OS: RELENG_6 (Beta2) NIC: vr0: <VIA VT6105 Rhine III 10/100BaseTX> # tcpdump -penv -i vr0 less 32 16:15:42.512701 [|ether] 16:15:44.523102 [|ether] 16:15:46.522495 [|ether] 16:16:00.540387 [|ether] 16:16:02.541834 [|ether] 16:16:08.550068 [|ether] 16:16:10.570483 [|ether] # snort -pev -i vr0 less 32 Captured data length < Ethernet header length! (0 bytes) Captured data length < Ethernet header length! (0 bytes) Captured data length < Ethernet header length! (0 bytes) When I run rdesktop, more invalid ethernet frame was sniffered...
On Fri, Aug 12, 2005 at 02:37:04AM -0700, Iva Hesy wrote:> OS: RELENG_6 (Beta2) > NIC: vr0: <VIA VT6105 Rhine III 10/100BaseTX> > # tcpdump -penv -i vr0 less 32 > 16:15:42.512701 [|ether] > 16:15:44.523102 [|ether] > 16:15:46.522495 [|ether] > 16:16:00.540387 [|ether] > 16:16:02.541834 [|ether] > 16:16:08.550068 [|ether] > 16:16:10.570483 [|ether] > # snort -pev -i vr0 less 32 > Captured data length < Ethernet header length! (0 bytes) > Captured data length < Ethernet header length! (0 bytes) > Captured data length < Ethernet header length! (0 bytes) > When I run rdesktop, more invalid ethernet frame was sniffered...Most likely, your cabling, duplex configuraion, nic, switch are misconfigured and a high traffic ap like rdesktop is pushing them over the edge. I'd check the duplex settings on each end and try another cable first. Then try a different nic and switch if possible. It's possible the problem is a driver bug, but it's more likely you've for some sort of physical network problem. -- Brooks -- Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.freebsd.org/pipermail/freebsd-stable/attachments/20050812/0d0f82f7/attachment.bin
Yes, This appears to be a mistake on my part, please commit this patch. Thanks for catching this! On Thu, Aug 18, 2005 at 09:59:50AM +0100, Ian Dowse wrote:> In message <148cabbc05081722171875d31e@mail.gmail.com>, Iva Hesy writes: > >OK, now, I get the result: > >"tag=RELENG_6 date=2005.07.30.22.00.00" works fine, "tag=RELENG_6 > >date=2005.07.31.03.00.00" makes noise, many many ethernet frames can > >be sniffered. > >the cvsup log: > >Updating collection src-all/cvs > > Edit src/sys/dev/mlx/mlx_pci.c > > Add delta 1.23.2.1 2005.07.31.00.41.53 csjp > > Edit src/sys/net/bpf.c > > Add delta 1.153.2.1 2005.07.31.00.48.18 csjp > > Edit src/sys/net/bpfdesc.h > > Add delta 1.29.2.1 2005.07.31.00.48.18 csjp > >Shutting down connection to server > >Finished successfully > >I guess it should be bpf.c... > > There appear to be some braces missed in that revision of bpf.c. Does > the following patch help? > > Ian > > Index: sys/net/bpf.c > ==================================================================> RCS file: /dump/FreeBSD-CVS/src/sys/net/bpf.c,v > retrieving revision 1.153.2.2 > diff -u -r1.153.2.2 bpf.c > --- sys/net/bpf.c 13 Aug 2005 21:24:16 -0000 1.153.2.2 > +++ sys/net/bpf.c 18 Aug 2005 08:55:49 -0000 > @@ -1256,13 +1256,14 @@ > BPFD_LOCK(d); > ++d->bd_rcount; > slen = bpf_filter(d->bd_filter, (u_char *)m, pktlen, 0); > - if (slen != 0) > + if (slen != 0) { > d->bd_fcount++; > #ifdef MAC > if (mac_check_bpfdesc_receive(d, bp->bif_ifp) == 0) > #endif > catchpacket(d, (u_char *)m, pktlen, slen, > bpf_mcopy); > + } > BPFD_UNLOCK(d); > } > BPFIF_UNLOCK(bp); > @@ -1308,13 +1309,14 @@ > BPFD_LOCK(d); > ++d->bd_rcount; > slen = bpf_filter(d->bd_filter, (u_char *)&mb, pktlen, 0); > - if (slen != 0) > + if (slen != 0) { > d->bd_fcount++; > #ifdef MAC > if (mac_check_bpfdesc_receive(d, bp->bif_ifp) == 0) > #endif > catchpacket(d, (u_char *)&mb, pktlen, slen, > bpf_mcopy); > + } > BPFD_UNLOCK(d); > } > BPFIF_UNLOCK(bp); > >-- Christian S.J. Peron csjp@FreeBSD.ORG FreeBSD Committer
Or if you want, I will commit it. On Thu, Aug 18, 2005 at 09:59:50AM +0100, Ian Dowse wrote:> In message <148cabbc05081722171875d31e@mail.gmail.com>, Iva Hesy writes: > >OK, now, I get the result: > >"tag=RELENG_6 date=2005.07.30.22.00.00" works fine, "tag=RELENG_6 > >date=2005.07.31.03.00.00" makes noise, many many ethernet frames can > >be sniffered. > >the cvsup log: > >Updating collection src-all/cvs > > Edit src/sys/dev/mlx/mlx_pci.c > > Add delta 1.23.2.1 2005.07.31.00.41.53 csjp > > Edit src/sys/net/bpf.c > > Add delta 1.153.2.1 2005.07.31.00.48.18 csjp > > Edit src/sys/net/bpfdesc.h > > Add delta 1.29.2.1 2005.07.31.00.48.18 csjp > >Shutting down connection to server > >Finished successfully > >I guess it should be bpf.c... > > There appear to be some braces missed in that revision of bpf.c. Does > the following patch help? > > Ian > > Index: sys/net/bpf.c > ==================================================================> RCS file: /dump/FreeBSD-CVS/src/sys/net/bpf.c,v > retrieving revision 1.153.2.2 > diff -u -r1.153.2.2 bpf.c > --- sys/net/bpf.c 13 Aug 2005 21:24:16 -0000 1.153.2.2 > +++ sys/net/bpf.c 18 Aug 2005 08:55:49 -0000 > @@ -1256,13 +1256,14 @@ > BPFD_LOCK(d); > ++d->bd_rcount; > slen = bpf_filter(d->bd_filter, (u_char *)m, pktlen, 0); > - if (slen != 0) > + if (slen != 0) { > d->bd_fcount++; > #ifdef MAC > if (mac_check_bpfdesc_receive(d, bp->bif_ifp) == 0) > #endif > catchpacket(d, (u_char *)m, pktlen, slen, > bpf_mcopy); > + } > BPFD_UNLOCK(d); > } > BPFIF_UNLOCK(bp); > @@ -1308,13 +1309,14 @@ > BPFD_LOCK(d); > ++d->bd_rcount; > slen = bpf_filter(d->bd_filter, (u_char *)&mb, pktlen, 0); > - if (slen != 0) > + if (slen != 0) { > d->bd_fcount++; > #ifdef MAC > if (mac_check_bpfdesc_receive(d, bp->bif_ifp) == 0) > #endif > catchpacket(d, (u_char *)&mb, pktlen, slen, > bpf_mcopy); > + } > BPFD_UNLOCK(d); > } > BPFIF_UNLOCK(bp); > >-- Christian S.J. Peron csjp@FreeBSD.ORG FreeBSD Committer