Why do I get this message by the server ?

[Lowell Gilbert]

"Halid Faith" <maslak at ihlas.net.tr> writes:

> I have a freebsd5.4 server. I sometimes get a message on the screen as below;
> 
> kernel: ipfw: pullup failed
> 
> What cause this problem cause ?

There weren't enough mbufs available for ipfw to properly inspect a
packet.  So one packet was dropped by the firewall that perhaps would
not have been if an extra mbuf were available.  It's not a problem in
itself, but if happening extremely often, you should allocate more
mbufs. 

> I see the below lines when I type netstat -ni
> 
> 1# netstat -ni
> Name    Mtu Network       Address              Ipkts Ierrs    Opkts Oerrs  Coll
> bge0   1500 <Link#1>      00:13:d4:51:5d:e9 1618711264     0 4211116941     0     0
> bge0   1500 212.175.51.68 212.175.51.70      3389522     - 11038161     -     -
> bge0   1500 fe80:1::213:d fe80:1::213:d4ff:        0     -        3     -     -
> bge1   1500 <Link#2>      00:13:d4:51:5d:ea 307271458     0 808964464     0     0
> bge1   1500 192.168.12.1 192.168.12.63    2276942     - 193982504     -     -
> bge1   1500 fe80:2::213:d fe80:2::213:d4ff:        0     -        4     -     -
> lo0   16384 <Link#3>                         1465002     0  1465002     0     0
> lo0   16384 127           127.0.0.1          1463512     -  1463566     -     -
> lo0   16384 ::1/128       ::1                      0     -        0     -     -
> lo0   16384 fe80:3::1/64  fe80:3::1                0     -        0     -     -
> 
> sysctl net.inet.ip | grep queue
> net.inet.ip.intr_queue_maxlen: 50
> net.inet.ip.intr_queue_drops: 19512403
> 
> What shall I do ?

You don't have to do anything.  You could turn off the "verbose" flag
for ipfw, and then you wouldn't see these messages.  Or you could
increase the number of mbufs available in the kernel.