On Jan 25, 2014, at 12:48 AM, David Higgs <hig...@gmail.com> wrote:
On Fri, Jan 24, 2014 at 4:24 AM, Henning Brauer
<lists-openbsdt...@bsws.de> wrote:
* Henning Brauer <lists-openbsdt...@bsws.de> [2014-01-24 05:50]:
i need this tested on an sk(4).
I don't have that hardware at all.
this gets rif od a slight little bit more.
Resurrected an old box, kernel compile w/ patch is underway. Should
be able to provide feedback tomorrow. I'm kinda new to this - do I
need to exercise forwarding, do some speed tests, or is it sufficient
to just make sure that host-based usage doesn't break? Snapshot dmesg
below.
No problems seen with host usage, after downloading a couple files w/ FTP
and updating source via CVS.
netstat -s, ifconfig -A hwfeatures, and dmesg below.
(Apologies if gmail mangles this)
--david
[temp@temp ~]$ netstat -s
ip:
136051 total packets received
0 bad header checksums
0 with size smaller than minimum
0 with data size < data length
0 with header length < data size
0 with data length < header length
0 with bad options
0 with incorrect version number
0 fragments received
0 fragments dropped (duplicates or out of space)
0 malformed fragments dropped
0 fragments dropped after timeout
0 packets reassembled ok
136051 packets for this host
0 packets for unknown/unsupported protocol
0 packets forwarded
0 packets not forwardable
0 redirects sent
91216 packets sent from this host
0 packets sent with fabricated ip header
0 output packets dropped due to no bufs, etc.
0 output packets discarded due to no route
0 output datagrams fragmented
0 fragments created
0 datagrams that can't be fragmented
0 fragment floods
0 packets with ip length > max ip packet size
0 tunneling packets that can't find gif
0 datagrams with bad address in header
136051 input datagrams software-checksummed
91216 output datagrams software-checksummed
0 multicast packets which we don't join
icmp:
0 calls to icmp_error
0 errors not generated because old message was icmp
0 errors not generated because of rate limitation
0 messages with bad code fields
0 messages < minimum length
0 bad checksums
0 messages with bad length
0 echo requests to broadcast/multicast rejected
0 message responses generated
igmp:
0 messages received
0 messages received with too few bytes
0 messages received with bad checksum
0 membership queries received
0 membership queries received with invalid field(s)
0 membership reports received
0 membership reports received with invalid field(s)
0 membership reports received for groups to which we belong
0 membership reports sent
ipencap:
0 total input packets
0 total output packets
0 packets shorter than header shows
0 packets dropped due to policy
0 packets with possibly spoofed local addresses
0 packets were dropped due to full output queue
0 input bytes
0 output bytes
0 protocol family mismatches
0 attempts to use tunnel with unspecified endpoint(s)
tcp:
91018 packets sent
3874 data packets (3766234 bytes)
0 data packets (0 bytes) retransmitted
0 fast retransmitted packets
54552 ack-only packets (78988 delayed)
0 URG only packets
0 window probe packets
32580 window update packets
12 control packets
91017 packets software-checksummed
135847 packets received
2601 acks (for 3760045 bytes)
166 duplicate acks
0 acks for unsent data
0 acks for old data
132734 packets (170929385 bytes) received in-sequence
2 completely duplicate packets (216 bytes)
0 old duplicate packets
0 packets with some duplicate data (0 bytes duplicated)
2 out-of-order packets (0 bytes)
0 packets (0 bytes) of data after window
0 window probes
380 window update packets
0 packets received after close
0 discarded for bad checksums
0 discarded for bad header offset fields
0 discarded because packet too short
0 discarded for missing IPsec protection
0 discarded due to memory shortage
135848 packets software-checksummed
0 bad/missing md5 checksums
0 good md5 checksums
6 connection requests
1 connection accept
7 connections established (including accepts)
9 connections closed (including 0 drops)
0 connections drained
0 embryonic connections dropped
2607 segments updated rtt (of 906 attempts)
0 retransmit timeouts
0 connections dropped by rexmit timeout
0 persist timeouts
0 keepalive timeouts
0 keepalive probes sent
0 connections dropped by keepalive
22 correct ACK header predictions
130376 correct data packet header predictions
2 PCB cache misses
0 ECN connections accepted
0 ECE packets received
0 CWR packets received
0 CE packets received
0 ECT packets sent
0 ECE packets sent
0 CWR packets sent
cwr by fastrecovery: 4
cwr by timeout: 0
cwr by ecn: 0
0 bad connection attempts
1 SYN cache entries added
0 hash collisions
1 completed
0 aborted (no space to build PCB)
0 timed out
0 dropped due to overflow
0 dropped due to bucket overflow
0 dropped due to RST
0 dropped due to ICMP unreachable
0 SYN,ACKs retransmitted
0 duplicate SYNs received for entries already in the cache
0 SYNs dropped (no route or no space)
4 SACK recovery episodes
12 segment rexmits in SACK recovery episodes
5508 byte rexmits in SACK recovery episodes
169 SACK options received
0 SACK options sent
udp:
261 datagrams received
0 with incomplete header
0 with bad data length field
0 with bad checksum
0 with no checksum
261 input packets software-checksummed
262 output packets software-checksummed
0 dropped due to no socket
0 broadcast/multicast datagrams dropped due to no socket
0 dropped due to missing IPsec protection
0 dropped due to full socket buffers
261 delivered
262 datagrams output
0 missed PCB cache
esp:
0 input ESP packets
0 output ESP packets
0 packets from unsupported protocol families
0 packets shorter than header shows
0 packets dropped due to policy
0 packets for which no TDB was found
0 input packets that failed to be processed
0 packets with bad encryption received
0 packets that failed verification received
0 packets for which no XFORM was set in TDB received
0 packets were dropped due to full output queue
0 packets where counter wrapping was detected
0 possibly replayed packets received
0 packets with bad payload size or padding received
0 packets attempted to use an invalid TDB
0 packets got larger than max IP packet size
0 packets that failed crypto processing
0 input UDP encapsulated ESP packets
0 output UDP encapsulated ESP packets
0 UDP packets for non-encapsulating TDB received
0 input bytes
0 output bytes
ah:
0 input AH packets
0 output AH packets
0 packets from unsupported protocol families
0 packets shorter than header shows
0 packets dropped due to policy
0 packets for which no TDB was found
0 input packets that failed to be processed
0 packets that failed verification received
0 packets for which no XFORM was set in TDB received
0 packets were dropped due to full output queue
0 packets where counter wrapping was detected
0 possibly replayed packets received
0 packets with bad authenticator length received
0 packets attempted to use an invalid TDB
0 packets got larger than max IP packet size
0 packets that failed crypto processing
0 input bytes
0 output bytes
etherip:
0 packets shorter than header shows
0 packets were dropped due to full output queue
0 packets were dropped because of no interface/bridge information
0 packets dropped due to policy
0 packets dropped for other reasons
0 input ethernet-in-IP packets
0 output ethernet-in-IP packets
0 input bytes
0 output bytes
ipcomp:
0 input IPCOMP packets
0 output IPCOMP packets
0 packets from unsupported protocol families
0 packets shorter than header shows
0 packets dropped due to policy
0 packets for which no TDB was found
0 input packets that failed to be processed
0 packets for which no XFORM was set in TDB received
0 packets were dropped due to full output queue
0 packets where counter wrapping was detected
0 packets attempted to use an invalid TDB
0 packets got larger than max IP packet size
0 packets that failed (de)compression processing
0 packets less than minimum compression length
0 input bytes
0 output bytes
carp:
0 packets received (IPv4)
0 packets received (IPv6)
0 packets discarded for bad interface
0 packets discarded for wrong TTL
0 packets shorter than header
0 discarded for bad checksums
0 discarded packets with a bad version
0 discarded because packet too short
0 discarded for bad authentication
0 discarded for unknown vhid
0 discarded because of a bad address list
0 packets sent (IPv4)
0 packets sent (IPv6)
0 send failed due to mbuf memory error
0 transitions to master
pfsync:
0 packets received (IPv4)
0 packets received (IPv6)
0 packets discarded for bad interface
0 packets discarded for bad ttl
0 packets shorter than header
0 packets discarded for bad version
0 packets discarded for bad HMAC
0 packets discarded for bad action
0 packets discarded for short packet
0 states discarded for bad values
0 stale states
0 failed state lookup/inserts
0 packets sent (IPv4)
0 packets sent (IPv6)
0 send failed due to mbuf memory error
0 send error
divert:
0 total packets received
0 dropped due to no socket
0 dropped due to full socket buffers
0 packets output
0 errors
pflow:
0 flows sent
0 packets sent
0 send failed due to mbuf memory error
0 send error
ip6:
0 total packets received
0 with size smaller than minimum
0 with data size < data length
0 with bad options
0 with incorrect version number
0 fragments received
0 fragments dropped (duplicates or out of space)
0 fragments dropped after timeout
0 fragments that exceeded limit
0 packets reassembled ok
0 packets for this host
0 packets forwarded
0 packets not forwardable
0 redirects sent
9 packets sent from this host
0 packets sent with fabricated ip header
0 output packets dropped due to no bufs, etc.
0 output packets discarded due to no route
0 output datagrams fragmented
0 fragments created
0 datagrams that can't be fragmented
0 packets that violated scope rules
0 multicast packets which we don't join
Mbuf statistics:
0 one mbufs
0 one ext mbufs
0 two or more ext mbufs
0 tunneling packets that can't find gif
0 packets discarded due to too many headers
0 failures of source address selection
0 forward cache hit
0 forward cache miss
divert6:
0 total packets received
0 dropped due to no socket
0 dropped due to full socket buffers
0 packets output
0 errors
icmp6:
0 calls to icmp6_error
0 errors not generated because old message was icmp6 or so
0 errors not generated because of rate limitation
Output packet histogram:
multicast listener report: 8
neighbor solicitation: 1
0 messages with bad code fields
0 messages < minimum length
0 bad checksums
0 messages with bad length
Histogram of error messages to be generated:
0 no route
0 administratively prohibited
0 beyond scope
0 address unreachable
0 port unreachable
0 packet too big
0 time exceed transit
0 time exceed reassembly
0 erroneous header field
0 unrecognized next header
0 unrecognized option
0 redirect
0 unknown
0 message responses generated
0 messages with too many ND options
0 messages with bad ND options
0 bad neighbor solicitation messages
0 bad neighbor advertisement messages
0 bad router solicitation messages
0 bad router advertisement messages
0 bad redirect messages
0 path MTU changes
pim6:
0 messages received
0 messages received with too few bytes
0 messages received with bad checksum
0 messages received with bad version
0 registers received
0 bad registers received
0 registers sent
rip6:
0 messages received
0 checksum calculations on inbound
0 messages with bad checksum
0 messages dropped due to no socket
0 multicast messages dropped due to no socket
0 messages dropped due to full socket buffers
0 delivered
0 datagrams output
[temp@temp ~]$ ifconfig -A hwfeatures
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33192
hwfeatures=0<>
priority: 0
groups: lo
inet 127.0.0.1 netmask 0xff000000
sk0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
hwfeatures=10<VLAN_MTU> hardmtu 9000
lladdr 00:0a:5e:5c:50:41
priority: 0
groups: egress
media: Ethernet autoselect (100baseTX full-duplex)
status: active
inet 10.0.0.10 netmask 0xffffff00 broadcast 10.0.0.255
sk1: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
hwfeatures=10<VLAN_MTU> hardmtu 9000
lladdr 00:0a:5e:65:ee:47
priority: 0
media: Ethernet autoselect (none)
status: no carrier
enc0: flags=0<>
hwfeatures=0<>
priority: 0
groups: enc
status: active
ral0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
hwfeatures=10<VLAN_MTU> hardmtu 1500
lladdr 00:1d:7d:34:0e:ec
priority: 4
groups: wlan
media: IEEE802.11 autoselect
status: no network
ieee80211: nwid "" 100dBm
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33192
hwfeatures=0<>
priority: 0
groups: pflog
[temp@temp ~]$ dmesg
OpenBSD 5.5-beta (GENERIC) #1: Sat Jan 25 11:49:03 EST 2014
r...@temp.d33p.com:/usr/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III ("GenuineIntel" 686-class, 512KB L2 cache) 599 MHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PSE36,MMX,FXSR,SSE,PERF
real mem = 267927552 (255MB)
avail mem = 251645952 (239MB)
mainbus0 at root
bios0 at mainbus0: AT/286+ BIOS, date 10/13/00, BIOS32 rev. 0 @ 0xfd790,
SMBIOS rev. 2.1 @ 0xefa30 (49 entries)
bios0: vendor Intel Corp. version "A11" date 10/13/2000
bios0: Dell Computer Corporation XPST600
acpi0 at bios0: rev 0
acpi0: sleep states S0 S1 S5
acpi0: tables DSDT FACP
acpi0: wakeup devices PCI0(S1) USB0(S1) UAR1(S1) KBC_(S1) MICE(S1)
acpitimer0 at acpi0: 3579545 Hz, 24 bits
acpiprt0 at acpi0: bus 0 (PCI0)
acpicpu0 at acpi0: C3, C2
acpipwrres0 at acpi0: PFAN, resource for FAN1
bios0: ROM list: 0xc0000/0xb800 0xcb800/0x800 0xcc000/0x800 0xe0000/0x4000!
0xe4000/0xc000
cpu0 at mainbus0: (uniprocessor)
mtrr: Pentium Pro MTRR support, 8 var ranges, 88 fixed ranges
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "Intel 82443BX AGP" rev 0x03
intelagp0 at pchb0
agp0 at intelagp0: aperture at 0xe0000000, size 0x10000000
ppb0 at pci0 dev 1 function 0 "Intel 82443BX AGP" rev 0x03
pci1 at ppb0 bus 1
vga1 at pci1 dev 0 function 0 "NVIDIA GeForce3" rev 0xa3
wsdisplay0 at vga1 mux 1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
piixpcib0 at pci0 dev 7 function 0 "Intel 82371AB PIIX4 ISA" rev 0x02
pciide0 at pci0 dev 7 function 1 "Intel 82371AB IDE" rev 0x01: DMA, channel
0 wired to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <Maxtor 52049H3>
wd0: 16-sector PIO, LBA, 19473MB, 39882528 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 ignored (disabled)
uhci0 at pci0 dev 7 function 2 "Intel 82371AB USB" rev 0x01: irq 9
piixpm0 at pci0 dev 7 function 3 "Intel 82371AB Power" rev 0x02: SMI
iic0 at piixpm0
spdmem0 at iic0 addr 0x50: 128MB SDRAM ECC PC100CL3
spdmem1 at iic0 addr 0x51: 128MB SDRAM ECC PC100CL3
ral0 at pci0 dev 14 function 0 "Ralink RT2561S" rev 0x00: irq 3, address
00:1d:7d:34:0e:ec
ral0: MAC/BBP RT2561C, RF RT2527
skc0 at pci0 dev 16 function 0 "3Com 3c940" rev 0x10, Yukon (0x1): irq 9
sk0 at skc0 port A: address 00:0a:5e:5c:50:41
eephy0 at sk0 phy 0: 88E1011 Gigabit PHY, rev. 3
skc1 at pci0 dev 17 function 0 "3Com 3c940" rev 0x10, Yukon (0x1): irq 10
sk1 at skc1 port A: address 00:0a:5e:65:ee:47
eephy1 at sk1 phy 0: 88E1011 Gigabit PHY, rev. 3
isa0 at piixpcib0
isadma0 at isa0
com0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
com0: console
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
pcppi0 at isa0 port 0x61
spkr0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: reported by CPUID; using exception 16
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
usb0 at uhci0: USB revision 1.0
uhub0 at usb0 "Intel UHCI root hub" rev 1.00/1.00 addr 1
vscsi0 at root
scsibus0 at vscsi0: 256 targets
softraid0 at root
scsibus1 at softraid0: 256 targets
root on wd0a (ffd0e9298ff269a9.a) swap on wd0b dump on wd0b
