VIMAGE and pf?

Sun Jun 19 03:26:39 UTC 2011

On 6/18/11 3:53 AM, Stefan Bethke wrote:
> Is VIMAGE supposed to be compatible with pf?  On r223207 (8-stable) I'm getting a panic when pfctl loads the rules:


no they are not compatible.. there are comatibilty patches but we have 
so far failed to get them into the tree.
> Fatal trap 12: page fault while in kernel mode
> cpuid = 1; apic id = 01
> fault virtual address	= 0x28
> fault code		= supervisor read data, page not present
> instruction pointer	= 0x20:0xffffffff803da27a
> stack pointer	        = 0x28:0xffffff811ef8b7d0
> frame pointer	        = 0x28:0xffffff811ef8b7f0
> code segment		= base 0x0, limit 0xfffff, type 0x1b
> 			= DPL 0, pres 1, long 1, def32 0, gran 1
> processor eflags	= interrupt enabled, resume, IOPL = 0
> current process		= 839 (pfctl)
> trap number		= 12
> panic: page fault
> cpuid = 1
> KDB: stack backtrace:
> db_trace_self_wrapper() at db_trace_self_wrapper+0x2a
> kdb_backtrace() at kdb_backtrace+0x37
> panic() at panic+0x187
> trap_fatal() at trap_fatal+0x290
> trap_pfault() at trap_pfault+0x28f
> trap() at trap+0x3df
> calltrap() at calltrap+0x8
> --- trap 0xc, rip = 0xffffffff803da27a, rsp = 0xffffff811f03f7d0, rbp = 0xffffff811f03f7f0 ---
> ifunit() at ifunit+0x2a
> pfioctl() at pfioctl+0x1c2a
> devfs_ioctl_f() at devfs_ioctl_f+0x7b
> kern_ioctl() at kern_ioctl+0x102
> ioctl() at ioctl+0xfd
> syscallenter() at syscallenter+0x1e5
> syscall() at syscall+0x4b
> Xfast_syscall() at Xfast_syscall+0xe2
> --- syscall (54, FreeBSD ELF64, ioctl), rip = 0x80099a8ac, rsp = 0x7fffffffb568, rbp = 0x7fffffffb6c0 ---
>
> (The above is likely mangled due to my console server missing a few characters now and then.)
>
> I've got these interfaces configured:
> em0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST>  metric 0 mtu 1500
> 	options=219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MAGIC>
> 	ether 00:1c:c0:7d:8c:50
> 	inet6 fe80::21c:c0ff:fe7d:8c50%em0 prefixlen 64 scopeid 0x1
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	media: Ethernet autoselect (1000baseT<full-duplex>)
> 	status: active
> pflog0: flags=0<>  metric 0 mtu 33152
> lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST>  metric 0 mtu 16384
> 	options=3<RXCSUM,TXCSUM>
> 	inet 127.0.0.1 netmask 0xff000000
> 	inet6 ::1 prefixlen 128
> 	inet6 fe80::1%lo0 prefixlen 64 scopeid 0xb
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST>  metric 0 mtu 1500
> 	ether 02:00:00:00:00:01
> 	inet 44.128.65.1 netmask 0xffffffc0 broadcast 44.128.65.63
> 	inet6 fe80::21c:c0ff:fe7d:8c50%bridge0 prefixlen 64 scopeid 0xc
> 	inet6 2001:470:1f0b:1064::1 prefixlen 64
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
> 	maxage 20 holdcnt 6 proto rstp maxaddr 100 timeout 1200
> 	root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
> 	member: vlan1 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
> 	ifmaxaddr 0 port 14 priority 128 path cost 55
> 	member: tap0 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
> 	ifmaxaddr 0 port 13 priority 128 path cost 2000000
> tap0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST>  metric 0 mtu 1500
> 	options=80000<LINKSTATE>
> 	ether 00:bd:c5:5a:01:00
> 	inet6 fe80::2bd:c5ff:fe5a:100%tap0 prefixlen 64 scopeid 0xd
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	Opened by PID 2524
> vlan1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST>  metric 0 mtu 1500
> 	options=3<RXCSUM,TXCSUM>
> 	ether 00:1c:c0:7d:8c:50
> 	inet6 fe80::21c:c0ff:fe7d:8c50%vlan1 prefixlen 64 scopeid 0xe
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	media: Ethernet autoselect (1000baseT<full-duplex>)
> 	status: active
> 	vlan: 1 parent interface: em0
> vlan2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST>  metric 0 mtu 1500
> 	options=3<RXCSUM,TXCSUM>
> 	ether 00:1c:c0:7d:8c:50
> 	inet 44.128.65.249 netmask 0xfffffff8 broadcast 44.128.65.255
> 	inet6 fe80::21c:c0ff:fe7d:8c50%vlan2 prefixlen 64 scopeid 0xf
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	media: Ethernet autoselect (1000baseT<full-duplex>)
> 	status: active
> 	vlan: 2 parent interface: em0
> vlan3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST>  metric 0 mtu 1500
> 	options=3<RXCSUM,TXCSUM>
> 	ether 00:1c:c0:7d:8c:50
> 	inet 172.23.54.1 netmask 0xffffff00 broadcast 172.23.54.255
> 	inet6 fe80::21c:c0ff:fe7d:8c50%vlan3 prefixlen 64 scopeid 0x10
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	media: Ethernet autoselect (1000baseT<full-duplex>)
> 	status: active
> 	vlan: 3 parent interface: em0
> vlan4: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST>  metric 0 mtu 1500
> 	options=3<RXCSUM,TXCSUM>
> 	ether 00:1c:c0:7d:8c:50
> 	inet6 fe80::21c:c0ff:fe7d:8c50%vlan4 prefixlen 64 scopeid 0x11
> 	inet 31.18.32.155 netmask 0xfffff800 broadcast 31.18.39.255
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	media: Ethernet autoselect (1000baseT<full-duplex>)
> 	status: active
> 	vlan: 4 parent interface: em0
> gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST>  metric 0 mtu 1280
> 	tunnel inet 31.18.32.155 -->  216.66.80.30
> 	inet6 fe80::21c:c0ff:fe7d:8c50%gif0 prefixlen 64 scopeid 0x12
> 	inet6 2001:470:1f0a:1064::2 -->  2001:470:1f0a:1064::1 prefixlen 128
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	options=1<ACCEPT_REV_ETHIP_VER>
> tun1: flags=8043<UP,BROADCAST,RUNNING,MULTICAST>  metric 0 mtu 1500
> 	options=80000<LINKSTATE>
> 	inet6 fe80::21c:c0ff:fe7d:8c50%tun1 prefixlen 64 scopeid 0x13
> 	inet 44.128.127.2 netmask 0xffffff00 broadcast 44.128.127.255
> 	nd6 options=3<PERFORMNUD,ACCEPT_RTADV>
> 	Opened by PID 2516
>
>
>