View Single Post
Old 17th June 2013
Martillo Martillo is offline
Semper deinceps corda
 
Join Date: Apr 2013
Location: Madrid, Spain
Posts: 79
Default

The system is amd64 5.3 patched until 007. No custom patches.

The network interface I use is msk0. The other one (msk1) has an inverse RJ45 cable attached (but not connected to anything else).

I could reproduce the smbclient malfunction and the loss of network at first intent. The outputs of the commands are:

$ ifconfig
Code:
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33152
	priority: 0
	groups: lo
	inet6 ::1 prefixlen 128
	inet6 fe80::1%lo0 prefixlen 64 scopeid 0x4
	inet 127.0.0.1 netmask 0xff000000
msk0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	lladdr 00:24:8c:94:76:52
	priority: 0
	groups: egress
	media: Ethernet autoselect (1000baseT full-duplex,rxpause,txpause)
	status: active
	inet 192.168.1.11 netmask 0xffffff00 broadcast 192.168.1.255
	inet6 fe80::224:8cff:fe94:7652%msk0 prefixlen 64 scopeid 0x1
msk1: flags=8802<BROADCAST,SIMPLEX,MULTICAST> mtu 1500
	lladdr 00:24:8c:94:76:51
	priority: 0
	media: Ethernet autoselect (none)
	status: no carrier
enc0: flags=0<>
	priority: 0
	groups: enc
	status: active
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33152
	priority: 0
	groups: pflog
$ netstat -ni
Code:
Name    Mtu   Network     Address              Ipkts Ierrs    Opkts Oerrs Colls
lo0     33152 <Link>                               0     0        0     0     0
lo0     33152 ::1/128     ::1                      0     0        0     0     0
lo0     33152 fe80::%lo0/ fe80::1%lo0              0     0        0     0     0
lo0     33152 127/8       127.0.0.1                0     0        0     0     0
msk0    1500  <Link>      00:24:8c:94:76:52    26132     0    81368     0     0
msk0    1500  192.168.1/2 192.168.1.11         26132     0    81368     0     0
msk0    1500  fe80::%msk0 fe80::224:8cff:fe    26132     0    81368     0     0
msk1*   1500  <Link>      00:24:8c:94:76:51        0     0        0     0     0
enc0*   0     <Link>                               0     0        0     0     0
pflog0  33152 <Link>                               0     0      622     0     0
$ netstat -nm
Code:
159 mbufs in use:
	99 mbufs allocated to data
	11 mbufs allocated to packet headers
	49 mbufs allocated to socket names and addresses
49/132/6144 mbuf 2048 byte clusters in use (current/peak/max)
0/8/6144 mbuf 4096 byte clusters in use (current/peak/max)
0/8/6144 mbuf 8192 byte clusters in use (current/peak/max)
13/84/6144 mbuf 9216 byte clusters in use (current/peak/max)
0/8/6144 mbuf 12288 byte clusters in use (current/peak/max)
0/8/6144 mbuf 16384 byte clusters in use (current/peak/max)
0/8/6144 mbuf 65536 byte clusters in use (current/peak/max)
956 Kbytes allocated to network (26% in use)
0 requests for memory denied
0 requests for memory delayed
0 calls to protocol drain routines
$ netstat -ns
Code:
ip:
	25901 total packets received
	0 bad header checksums
	0 with size smaller than minimum
	0 with data size < data length
	0 with header length < data size
	0 with data length < header length
	0 with bad options
	0 with incorrect version number
	0 fragments received
	0 fragments dropped (duplicates or out of space)
	0 malformed fragments dropped
	0 fragments dropped after timeout
	0 packets reassembled ok
	25273 packets for this host
	0 packets for unknown/unsupported protocol
	0 packets forwarded
	0 packets not forwardable
	0 redirects sent
	81162 packets sent from this host
	0 packets sent with fabricated ip header
	0 output packets dropped due to no bufs, etc.
	0 output packets discarded due to no route
	0 output datagrams fragmented
	0 fragments created
	0 datagrams that can't be fragmented
	0 fragment floods
	0 packets with ip length > max ip packet size
	0 tunneling packets that can't find gif
	0 datagrams with bad address in header
	0 input datagrams checksum-processed by hardware
	0 output datagrams checksum-processed by hardware
	0 multicast packets which we don't join
icmp:
	0 calls to icmp_error
	0 errors not generated because old message was icmp
	0 messages with bad code fields
	0 messages < minimum length
	0 bad checksums
	0 messages with bad length
	0 echo requests to broadcast/multicast rejected
	0 message responses generated
igmp:
	0 messages received
	0 messages received with too few bytes
	0 messages received with bad checksum
	0 membership queries received
	0 membership queries received with invalid field(s)
	0 membership reports received
	0 membership reports received with invalid field(s)
	0 membership reports received for groups to which we belong
	0 membership reports sent
ipencap:
	0 total input packets
	0 total output packets
	0 packets shorter than header shows
	0 packets dropped due to policy
	0 packets with possibly spoofed local addresses
	0 packets were dropped due to full output queue
	0 input bytes
	0 output bytes
	0 protocol family mismatches
	0 attempts to use tunnel with unspecified endpoint(s)
tcp:
	79091 packets sent
		64098 data packets (88704953 bytes)
		37 data packets (21290 bytes) retransmitted
		0 fast retransmitted packets
		9478 ack-only packets (10971 delayed)
		0 URG only packets
		0 window probe packets
		3276 window update packets
		2202 control packets
		0 packets hardware-checksummed
	23426 packets received
		5308 acks (for 88617780 bytes)
		714 duplicate acks
		0 acks for unsent data
		0 acks for old data
		16854 packets (17825735 bytes) received in-sequence
		419 completely duplicate packets (11457 bytes)
		0 old duplicate packets
		0 packets with some duplicate data (0 bytes duplicated)
		806 out-of-order packets (31944 bytes)
		0 packets (0 bytes) of data after window
		0 window probes
		6 window update packets
		132 packets received after close
		0 discarded for bad checksums
		0 discarded for bad header offset fields
		0 discarded because packet too short
		0 discarded for missing IPsec protection
		0 discarded due to memory shortage
		0 packets hardware-checksummed
		0 bad/missing md5 checksums
		0 good md5 checksums
	1101 connection requests
	0 connection accepts
	1097 connections established (including accepts)
	1099 connections closed (including 18 drops)
	0 connections drained
	0 embryonic connections dropped
	6379 segments updated rtt (of 5686 attempts)
	55 retransmit timeouts
		0 connections dropped by rexmit timeout
	0 persist timeouts
	0 keepalive timeouts
		0 keepalive probes sent
		0 connections dropped by keepalive
	36 correct ACK header predictions
	14957 correct data packet header predictions
	185 PCB cache misses
	0 ECN connections accepted
		0 ECE packets received
		0 CWR packets received
		0 CE packets received
		0 ECT packets sent
		0 ECE packets sent
		0 CWR packets sent
			cwr by fastrecovery: 2
			cwr by timeout: 55
			cwr by ecn: 0
	0 bad connection attempts
	0 SYN cache entries added
		0 hash collisions
		0 completed
		0 aborted (no space to build PCB)
		0 timed out
		0 dropped due to overflow
		0 dropped due to bucket overflow
		0 dropped due to RST
		0 dropped due to ICMP unreachable
	0 SYN,ACKs retransmitted
	0 duplicate SYNs received for entries already in the cache
	0 SYNs dropped (no route or no space)
	2 SACK recovery episodes
		2 segment rexmits in SACK recovery episodes
		2896 byte rexmits in SACK recovery episodes
	119 SACK options received
	22 SACK options sent
udp:
	1847 datagrams received
	0 with incomplete header
	0 with bad data length field
	0 with bad checksum
	0 with no checksum
	0 input packets hardware-checksummed
	0 output packets hardware-checksummed
	0 dropped due to no socket
	43 broadcast/multicast datagrams dropped due to no socket
	0 dropped due to missing IPsec protection
	0 dropped due to full socket buffers
	1804 delivered
	1819 datagrams output
	5 missed PCB cache
esp:
	0 input ESP packets
	0 output ESP packets
	0 packets from unsupported protocol families
	0 packets shorter than header shows
	0 packets dropped due to policy
	0 packets for which no TDB was found
	0 input packets that failed to be processed
	0 packets with bad encryption received
	0 packets that failed verification received
	0 packets for which no XFORM was set in TDB received
	0 packets were dropped due to full output queue
	0 packets where counter wrapping was detected
	0 possibly replayed packets received
	0 packets with bad payload size or padding received
	0 packets attempted to use an invalid TDB
	0 packets got larger than max IP packet size
	0 packets that failed crypto processing
	0 input UDP encapsulated ESP packets
	0 output UDP encapsulated ESP packets
	0 UDP packets for non-encapsulating TDB received
	0 input bytes
	0 output bytes
ah:
	0 input AH packets
	0 output AH packets
	0 packets from unsupported protocol families
	0 packets shorter than header shows
	0 packets dropped due to policy
	0 packets for which no TDB was found
	0 input packets that failed to be processed
	0 packets that failed verification received
	0 packets for which no XFORM was set in TDB received
	0 packets were dropped due to full output queue
	0 packets where counter wrapping was detected
	0 possibly replayed packets received
	0 packets with bad authenticator length received
	0 packets attempted to use an invalid TDB
	0 packets got larger than max IP packet size
	0 packets that failed crypto processing
	0 input bytes
	0 output bytes
etherip:
	0 packets shorter than header shows
	0 packets were dropped due to full output queue
	0 packets were dropped because of no interface/bridge information
	0 packets dropped due to policy
	0 packets dropped for other reasons
	0 input ethernet-in-IP packets
	0 output ethernet-in-IP packets
	0 input bytes
	0 output bytes
ipcomp:
	0 input IPCOMP packets
	0 output IPCOMP packets
	0 packets from unsupported protocol families
	0 packets shorter than header shows
	0 packets dropped due to policy
	0 packets for which no TDB was found
	0 input packets that failed to be processed
	0 packets for which no XFORM was set in TDB received
	0 packets were dropped due to full output queue
	0 packets where counter wrapping was detected
	0 packets attempted to use an invalid TDB
	0 packets got larger than max IP packet size
	0 packets that failed (de)compression processing
	0 packets less than minimum compression length
	0 input bytes
	0 output bytes
carp:
	0 packets received (IPv4)
	0 packets received (IPv6)
		0 packets discarded for bad interface
		0 packets discarded for wrong TTL
		0 packets shorter than header
		0 discarded for bad checksums
		0 discarded packets with a bad version
		0 discarded because packet too short
		0 discarded for bad authentication
		0 discarded for unknown vhid
		0 discarded because of a bad address list
	0 packets sent (IPv4)
	0 packets sent (IPv6)
		0 send failed due to mbuf memory error
	0 transitions to master
pfsync:
	0 packets received (IPv4)
	0 packets received (IPv6)
		0 packets discarded for bad interface
		0 packets discarded for bad ttl
		0 packets shorter than header
		0 packets discarded for bad version
		0 packets discarded for bad HMAC
		0 packets discarded for bad action
		0 packets discarded for short packet
		0 states discarded for bad values
		0 stale states
		0 failed state lookup/inserts
	0 packets sent (IPv4)
	0 packets sent (IPv6)
		0 send failed due to mbuf memory error
		0 send error
divert:
	0 total packets received
	0 dropped due to no socket
	0 dropped due to full socket buffers
	0 packets output
	0 errors
pflow:
	0 flows sent
	0 packets sent
		0 send failed due to mbuf memory error
		0 send error
ip6:
	0 total packets received
	0 with size smaller than minimum
	0 with data size < data length
	0 with bad options
	0 with incorrect version number
	0 fragments received
	0 fragments dropped (duplicates or out of space)
	0 fragments dropped after timeout
	0 fragments that exceeded limit
	0 packets reassembled ok
	0 packets for this host
	0 packets forwarded
	0 packets not forwardable
	0 redirects sent
	9 packets sent from this host
	0 packets sent with fabricated ip header
	0 output packets dropped due to no bufs, etc.
	0 output packets discarded due to no route
	0 output datagrams fragmented
	0 fragments created
	0 datagrams that can't be fragmented
	0 packets that violated scope rules
	0 multicast packets which we don't join
	Mbuf statistics:
		0 one mbufs
		0 one ext mbufs
		0 two or more ext mbufs
	0 tunneling packets that can't find gif
	0 packets discarded due to too many headers
	0 failures of source address selection
	0 forward cache hit
	0 forward cache miss
divert6:
	0 total packets received
	0 dropped due to no socket
	0 dropped due to full socket buffers
	0 packets output
	0 errors
icmp6:
	0 calls to icmp6_error
	0 errors not generated because old message was icmp6 or so
	0 errors not generated because of rate limitation
	Output packet histogram:
		multicast listener report: 8
		neighbor solicitation: 1
	0 messages with bad code fields
	0 messages < minimum length
	0 bad checksums
	0 messages with bad length
	Histogram of error messages to be generated:
		0 no route
		0 administratively prohibited
		0 beyond scope
		0 address unreachable
		0 port unreachable
		0 packet too big
		0 time exceed transit
		0 time exceed reassembly
		0 erroneous header field
		0 unrecognized next header
		0 unrecognized option
		0 redirect
		0 unknown
	0 message responses generated
	0 messages with too many ND options
	0 messages with bad ND options
	0 bad neighbor solicitation messages
	0 bad neighbor advertisement messages
	0 bad router solicitation messages
	0 bad router advertisement messages
	0 bad redirect messages
	0 path MTU changes
pim6:
	0 messages received
	0 messages received with too few bytes
	0 messages received with bad checksum
	0 messages received with bad version
	0 registers received
	0 bad registers received
	0 registers sent
rip6:
	0 messages received
	0 checksum calculations on inbound
	0 messages with bad checksum
	0 messages dropped due to no socket
	0 multicast messages dropped due to no socket
	0 messages dropped due to full socket buffers
	0 delivered
	0 datagrams output
# pfctl -s info
Code:
Status: Enabled for 0 days 02:37:13              Debug: err

State Table                          Total             Rate
  current entries                       19               
  searches                          107103           11.4/s
  inserts                             2406            0.3/s
  removals                            2387            0.3/s
Counters
  match                               3038            0.3/s
  bad-offset                             0            0.0/s
  fragment                               0            0.0/s
  short                                  0            0.0/s
  normalize                              0            0.0/s
  memory                                 0            0.0/s
  bad-timestamp                          0            0.0/s
  congestion                             0            0.0/s
  ip-option                            628            0.1/s
  proto-cksum                            0            0.0/s
  state-mismatch                         0            0.0/s
  state-insert                           0            0.0/s
  state-limit                            0            0.0/s
  src-limit                              0            0.0/s
  synproxy                               0            0.0/s
# pfctl -s memory
Code:
states        hard limit    10000
src-nodes     hard limit    10000
frags         hard limit     1536
tables        hard limit     1000
table-entries hard limit   200000
Reply With Quote