Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Strange Reboot-Problems on NexCom 1085L (Oversized Packets?)

    Scheduled Pinned Locked Moved Hardware
    17 Posts 4 Posters 7.5k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      sai
      last edited by

      Well complaining to the data center might help. They might be able to help stop at the switch or router level.

      Linux vs FreeBSD is a bit OT  just now :-\

      I had the feeling that my problem was related to getting my ip address by DHCP, but that does not seem to be the case here.

      I definitely do not think that the problem is related to hardware as it seems to strike all kinds of ethernet cards. I have the same machine and modem so it was not that either.

      1 Reply Last reply Reply Quote 0
      • C
        CryoGenID
        last edited by

        Well they have a really huge cisco router there so I really doubt that the problem lies there…
        As with a SonicWall everything worked perfectly...

        As that seems to be a bug in FreeBSD as you say we can only hope that it gets fixed soon...  :-\

        1 Reply Last reply Reply Quote 0
        • S
          sai
          last edited by

          The bug seems to have been there for some time. Not too many people get it, and its difficult to reproduce. Hard to get something like that fixed.

          Its a bit sad that Linux works fine where FreeBSD falls down…

          I am not saying that there is a prolem with the cisco router, but that it could be stopped there. Make a noise, say that you are getting these huge packets that are messing up your machine. They might help out. Thats what I did. It wasnt the ISPs fault but they did what they could even though I am not a huge customer.

          1 Reply Last reply Reply Quote 0
          • S
            sai
            last edited by

            just a thought… if you are using gig ethernet cards, can you not increase the MTU significantly ? Might help..

            1 Reply Last reply Reply Quote 0
            • C
              CryoGenID
              last edited by

              Thanks for your help  :)

              But wouldn't an increase of the MTU affect all my Servers and those on the other side of pfSense?
              As the packets would have to be fragmented anyway to 1500 ethernet packet-length, wouldn't they?

              I've now taken the NexCom back to the office and will try to set up a test-environment on Sunday where I will
              attach two PC's and hammer pfSense with packets using "iperf" …
              Perhaps I can then try and make that error appear again and find a solution for it ;-)

              1 Reply Last reply Reply Quote 0
              • S
                sai
                last edited by

                I've used Iperf to test the performance of m0n0 based machines but never saw any problems. The problem packets are malformed - undefined ethertypes. You wont see that kind of output from iperf.

                Let us know what you find out.

                1 Reply Last reply Reply Quote 0
                • H
                  hoba
                  last edited by

                  Btw, even if pfSense would ignore these packets and not crash this probably has a negative effect on performance and throughput. They consume bandwidth on the line and you usually don't want to have that and if you are accounted for volume it's even worse as this traffic will count in too. Guess you want to get rid of this traffic in any case.

                  1 Reply Last reply Reply Quote 0
                  • C
                    CryoGenID
                    last edited by

                    Hm.. how could I manually create those malformed packets in my test-scenario?

                    Any ideas?

                    Because I somehow have to trick pfSense into these errors to see if Changes really
                    work ;-)

                    Thanks :-)

                    1 Reply Last reply Reply Quote 0
                    • S
                      sai
                      last edited by

                      Could the FreeBSD gurus tell me which FreeBSD mailing list to post this problem on? I have tried freebsd-questions@freebsd.org some weeks ago but no progress there.

                      1 Reply Last reply Reply Quote 0
                      • S
                        sullrich
                        last edited by

                        @sai:

                        Could the FreeBSD gurus tell me which FreeBSD mailing list to post this problem on? I have tried freebsd-questions@freebsd.org some weeks ago but no progress there.

                        Start at questions, then make your way to freebsd-net@ and if that finally doesn't work try freebsd-current@

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.