Ipfw-classifyd: unable to write to divert socket: No buffer space available



  • We're using this snapshot: "Wed Sep  1 11:07:08 EDT 2010" and are seeing a lot of these messages in our system log. I assume it's because of our layer7 filtering. Any suggestions? The server is a brand new Dell PowerEdge R250, with 2GB of RAM. Utilization is low across the board.

    ipfw-classifyd: unable to write to divert socket: No buffer space available



  • Any takers? We're still getting LOADS of these errors.



  • You need to update to latest snapshot because an improvement was done for that.



  • The snapshot from Wed Mar 23 00:50:17 EDT 2011 throws this error when I enable any Layer7 container on a rule:

    There were error(s) loading the rules: /tmp/rules.debug:285: syntax error/tmp/rules.debug:286: syntax error pfctl: Syntax error in config file: pf rules not loaded - The line in question reads [285]: pass in quick on $LAN_STAFF proto tcp from 192.168.20.0/22 to flags S/SA keep state ( ) label "NEGATE_ROUTE: Negate policy route for vpn(s)" …



  • I'm using :

    Current version: 2.0-RC1
          Built On: Tue Apr 19 23:03:17 EDT 2011

    And im getting my logs full of this:

    ipfw-classifyd: unable to write to divert socket: No buffer space available

    How can I solve this?



  • Snapshots for about a week have resolved this issue I think, but we ran into some phantom problems with one and so rolled back. It's due to the layer7 filtering, and it's just about working fully. Needs more testing though.



  • Great!As soon as I can update to help you test it let me know!



  • same issue after 2 weeks under this snapshot.

    Full 2.0-RC2 (i386) built on Tue May 31 16:38:57 EDT 2011

    Jun 15 20:49:42 ipfw-classifyd: unable to write to divert socket: No buffer space available
    Jun 15 20:48:59 ipfw-classifyd: unable to write to divert socket: No buffer space available
    Jun 15 20:48:59 ipfw-classifyd: unable to write to divert socket: No buffer space available
    Jun 15 20:48:59 ipfw-classifyd: unable to write to divert socket: No buffer space available
    Jun 15 20:47:50 ipfw-classifyd: unable to write to divert socket: No buffer space available
    Jun 15 20:47:50 ipfw-classifyd: unable to write to divert socket: No buffer space available
    Jun 15 20:47:50 ipfw-classifyd: unable to write to divert socket: No buffer space available
    Jun 15 20:47:06 ipfw-classifyd: unable to write to divert socket: No buffer space available
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: worldofwarcraft (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: tor (rule action block)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: shoutcast (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: rtsp (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: rtp (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: replaytv-ivs (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: quicktime (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: msn-filetransfer (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: mp3 (rule action block)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: httpvideo (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: httpaudio (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: http-rtsp (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: http-itunes (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: h323 (rule dnpipe)
    Jun 15 20:45:02 ipfw-classifyd: Loaded Protocol: bittorrent (rule action block)
    Jun 15 20:45:02 ipfw-classifyd: Reloading config…


Locked