Re: Panic in ipfw

"Andrey V. Elsukov" wrote:
> Hi, Ian.
> 
> > I got this panic yesterday on a fairly busy firewall.  I have some
> > private patches to ip_fw2.c and to the em driver (see the earlier
> > "em0 hijacking traffic to port 623" thread).  I don't think this
> > panic is a result of those changes.
> 
> > It occurred round about the time an address was added to an interface.
> 
> I have a patch that can help you (i guess..).
> Can you test this patch?
> 
> http://butcher.heavennet.ru/patches/kernel/inaddr_locking/

Thanks.  Wow, that looks like it touches a lot more than just ipfw.
It took about 1.5 years of production at 2.3 billion backets a day
to trigger this condition twice.  It's going to be difficult to
tell if this patch fixes the problem.

Ian

--
Ian Freislich