[Bug 222126] pf is not clearing expired states
bugzilla-noreply at freebsd.org
bugzilla-noreply at freebsd.org
Sun Oct 1 08:36:08 UTC 2017
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=222126
--- Comment #31 from hlh at restart.be ---
(In reply to Kristof Provost from comment #27)
When the problem occurs, no more line in the dtrace log.
Here are the last 20 lines:
[root at norquay ~]# tail -n 20 /var/log/pf.dtrace.log-before
0 2257 pf_purge_expired_states:entry
0 2258 pf_purge_expired_states:return
0 2258 pf_purge_expired_states:return
0 2257 pf_purge_expired_states:entry
0 2258 pf_purge_expired_states:return
0 2258 pf_purge_expired_states:return
3 2257 pf_purge_expired_states:entry
3 2258 pf_purge_expired_states:return
3 2258 pf_purge_expired_states:return
3 2257 pf_purge_expired_states:entry
3 2258 pf_purge_expired_states:return
3 2258 pf_purge_expired_states:return
3 2257 pf_purge_expired_states:entry
3 2258 pf_purge_expired_states:return
3 2258 pf_purge_expired_states:return
1 2257 pf_purge_expired_states:entry
1 2258 pf_purge_expired_states:return
1 2258 pf_purge_expired_states:return
then I run:
[root at norquay ~]# echo "set timeout interval 5" | pfctl -mf -
And the dtrace log resume; the first 20 lines are:
[root at norquay ~]# head -n 20 /var/log/pf.dtrace.log
CPU ID FUNCTION:NAME
1 2257 pf_purge_expired_states:entry
1 2258 pf_purge_expired_states:return
1 2258 pf_purge_expired_states:return
0 2257 pf_purge_expired_states:entry
0 2258 pf_purge_expired_states:return
0 2258 pf_purge_expired_states:return
0 2257 pf_purge_expired_states:entry
0 2258 pf_purge_expired_states:return
0 2258 pf_purge_expired_states:return
0 2257 pf_purge_expired_states:entry
0 2258 pf_purge_expired_states:return
0 2258 pf_purge_expired_states:return
0 2257 pf_purge_expired_states:entry
0 2258 pf_purge_expired_states:return
0 2258 pf_purge_expired_states:return
0 2257 pf_purge_expired_states:entry
0 2258 pf_purge_expired_states:return
0 2258 pf_purge_expired_states:return
0 2258 pf_purge_expired_states:return
PS I have the 2 log files and we can go back more then 20 lines.
--
You are receiving this mail because:
You are the assignee for the bug.
More information about the freebsd-pf
mailing list