_normalize_ip: reass frag 22409 @ 1480-2960
pf_normalize_ip: reass frag 22409 @ 2960-4440
pf_normalize_ip: reass frag 22409 @ 4440-5920
pf_normalize_ip: reass frag 22409 @ 5920-5940
pf_reassemble: 5940 < 5940?
pf_reassemble: complete: 0xc4409c00(5960)
pf_normalize_ip: reass frag 22665 @ 0-1480
pf_normalize_ip: reass frag 22665 @ 1480-2960
pf_normalize_ip: reass frag 22665 @ 2960-4440
pf_normalize_ip: reass frag 22665 @ 4440-5920
pf_normalize_ip: reass frag 22665 @ 5920-5940
pf_reassemble: 5940 < 5940?
pf_reassemble: complete: 0xc4335a00(5960)


More information about the freebsd-pf mailing list