[Bug 222126] pf is not clearing expired states

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Oct 19 06:30:33 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222126

--- Comment #35 from hlh at restart.be ---
(In reply to hlh from comment #33)

The problem crops up again.

Here is the end of the output of your dtrace script when the states are no more
expired:

[root at norquay log]# tail pf.dtrace2.log-after
  3   9078              none:expired_states i 19947 maxentry 327 0
  3   9077                    thread:wakeup 
  3   9078              none:expired_states i 20274 maxentry 327 0
  0   9077                    thread:wakeup 
  0   9078              none:expired_states i 20601 maxentry 327 0
  0   9077                    thread:wakeup 
  0   9078              none:expired_states i 20928 maxentry 327 0
  0   9077                    thread:wakeup 
  0   9078              none:expired_states i 21255 maxentry 327 0

The dtrace script give no more output.

Then I stop the dtrace and save the previous trace.

I restart a new dtrace which output nothing until I run:

echo "set timeout interval 5" | pfctl -mf -
echo "set timeout interval 5" | pfctl -mf -
nohup service pf restart

The first lines of the dtrace are:

[root at norquay log]# head pf.dtrace2.log-after 
CPU     ID                    FUNCTION:NAME
  0   9077                    thread:wakeup 
  0   9078              none:expired_states i 23544 maxentry 655 0
  1   9077                    thread:wakeup 
  1   9078              none:expired_states i 24199 maxentry 655 0
  1   9077                    thread:wakeup 
  1   9078              none:expired_states i 24854 maxentry 655 0
  1   9077                    thread:wakeup 
  1   9078              none:expired_states i 25509 maxentry 655 0
  1   9077                    thread:wakeup

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-pf mailing list