from ipfstat -io output:

sample tcp  IN rule:
pass in log first quick proto tcp from myIP to any port = ssh flags S/FSRPAU 
keep state keep frags
sample udp IN rule
pass in log first quick proto udp from myIP to any port = nfsd keep state keep 
frags

Pass OUT rule
pass out log first quick on nxge0 proto tcp from 192.168.64.15/32 to any flags 
S/FSRPAU keep state keep frags
pass out log first quick on nxge0 proto udp from 192.168.64.15/32 to any keep 
state keep frags

Aug 25 15:25:37 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:36.407447 
nxge0 @0:11 b 192.168.64.15,2049 -> 10.52.6.1,961 PR tcp len 20 1500 -A OUT 
NEG_OOW
Aug 25 15:25:37 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:36.407447 
nxge0 @0:11 b 192.168.64.15,2049 -> 10.52.6.1,961 PR tcp len 20 1500 -A OUT 
NEG_OOW
Aug 25 15:25:37 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:36.407447 
nxge0 @0:11 b 192.168.64.15,2049 -> 10.52.6.1,961 PR tcp len 20 1500 -A OUT 
NEG_OOW
Aug 25 15:25:38 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:37.220091 
nxge0 @0:11 b 192.168.64.15,2049 -> 10.52.6.1,961 PR tcp len 20 1500 -A OUT 
NEG_OOW
Aug 25 15:25:38 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:37.220091 
nxge0 @0:11 b 192.168.64.15,2049 -> 10.52.6.1,961 PR tcp len 20 1500 -A OUT 
NEG_OOW
Aug 25 15:25:38 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:37.220091 
nxge0 @0:11 b 192.168.64.15,2049 -> 10.52.6.1,961 PR tcp len 20 1500 -A OUT 
NEG_OOW
Aug 25 15:25:42 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:41.528756 
nxge0 @0:65 b 10.52.6.1,961 -> 192.168.64.15,2049 PR tcp len 20 40 -A IN OOW
Aug 25 15:25:42 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:41.528756 
nxge0 @0:65 b 10.52.6.1,961 -> 192.168.64.15,2049 PR tcp len 20 40 -A IN OOW
Aug 25 15:25:42 myserver ipmon[367]: [ID 702911 local0.warning] 15:25:41.528756 
nxge0 @0:65 b 10.52.6.1,961 -> 192.168.64.15,2049 PR tcp len 20 40 -A IN OOW

I can still see occasional OOW error on several Solaris 10 servers. How to fix 
this? 

Thank you for any assistance.
Mathew



Reply via email to