search for: reqid

http://bugzilla.netfilter.org/show_bug.cgi?id=577 Summary: cannot set spi/reqid numbers higher than 0x7fffffff (policy match) Product: iptables Version: unspecified Platform: i386 OS/Version: All Status: NEW Severity: normal Priority: P1 Component: iptables AssignedTo:...

...Header | Requests | Speech data... | +--------+----------+----------------+ The header contains only the number of frames sent encoded in 6 bits 0 1 2 3 4 5 +-+-+-+-+-+-+ | NB frames | +-+-+-+-+-+-+ There can be any number of requests of the form 0 1 2 3 4 5 6 7 0 1 +-+-+-+-+-+-+-+-+-+-+ |R| ReqID | ReqVal | +-+-+-+-+-+-+-+-+-+-+ where R is 1 when a request is following and 0 when there is no more request. Each request (if R=1) is composed of a 4-bit request ID (ReqID) and a 5-bit value (ReqVal) Possible values for ReqID are: 0: REQ_PERSIST ReqVal=1 for persistent requests/mode selecti...

...frames sent > > encoded in 6 bits > > > > 0 1 2 3 4 5 > > +-+-+-+-+-+-+ > > | NB frames | > > +-+-+-+-+-+-+ > > > > There can be any number of requests of the form > > > > 0 1 2 3 4 5 6 7 0 1 > > +-+-+-+-+-+-+-+-+-+-+ > > |R| ReqID | ReqVal | > > +-+-+-+-+-+-+-+-+-+-+ > > > > where R is 1 when a request is following and 0 when there is no more > > request. Each request (if R=1) is composed of a 4-bit request ID (ReqID) > and > > a 5-bit value (ReqVal) > > > > Possible values for R...

...; > +-+-+-+-+-+-+ > > > | NB frames | > > > +-+-+-+-+-+-+ > > > > > > There can be any number of requests of the form > > > > > > 0 1 2 3 4 5 6 7 0 1 > > > +-+-+-+-+-+-+-+-+-+-+ > > > |R| ReqID | ReqVal | > > > +-+-+-+-+-+-+-+-+-+-+ > > > > > > where R is 1 when a request is following and 0 when there is no > more > > > request. Each request (if R=1) is composed of a 4-bit request ID > > (ReqID) and > > > a 5-b...

...P traffic on either Host A or Host B and the host doing the ping gets a ''Destination Host Unreachable''. It seems like a problem with the routing on Host A. Here is the result of setkey -D on both hosts: Host A: xx.xx.xx.xx yy.yy.yy.yy esp mode=tunnel spi=169285624(0x0a1717f8) reqid=0(0x00000000) E: 3des-cbc ce370c79 68e74da7 79ba58b9 1605f149 f3e98e5b 9984da9b A: hmac-sha1 ea9dba47 cf6a4c04 7e949d4f a8f304f0 76e006c7 seq=0x00000000 replay=4 flags=0x00000000 state=mature created: Feb 16 12:46:01 2009 current: Feb 16 12:47:13 2009 diff: 72(s) hard: 3600(s) soft: 2880(s)...

...-----+ > > The header contains only the number of frames sent > encoded in 6 bits > > 0 1 2 3 4 5 > +-+-+-+-+-+-+ > | NB frames | > +-+-+-+-+-+-+ > > There can be any number of requests of the form > > 0 1 2 3 4 5 6 7 0 1 > +-+-+-+-+-+-+-+-+-+-+ > |R| ReqID | ReqVal | > +-+-+-+-+-+-+-+-+-+-+ > > where R is 1 when a request is following and 0 when there is no more > request. Each request (if R=1) is composed of a 4-bit request ID (ReqID) and > a 5-bit value (ReqVal) > > Possible values for ReqID are: > 0: REQ_PERSIST ReqVa...

...> > > 0 1 2 3 4 5 > > +-+-+-+-+-+-+ > > | NB frames | > > +-+-+-+-+-+-+ > > > > There can be any number of requests of the form > > > > 0 1 2 3 4 5 6 7 0 1 > > +-+-+-+-+-+-+-+-+-+-+ > > |R| ReqID | ReqVal | > > +-+-+-+-+-+-+-+-+-+-+ > > > > where R is 1 when a request is following and 0 when there is no more > > request. Each request (if R=1) is composed of a 4-bit request ID > (ReqID) and > > a 5-bit value (ReqVal) > > &gt...

...> > | NB frames | > > > +-+-+-+-+-+-+ > > > > > > There can be any number of requests of the form > > > > > > 0 1 2 3 4 5 6 7 0 1 > > > +-+-+-+-+-+-+-+-+-+-+ > > > |R| ReqID | ReqVal | > > > +-+-+-+-+-+-+-+-+-+-+ > > > > > > where R is 1 when a request is following and 0 when there is > no more > > > request. Each request (if R=1) is composed of a 4-bit request ID > > (ReqID) and...

The concern is a client is blocked while processing a request. The nbdkit server design requires a thread per request being processed regardless of the number of connections or clients. We want to run 1000's of requests in parallel without needing a thread at nbdkit layer per request in flight. Our plugin layer is built around boost asio and a few threads in a worker pool running an io

...6 2014/07/03 16:08:18.936008 [33287]: Trigger takeoverrun 2014/07/03 16:08:20.288537 [33287]: Trigger takeoverrun 2014/07/03 16:08:23.891691 [33243]: Node became HEALTHY. Ask recovery master 0 to perform ip reallocation 2014/07/03 16:10:39.962127 [33287]: client/ctdb_client.c:759 control timed out. reqid:67831 opcode:80 dstnode:1 2014/07/03 16:10:39.962203 [33287]: client/ctdb_client.c:870 ctdb_control_recv failed 2014/07/03 16:10:39.962219 [33287]: Async operation failed with state 3, opcode:80 2014/07/03 16:10:39.962235 [33287]: Async wait failed - fail_count=1 2014/07/03 16:10:39.962251 [33287]:...

...6 [10027232]: Freeze priority 3 2014/02/26 12:10:37.452567 [10027232]: Failed to open event script directory '/usr/smb_cluster/etc/ctdb/events.d' 2014/02/26 12:10:37.452633 [10027232]: server/ctdb_recover.c:1006 Failed to start recovery 2014/02/26 12:10:37.452703 [10027232]: pnn 1 Invalid reqid 0 in ctdb_reply_control 2014/02/26 12:10:40.177172 [10027232]: read error alloc failed for 64 2014/02/26 12:11:37.459277 [10027232]: Freeze priority 1 2014/02/26 12:11:37.459742 [10027232]: Freeze priority 2 2014/02/26 12:11:37.460226 [10027232]: Freeze priority 3 2014/02/26 12:11:37.583899 [10027...

...ctdb-eventd[13184]: monitor event failed May 16 11:25:46 ctdb-lbn1 ctdb-eventd[13184]: 50.samba: samba not listening on TCP port 445 May 16 11:25:46 ctdb-lbn1 ctdb-eventd[13184]: monitor event failed May 16 11:25:50 ctdb-lbn1 ctdb-recoverd[13293]: ../ctdb/server/ctdb_client.c:678 control timed out. reqid:2147483471 opcode:80 dstnode:1 May 16 11:25:50 ctdb-lbn1 ctdb-recoverd[13293]: ../ctdb/server/ctdb_client.c:791 ctdb_control_recv failed May 16 11:25:50 ctdb-lbn1 ctdb-recoverd[13293]: Async operation failed with state 3, opcode:80 May 16 11:25:50 ctdb-lbn1 ctdb-recoverd[13293]: Async wait failed -...

...dynamic zones working with ipsec again. A dynamic IPSEC zone is defined in /etc/shorewall/zones by following the short name (first column) with ":ipsec". The code is in CVS. There are a couple of netfilter parameters that can select among the policies defined in the SAD/SPD: a) SPI b) REQID (the number after "unique" in an SPD and specified using the "-u" options in an SAD). I''ll probably allow zones to be defined in terms of these parameters eventually (once I understand them :-) ) by extending the above syntax: z:ipsec,reqid=44,spi=0x2445 or some suc...

....c:551(debug_unix_user_token) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups : 1 Time(s) lib/ctdbd_conn.c:170(ctdb_req_complete) msglen = 48 : 1 Time(s) lib/ctdbd_conn.c:339(ctdb_read_req) Received ctdb packet len=48, magic=43544442, vers=1, gen=1283100187, op=1, reqid=6 : 1 Time(s) lib/ctdbd_conn.c:940(ctdbd_migrate) ctdbd_migrate: Sending ctdb packet len=324, magic=43544442, vers=1, gen=0, op=0, reqid=6 : 1 Time(s) lib/dbwrap_ctdb.c:907(db_ctdb_record_destr) Unlocking db 386227600 key 1612000000000000FFFF : 1 Time(s) lib/dbwrap_ctdb.c:959(fetch_locked_int...

...or event failed > May 16 11:25:46 ctdb-lbn1 ctdb-eventd[13184]: 50.samba: samba not > listening on TCP port 445 > May 16 11:25:46 ctdb-lbn1 ctdb-eventd[13184]: monitor event failed > May 16 11:25:50 ctdb-lbn1 ctdb-recoverd[13293]: > ../ctdb/server/ctdb_client.c:678 control timed out. reqid:2147483471 > opcode:80 dstnode:1 > May 16 11:25:50 ctdb-lbn1 ctdb-recoverd[13293]: > ../ctdb/server/ctdb_client.c:791 ctdb_control_recv failed > May 16 11:25:50 ctdb-lbn1 ctdb-recoverd[13293]: Async operation failed > with state 3, opcode:80 > May 16 11:25:50 ctdb-lbn1 ctdb-recove...

...other nodes get banned if a node is stopped; sometimes it's just 1 or 2 of the other nodes but it always happens to at least 1. In the logs the problems always start with "control timed out". See below: 2015/05/18 14:24:23.375195 [ 6031]: client/ctdb_client.c:759 control timed out. reqid:129 opcode:43 dstnode:0 2015/05/18 14:24:23.375232 [ 6031]: client/ctdb_client.c:870 ctdb_control_recv failed 2015/05/18 14:24:23.375240 [ 6031]: Async operation failed with state 3, opcode:0 2015/05/18 14:24:23.375257 [ 6031]: Async wait failed - fail_count=1 2015/05/18 14:24:23.375263 [ 6031]: se...

...170-269 }" - Restore addition of netdevice to flowtable create flowtable inet filter f1 { hook ingress priority 0; counter } add flowtable inet filter f1 { devices = { dummy1 } ; } - Byteorder conversion in set with concatenation and ranges map ipsec_in { typeof ipsec in reqid . iif : verdict flags interval } ipsec in reqid . iif vmap @ipsec_in # resulting bytecode: [ xfrm load in 0 reqid => reg 1 ] [ byteorder reg 1 = hton(reg 1, 4, 4) ] [ meta load iif => reg 9 ] [ byteorder reg 9 = hton(reg 9, 4, 4) ] [ lookup reg 1 set ipsec_in...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 In this release: 1) Dynamic Ipsec Zones now work. 2) Output Traffic Accounting by user/group is supported (thanks to Tuomas Jormola). 3) The following negative test options are added in /etc/shorewall/ipsec and /etc/shorewall/masq: reqid!=<number> spi!=<number> proto!=esp|ah|ipcomp mode!=tunnel|transport tunnel-src!=<address>[/<mask>] tunnel-dst!=<address>[/<mask>] 4) Source port mapping is now supported in /etc/shorewall/masq. http://shorewall.net/pub/shorewall/2.1/shorewall-2.1.7 ftp://s...

...pdadd 1.2.3.4/32 192.168.3.0/24 any -P out ipsec esp/tunnel/1.2.3.4- 5.6.7.8/require; > spdadd 192.168.3.0/24 1.2.3.4/32 any -P in ipsec esp/tunnel/5.6.7.8- 1.2.3.4/require; Output of setkey commands: > # setkey -D > 5.6.7.8 1.2.3.4 > esp mode=tunnel spi=44968740(0x02ae2b24) reqid=0(0x00000000) > E: blowfish-cbc bbe97c73 9f8e2a29 d707c1b5 385b91a2 > A: hmac-sha1 370d0ac2 c507d432 1a5b48b5 ceb7d2d9 c42a7718 > seq=0x00000000 replay=4 flags=0x00000000 state=mature > created: Sep 3 17:12:02 2007 current: Sep 3 19:31:38 2007 > di...

...342]: server/ctdb_traverse.c:644 Traverse cancelled by client disconnect for database:0x6b06a26d 2014/10/29 11:12:45.429592 [3932342]: Recovery daemon ping timeout. Count : 0 2014/10/29 11:12:45.430655 [3932342]: Handling event took 195 seconds! 2014/10/29 11:12:45.452636 [3932342]: pnn 1 Invalid reqid 220668 in ctdb_reply_control 2014/10/29 11:12:48.462334 [recoverd:6488266]: server/ctdb_recoverd.c:3990 Remote node:0 has different flags for node 1. It has 0x02 vs our 0x00 2014/10/29 11:12:48.462448 [recoverd:6488266]: Use flags 0x00 from local recmaster node for cluster update of node 1 flags...