Subject: Re: something strange with mbuf length...
To: Konstantin KABASSANOV <>
From: John R. Shannon <>
List: tech-net
Date: 04/23/2006 06:08:24
Konstantin KABASSANOV wrote:
>> -----Message d'origine-----
>> De : [mailto:current-users-
>>] De la part de John R. Shannon
>> Envoyé : samedi 22 avril 2006 16:13
>> À : Steven M. Bellovin
>> Cc : Rui Paulo;;
>> Objet : Re: something strange with mbuf length...
>> Steven M. Bellovin wrote:
>>> On Sat, 22 Apr 2006 13:13:19 +0100, Rui Paulo <> wrote:
>>>> "Konstantin KABASSANOV" <> writes:
>>>>> I do use ipfilter.
>>>> Since you and Steve both use ipfilter, can this be the problem ?
>>> That's very high on my list of suspects.  I've had the crash when using
>>> two different interfaces, ath0 and ppp0.  The ppp0 instance doesn't
>>> support v6; in fact, when I fire up ntpd after starting that link, I get
>>> bind() fd 12, family 24, port 123, addr fe80::211:25ff:fe43:e8a4,
>> in6_is_addr_multicast=0 flags=0 fails: Can't assign requested address
>>> My filter rules are very simple, too; no NAT, no proxies, just blocking
>> a few ports.
>>> 		--Steven M. Bellovin,
>> My lockups are unrelated. I'm using neither ath0, ppp0 or any packet
>> filter. Rate of occurance is several time per day.
> Is your host forwarding ip traffic between different interfaces, or does it
> use libpcap?
> Konstantin

No. I'm experiencing lockups and simultaneous reboots on a SMP 
workstation with a single NIC (wm0). No use of libpcap.

I have another system, with it's OS built from the same source, that 
runs ipfilter; I've seen no problems with it.

John R. Shannon, CISSP