From nobody Mon Nov 15 18:22:54 2021 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 3F3271897DB2 for ; Mon, 15 Nov 2021 18:22:54 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4HtHcG137Tz3n8b for ; Mon, 15 Nov 2021 18:22:54 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 0480C1E7A8 for ; Mon, 15 Nov 2021 18:22:54 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 1AFIMsFn021565 for ; Mon, 15 Nov 2021 18:22:54 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 1AFIMrrU021564 for bugs@FreeBSD.org; Mon, 15 Nov 2021 18:22:53 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 259864] PF periodically drops packets that belong to established session, thus stalling the session Date: Mon, 15 Nov 2021 18:22:54 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: new X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 12.2-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: emz@norma.perm.ru X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: bug_id short_desc product version rep_platform op_sys bug_status bug_severity priority component assigned_to reporter Message-ID: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@freebsd.org MIME-Version: 1.0 X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D259864 Bug ID: 259864 Summary: PF periodically drops packets that belong to established session, thus stalling the session Product: Base System Version: 12.2-RELEASE Hardware: Any OS: Any Status: New Severity: Affects Only Me Priority: --- Component: kern Assignee: bugs@FreeBSD.org Reporter: emz@norma.perm.ru PF periodically drops packets of established session, stalling the session. Here's an example of such session. Flow: 62.109.28.82 <---> WAN <---> 91.206.242.1 <---> 91.206.242.9 Client is downloading a 14 MB file via HTTP, 91.206.242.9 is server, 62.109.28.82 is a client. Packet dumps and PF debug log is taken on 91.206.242.1. Since the file is rather large, only the stalled end of the session is displayed. However, PF debug massages for this session are displ= ayed for the entire session. Notice the ACK 15333017 that never makes it to the destination. It's also weird, but there's no PF state mismatches or error f= or the packet containing the ack itself. Both captures ends when the session is already stalled (final RST exchange is out of the scope), by Ctrl-Break. Also, the tcpdump on the default pflog0 device is silent for such packets. Why I'm sure this is related to the PF: because it isn't reproducing with t= he packet filter switched off. Outer interface: =3D=3D=3DCut=3D=3D=3D [...] 12:16:37.545209 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15291025, win 1652, options [nop,nop,TS val 2720237534 ecr 2777961105], len= gth 0 12:16:37.545278 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15296817, win 1652, options [nop,nop,TS val 2720237534 ecr 2777961105], len= gth 0 12:16:37.545436 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15304057, win 1652, options [nop,nop,TS val 2720237535 ecr 2777961105], len= gth 0 12:16:37.545985 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15308401, win 1652, options [nop,nop,TS val 2720237535 ecr 2777961105], len= gth 0 12:16:37.546086 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15314193, win 1652, options [nop,nop,TS val 2720237536 ecr 2777961105], len= gth 0 12:16:37.563993 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15319985, win 1652, options [nop,nop,TS val 2720237554 ecr 2777961125], len= gth 0 12:16:37.564063 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15324329, win 1652, options [nop,nop,TS val 2720237555 ecr 2777961125], len= gth 0 12:16:37.564445 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15327225, win 1652, options [nop,nop,TS val 2720237556 ecr 2777961135], len= gth 0 12:16:37.564696 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15331569, win 1652, options [nop,nop,TS val 2720237557 ecr 2777961135], len= gth 0 12:16:37.607557 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720237598 ecr 2777961135], len= gth 0 12:16:37.768865 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777961365 ecr 2720237530], length 1448: HTTP 12:16:37.797072 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720237787 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:16:38.026968 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777961625 ecr 2720237530], length 1448: HTTP 12:16:38.044806 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720238045 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:16:38.349576 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777961945 ecr 2720237530], length 1448: HTTP 12:16:38.385464 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720238368 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:16:38.798092 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777962395 ecr 2720237530], length 1448: HTTP 12:16:38.826845 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720238816 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:16:39.477080 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777963075 ecr 2720237530], length 1448: HTTP 12:16:39.510688 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720239497 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:16:40.643251 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777964235 ecr 2720237530], length 1448: HTTP 12:16:40.673700 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720240661 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:16:42.759423 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777966355 ecr 2720237530], length 1448: HTTP 12:16:42.790404 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720242777 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:16:46.809355 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777970405 ecr 2720237530], length 1448: HTTP 12:16:46.840079 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720246827 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:16:54.692330 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777978285 ecr 2720237530], length 1448: HTTP 12:16:54.723206 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15333017, win 1652, options [nop,nop,TS val 2720254710 ecr 2777961135,nop,nop,sack 1 {15260617:15262065}], length 0 12:17:09.157762 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [F.], seq = 150, ack 15333017, win 1652, options [nop,nop,TS val 2720269144 ecr 2777961135], length 0 12:17:09.377353 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [F.], seq = 150, ack 15333017, win 1652, options [nop,nop,TS val 2720269378 ecr 2777961135], length 0 ^C =3D=3D=3DCut=3D=3D=3D Innter interface: =3D=3D=3DCut=3D=3D=3D [...] 12:16:37.537666 IP 62.109.28.82.52982 > 91.206.242.9.8080: Flags [.], ack 15260617, win 1652, options [nop,nop,TS val 2720237530 ecr 2777961105], len= gth 0 12:16:37.538251 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15324329:15325777, ack 150, win 4107, options [nop,nop,TS val 2777961135 ecr 2720237529], length 1448: HTTP 12:16:37.538266 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15325777:15327225, ack 150, win 4107, options [nop,nop,TS val 2777961135 ecr 2720237529], length 1448: HTTP 12:16:37.538274 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15327225:15328673, ack 150, win 4107, options [nop,nop,TS val 2777961135 ecr 2720237530], length 1448: HTTP 12:16:37.538282 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15328673:15330121, ack 150, win 4107, options [nop,nop,TS val 2777961135 ecr 2720237530], length 1448: HTTP 12:16:37.538312 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15330121:15331569, ack 150, win 4107, options [nop,nop,TS val 2777961135 ecr 2720237530], length 1448: HTTP 12:16:37.538328 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15331569:15333017, ack 150, win 4107, options [nop,nop,TS val 2777961135 ecr 2720237530], length 1448: HTTP 12:16:37.768852 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777961365 ecr 2720237530], length 1448: HTTP 12:16:38.026950 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777961625 ecr 2720237530], length 1448: HTTP 12:16:38.349553 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777961945 ecr 2720237530], length 1448: HTTP 12:16:38.798075 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777962395 ecr 2720237530], length 1448: HTTP 12:16:39.477063 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777963075 ecr 2720237530], length 1448: HTTP 12:16:40.643234 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777964235 ecr 2720237530], length 1448: HTTP 12:16:42.759404 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777966355 ecr 2720237530], length 1448: HTTP 12:16:46.809338 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777970405 ecr 2720237530], length 1448: HTTP 12:16:54.692313 IP 91.206.242.9.8080 > 62.109.28.82.52982: Flags [.], seq 15260617:15262065, ack 150, win 4107, options [nop,nop,TS val 2777978285 ecr 2720237530], length 1448: HTTP ^C =3D=3D=3DCut=3D=3D=3D PF debug: =3D=3D=3DCut=3D=3D=3D Nov 15 12:16:25 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D782592198 high=3D782801846 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D782670390 len=3D0 ackskew=3D-78192 pkts= =3D394:1710 dir=3Din,fwd Nov 15 12:16:25 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:25 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D782592198 high=3D782801846 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D782674734 len=3D0 ackskew=3D-82536 pkts= =3D394:1710 dir=3Din,fwd Nov 15 12:16:25 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:25 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D782592198 high=3D782801846 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D782684870 len=3D0 ackskew=3D-92672 pkts= =3D394:1710 dir=3Din,fwd Nov 15 12:16:25 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:25 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D782592198 high=3D782801846 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D782690662 len=3D0 ackskew=3D-98464 pkts= =3D394:1710 dir=3Din,fwd Nov 15 12:16:25 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:25 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D782592198 high=3D782801846 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D782692110 len=3D0 ackskew=3D-99912 pkts= =3D394:1710 dir=3Din,fwd Nov 15 12:16:25 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:32 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D786691630 high=3D786937614 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D786766926 len=3D0 ackskew=3D-75296 pkts= =3D1069:4605 dir=3Din,fwd Nov 15 12:16:32 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:32 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D786691630 high=3D786937614 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D786788646 len=3D0 ackskew=3D-97016 pkts= =3D1072:4636 dir=3Din,fwd Nov 15 12:16:32 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:32 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D786691630 high=3D786937614 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D786792990 len=3D0 ackskew=3D-101360 pkt= s=3D1072:4636 dir=3Din,fwd Nov 15 12:16:32 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:32 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D786691630 high=3D786937614 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D786804574 len=3D0 ackskew=3D-112944 pkt= s=3D1072:4636 dir=3Din,fwd Nov 15 12:16:32 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:32 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D786691630 high=3D786937614 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D786810366 len=3D0 ackskew=3D-118736 pkt= s=3D1072:4636 dir=3Din,fwd Nov 15 12:16:32 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:32 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1424 mo= dulator=3D0 wscale=3D7] [lo=3D786691630 high=3D786937614 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D786829190 len=3D0 ackskew=3D-137560 pkt= s=3D1072:4636 dir=3Din,fwd Nov 15 12:16:32 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:34 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1494 mo= dulator=3D0 wscale=3D7] [lo=3D789374774 high=3D789626822 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D789444278 len=3D0 ackskew=3D-69504 pkts= =3D1494:6459 dir=3Din,fwd Nov 15 12:16:34 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795483886 len=3D0 ackskew=3D-68056 pkts= =3D2452:10662 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795486782 len=3D0 ackskew=3D-70952 pkts= =3D2452:10662 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4pf: state reuse TCP outA wire: seq=3D1741467272 (1741467272) ack=3D795496918 = len=3D0 ackskew=3D-81088 pkts=3D2452:10662 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: 192.168.0.247pf: State failure on: 3 |=20= =20=20=20 -- Nov 15 12:16:37 gw0 kernel: wire: 62.109.28.82:52982 91.206.242.9:8080 sta= ck: - [lo=3D1741467272 high=3D1741730120 win=3D1652 modulator=3D0 wscale=3D7] [= lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscale=3D6] 4:4 A seq=3D174146727= 2 (1741467272) ack=3D795502710 len=3D0 ackskew=3D-86880 pkts=3D2452:10662 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795507054 len=3D0 ackskew=3D-91224 pkts= =3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795511398 len=3D0 ackskew=3D-95568 pkts= =3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795517190 len=3D0 ackskew=3D-101360 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795524430 len=3D0 ackskew=3D-108600 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795528774 len=3D0 ackskew=3D-112944 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795534566 len=3D0 ackskew=3D-118736 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795540358 len=3D0 ackskew=3D-124528 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795544702 len=3D0 ackskew=3D-128872 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795547598 len=3D0 ackskew=3D-131768 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795551942 len=3D0 ackskew=3D-136112 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795415830 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-137560 pkt= s=3D2452:10668 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:37 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10669 dir=3Din,fwd Nov 15 12:16:37 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:38 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10670 dir=3Din,fwd Nov 15 12:16:38 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:38 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10671 dir=3Din,fwd Nov 15 12:16:38 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:39 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10672 dir=3Din,fwd Nov 15 12:16:39 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:39 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10673 dir=3Din,fwd Nov 15 12:16:39 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:40 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10674 dir=3Din,fwd Nov 15 12:16:40 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:42 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10675 dir=3Din,fwd Nov 15 12:16:42 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:46 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10676 dir=3Din,fwd Nov 15 12:16:46 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:16:54 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10677 dir=3Din,fwd Nov 15 12:16:54 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:09 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10677 dir=3Din,fwd Nov 15 12:17:09 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:09 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10677 dir=3Din,fwd Nov 15 12:17:09 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:09 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10677 dir=3Din,fwd Nov 15 12:17:09 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:10 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10677 dir=3Din,fwd Nov 15 12:17:10 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 Nov 15 12:17:10 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467273) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10678 dir=3Din,fwd Nov 15 12:17:10 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:11 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10678 dir=3Din,fwd Nov 15 12:17:11 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:13 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10678 dir=3Din,fwd Nov 15 12:17:13 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:16 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10678 dir=3Din,fwd Nov 15 12:17:16 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:24 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10678 dir=3Din,fwd Nov 15 12:17:24 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:25 gw0 kernel: pf: BAD state: pf: OK ICMP 5:1 TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D17417= 30120 win=3D1652 modulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win= =3D4107 modulator=3D0 wscale=3D6192.168.0.248 -> 192.168.0.230 state: TCP out wire: 192.168.0.230:3340 192.168.11.4] 4:4 A seq=3D1741467272 (1741467273) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts=3D2452:10679 dir=3Din,fwd Nov 15 12:17:25 gw0 kernel: :59016pf: State failure on: 3 |=20=20=20= =20 -- Nov 15 12:17:39 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 FA seq=3D1741467272 (1741467272) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10679 dir=3Din,fwd Nov 15 12:17:39 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 -- Nov 15 12:17:41 gw0 kernel: pf: BAD state: TCP in wire: 62.109.28.82:52982 91.206.242.9:8080 stack: - [lo=3D1741467272 high=3D1741730120 win=3D1652 mo= dulator=3D0 wscale=3D7] [lo=3D795482438 high=3D795692446 win=3D4107 modulator=3D0 wscal= e=3D6] 4:4 A seq=3D1741467272 (1741467273) ack=3D795553390 len=3D0 ackskew=3D-70952 pkts= =3D2452:10680 dir=3Din,fwd Nov 15 12:17:41 gw0 kernel: pf: State failure on: 3 |=20=20=20=20 =3D=3D=3DCut=3D=3D=3D Please let me know if full session capture is needed, can recapture and att= ach as gzipped files. --=20 You are receiving this mail because: You are the assignee for the bug.=