In some email I received from Paul B. Henson, sie wrote: > > I continue to have occasional crashes clearly linked to ipf. I don't think > they are hardware related, as they occur on different systems. My current > hypothesis is that the data structure maintaining state information becomes > corrupted, and the kernel tries to access invalid memory. The crashes only > occur on systems that have extremely heavy traffic and maintain a lot of > state. I have other systems with equivalent traffic that never crash, but > hardly maintain any state. I guess it's just something I'm going to have to > live with...
I think you're wrong on relating it to state. It's more than likely due to the games that get played with the data structures that hold network traffic data and being an illegitimate part of the packet processing. I should get you to try IPFilter 4.0 on these heavily loaded machiens as it works properly as part of the STREAMS stack that Solaris currently uses. Darren
