Fast IPSEC issue

David Malone dwmalone at maths.tcd.ie
Fri Apr 28 15:57:11 UTC 2006


On Fri, Apr 28, 2006 at 10:57:48AM -0400, Stephen Clark wrote:
> Apr 28 10:44:48 J301001 kernel: gre45: gre_output: recursively called 
> too many times(2)

This means a packet was fed into if_gre while if_gre was also active.
In the case of FAST_IPSEC this may be normal if you have packets moving
between tunnels. You can change how many levels of recursive call
are permitted by changing the sysctl:

	net.link.gre.max_nesting

Try making it slightly larger and see if the messages stop.

	David.


More information about the freebsd-stable mailing list