Ipfw-classifyd: unable to write to divert socket: No buffer space available

[tacfit]

We're using this snapshot: "Wed Sep  1 11:07:08 EDT 2010" and are seeing a lot of these messages in our system log. I assume it's because of our layer7 filtering. Any suggestions? The server is a brand new Dell PowerEdge R250, with 2GB of RAM. Utilization is low across the board.

ipfw-classifyd: unable to write to divert socket: No buffer space available

[tacfit]

Any takers? We're still getting LOADS of these errors.

[eri--]

You need to update to latest snapshot because an improvement was done for that.

[tacfit]

The snapshot from Wed Mar 23 00:50:17 EDT 2011 throws this error when I enable any Layer7 container on a rule:

There were error(s) loading the rules: /tmp/rules.debug:285: syntax error/tmp/rules.debug:286: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [285]: pass in quick on $LAN_STAFF proto tcp from 192.168.20.0/22 to flags S/SA keep state ( ) label "NEGATE_ROUTE: Negate policy route for vpn(s)" …

[seabra]

I'm using :

Current version: 2.0-RC1
      Built On: Tue Apr 19 23:03:17 EDT 2011

And im getting my logs full of this:

ipfw-classifyd: unable to write to divert socket: No buffer space available

How can I solve this?

[tacfit]

Snapshots for about a week have resolved this issue I think, but we ran into some phantom problems with one and so rolled back. It's due to the layer7 filtering, and it's just about working fully. Needs more testing though.

[seabra]

Great!As soon as I can update to help you test it let me know!

[mikesamo]

same issue after 2 weeks under this snapshot.

Full 2.0-RC2 (i386) built on Tue May 31 16:38:57 EDT 2011

Jun 15 20:49:42 ipfw-classifyd: unable to write to divert socket: No buffer space available
Jun 15 20:48:59 ipfw-classifyd: unable to write to divert socket: No buffer space available
Jun 15 20:48:59 ipfw-classifyd: unable to write to divert socket: No buffer space available
Jun 15 20:48:59 ipfw-classifyd: unable to write to divert socket: No buffer space available
Jun 15 20:47:50 ipfw-classifyd: unable to write to divert socket: No buffer space available
Jun 15 20:47:50 ipfw-classifyd: unable to write to divert socket: No buffer space available
Jun 15 20:47:50 ipfw-classifyd: unable to write to divert socket: No buffer space available
Jun 15 20:47:06 ipfw-classifyd: unable to write to divert socket: No buffer space available
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: worldofwarcraft (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: tor (rule action block)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: shoutcast (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: rtsp (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: rtp (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: replaytv-ivs (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: quicktime (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: msn-filetransfer (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: mp3 (rule action block)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: httpvideo (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: httpaudio (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: http-rtsp (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: http-itunes (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: h323 (rule dnpipe)
Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: bittorrent (rule action block)
Jun 15 20:45:02 ipfw-classifyd: Reloading config…