Subject: Re: syslog filling up with sysmon messages
To: None <bouyer@antioche.lip6.fr, newhouse@rockhead.com>
From: Paul Newhouse <newhouse@rockhead.com>
List: netbsd-help
Date: 10/11/2000 12:58:53
On Wed, 11 Oct 2000 20:24:31 +0200
   Manuel Bouyer <bouyer@antioche.lip6.fr> asks:

>	On Tue, Oct 10, 2000 at 10:27:18PM -0700, Paul Newhouse wrote:
>	> Platform i386
>	> 
>	> I'm running:
>	> 
>	> NetBSD bigbox 1.4ZD NetBSD 1.4ZD (BIGBOX) #3: Thu Jun 22 17:34:38 PDT 2000     \
>	>     newhouse@pimin:/usr/s
>	> rc/sys/arch/i386/compile/BIGBOX i386
>	> 
>	> recently I started getting my syslog filled up with:        
>	> 
>	> Oct 10 22:10:30 bigbox ipmon[121]: 22:10:30.514814             tlp1 @0:12 p \
>	>      <work>.com,789 -> rockhead.com,22 PR tcp len 20 27648 -AP IN
>	> 
>	> It's a short packet and I have an IPF rule that says log them.
>	> 
>	> The link is a pppd, tunneled through ssh, VPN to a Solaris 2.7 machine running 
>	> McKerras (sp?) pppd and ssh.  I didn't use to see these before and now the link 
>	> seems really mmm ... jumpy, whereas it was pretty smooth before.  I'm pretty 
>	> sure I haven't changed anything on either system in quite awhile.
>
>	What's the MTU of both interfaces ?

Problem connection (1460):
  home (client) side:
    kdebug 1 mru 1460 nopersist local nocrtscts nodeflate novjccomp \
	ipcp-accept-local ipcp-accept-remote netmask 255.255.255.255 linkname WORK ipparam VIDSL

  work (server) side (Solaris 2.7):
	mru 1460 nodetach nopersist proxyarp vj-max-slots 16 deflate 15,15 \
	lcp-echo-failure 100 lcp-echo-interval 10 local nocrtscts \
	172.31.255.5:172.31.255.6 netmask 255.255.255.255 ipparam WORK

YUCK!! I didn't realize each side had deviated so much!?!? hmmmm??

I'm remembering that 1500, vj & deflate wouldn't work for this connection, I had to turn 
them off or the connection wouldn't stay up very long.

This next connection has always been very stable.

Working connection (1500):
  home (server) side:
    nodetach lcp-echo-failure 30 lcp-echo-interval 15 nopersist noauth \
	172.31.255.2:172.31.255.1 vj-max-slots 16 deflate 15,15 local nocrtscts \
	netmask 255.255.255.252 mtu 1500 domain wan.vpn linkname ALAN ipparam CABLEVPN

  remote (client) side (NetBSD, but on occasion FreeBSD and Linux):
    nodetach lcp-echo-failure 30 lcp-echo-interval 5 nopersist noauth \
	172.31.255.1:172.31.255.2 vj-max-slots 16 deflate 15,15 local nocrtscts \
	netmask 255.255.255.252 mtu 1500 domain wan.vpn ipparam DSLVPN

Paul

P.S. - Both connections die a mysterious stagnation death over @home.

 
:ex
:vi
:q