ath0 timeout problem - again
joao at matik.com.br
Sun Dec 31 01:20:56 PST 2006
On Sunday 31 December 2006 01:31, Sam Leffler wrote:
> >>> I really do not know what this event means (ether type 5e4), for my
> >>> understandings it is vague in the source, so I am lost here
> >> Seems pretty clear: it's the type field extracted from the ethernet
> >> header of the oversized packet. A quick check of sys/net/ethernet.h
> >> shows no such ETHERTYPE defined. So something in your network is
> >> transmitting packets that either being rx'd incorrectly or, more likely,
> >> corrupted in transit.
> > good so far, point here is that we can not limit that someone tx this
> > kind of packets but should find a way that this traffic do not DoS the
> > AP.
> > ipfw accepts 0x5e4 but at the end it does not get this packages
> > changing mtu on any interface does not change a thing
> > when we track the oversized packages they we found they are coming from
> > nat servers where wingate and similar softwares are running, when we cut
> > them out the mentioned traffic stopps and the AP does not interrupt
> > service anymore
> So the packet is real and it's being dropped at the 802.3 layer as it
> should. If the printf is the problem remove it or rate limit it. I
> think it should be rate-limited or just stuck under a debug flag but
> I'll leave that to someone else. Alternatively we can enforce the mtu
> in the ath driver and drop it there.
the problem is that the ath card stops working rendering the machine useless
I do not get this problem with a wi prism card, when I switch to a wi card I
get some wi timeout events but the card does not stop as the ath does
when I run the server with ath card not as bridge but as a gateway it also
does not stop working and the mentioned packages do also exist on the network
but are not even mentioned/noticed by the AP
enforcing a mtu limit and dropping the larger packages sounds as a good start
for me. If you could be so kind and make such a patch to try it out I get the
results in a day or two since I have machines which hang several times a day.
A mensagem foi scaneada pelo sistema de e-mail e pode ser considerada segura.
Service fornecido pelo Datacenter Matik https://datacenter.matik.com.br
More information about the freebsd-stable