Racoon(ipsec-tools) enters sbwait state or 100% CPU utilization quite often on RELENG_1_2

[Scott Ullrich]

On 9/24/07, Christopher Cowart <ccowart at rescomp.berkeley.edu> wrote:
> On Sat, Aug 18, 2007 at 03:58:16PM -0400, Scott Ullrich wrote:
> How are you detecting when racoon gets wedged? I'd like to replicate
> that on our systems.

Our script is primitive at best but does seem to do the job okay:
http://pfsense.com/cgi-bin/cvsweb.cgi/pfSense/usr/local/sbin/racoon_watch.sh?rev=1.8;content-type=text%2Fplain

Let me know if it helps.  This generally well detect the problem quick
enough to minimize downtime between the tunnels (in our experience).

Scott