On 24.1.2017. 10:59, Martin Pieuchot wrote: > ok? > > Index: net/bpf.c > =================================================================== > RCS file: /cvs/src/sys/net/bpf.c,v > retrieving revision 1.158 > diff -u -p -r1.158 bpf.c > --- net/bpf.c 9 Jan 2017 19:15:01 -0000 1.158 > +++ net/bpf.c 21 Jan 2017 00:55:26 -0000 > @@ -624,9 +624,9 @@ bpfwrite(dev_t dev, struct uio *uio, int > if (d->bd_hdrcmplt && dst.ss_family == AF_UNSPEC) > dst.ss_family = pseudo_AF_HDRCMPLT; > > - s = splsoftnet(); > + NET_LOCK(s); > error = ifp->if_output(ifp, m, (struct sockaddr *)&dst, NULL); > - splx(s); > + NET_UNLOCK(s); > > out: > bpf_put(d); >
Hi, i'm running this patch on firewall in production with source fetched few minutes ago and everything works fine ... on that firewall i have: carp pf pfsync isakmpd -K4 sasyncd dhcpd dhcpd sync tcpdump -lnqttti pflog0 pflow ipfix
