[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

openbsd with pf not forwarding tcp packets



  Hi,
 I'm running OpenBSD-current as of 30 March.
 The problem I'm having is that every once in a while tcp packets don't
get forwarded, and cpu is 100% idle.Sometimes the ssh session becomes
unresponsive(and then recovers or drops).Udp and icmp SEEM to be just
fine.Sometimes it happens the period the tcp packets don't get forwarded
is so long tcp sessions time out.
FTP transfers work at 8-9MB/s the suddenly, stall for some time, and then
pick up at about 10-20KB/s, slowly going up to previous transfer
rate.(normal tcp behavior in case of dropped packets, network congestion).
I had a problem when states were limited to 10000 entries, and kept
hitting the limit constantly alas tcp connections would get dropped, but
now i set limit states 50000 so that shouldn't happen. I'll include at the
end of the mail my firewall setup and sysctl. Please give me some clues as
to where I should start investigating. Any advice would be appreciated.
  TIA.
##       $OpenBSD: pf.conf,v 3.11 2004/03/02 20:38:44 shock Exp $
#
# Required order: options, normalization, queueing, translation, filtering.
#####
##### Macros
###
#
ext_if          = "em0"
int_if          = "em1"
ext_ip          = "193.226.x.x"
int_ip          = "172.23.0.1"
me              = "{ 172.23.0.1, 192.168.0.6, 193.226.x.x }"
internal_net    = "172.23.0.0/21"
external_addr   = "193.226.x.x"
wan_net      	= "{ 172.22.0.0/21, 172.24.0.0/21, 172.25.0.0/21,
172.27.0.0/21 }"
def_ports_tcp   = "{
20,21,22,53,80,110,113,443,554,4999><5011,5050,5100,11999 }"
def_ports_udp   = "{ 53,554,5000:5010,5055 }"
##### Tables
###
#
table   <trusted_hosts> persist file "/etc/pf/tables/trusted_hosts"
table   <oops>          persist file "/etc/pf/tables/oops"
##### Options
###
#
set timeout             { interval 10, frag 30 }
set timeout             { tcp.first 120, tcp.opening 30, tcp.established
86400 }
set timeout             { tcp.closing 900, tcp.finwait 45, tcp.closed 90 }
set timeout             { udp.first 60, udp.single 30, udp.multiple 60 }
set timeout             { icmp.first 20, icmp.error 10 }
set timeout             { other.first 60, other.single 30, other.multiple
60 }
set timeout             { adaptive.start 0, adaptive.end 0 }
set limit               { states 50000, frags 5000 }
set loginterface        none
set optimization        aggressive
set block-policy        return
set state-policy        if-bound
set require-order       yes
set fingerprints        "/etc/pf.os"
##### Normalization
###
#
scrub   in      all
##### Queueing
###
#
##### Translation
###
#
no      nat     on $ext_if from $internal_net to $wan_net
        nat     on $ext_if from $internal_net to any		-> ($ext_if)
        # ftp redir to ftp-proxy
no      rdr     on $int_if proto tcp from any to $me port ftp
no      rdr     on $int_if proto tcp from any to $wan_net port ftp
        rdr     on $int_if proto tcp from any to any port ftp -> 127.0.0.1
port 8021
##### Rules
###
#
## all interfaces
block   in      log all
pass            on lo0 all
pass            quick tagged passthru keep state
        # allow everything initiated from server
pass    out     quick                           from $me to any flags S/SA
keep state
## internal interface
        # allow icmp from localnet to $int_ip
pass    in      quick           on $int_if proto icmp from any to $int_ip
keep state
        # always allow ssh from sh to $int_ip
pass    in      quick           on $int_if inet proto tcp from 172.23.1.1
to $int_ip port 22 flags S/SA keep state
        # allow packets from localnet to ftp-proxy
pass    in      quick           on $int_if inet proto tcp from any to
127.0.0.1 port 8021 flags S/SA keep state
        # allow packets from trusted hosts
pass    in      quick           on $int_if inet from <trusted_hosts> to
any keep state tag passthru
        # block explicit dst $me, pass the rest to $wan_net
block   in      quick   log     on $int_if from any to $me
pass    in      quick           on $int_if inet from any to $wan_net flags
S/SA keep state tag passthru
        # mediaring
pass    in      quick           on $int_if inet proto tcp from
172.23.2.160 to any port { 1721, 51720 } flags S/SA keep state tag
passthru
pass    in      quick           on $int_if inet proto udp from
172.23.2.160 to any port { 51719, 1800 } keep state tag passthru
        # allow selected users to connect to qirc
pass    in      quick           on $int_if inet proto tcp from {
172.23.1.130, 172.23.1.131 } to { 217.75.108.166, 217.75.108.167 } port
6667 flags S/SA keep state tag passthru
        # allow connections from localnet to the following ports:
        # TCP: 20+21(FTP),22(SSH),!25(SMTP),53(DNS),80(HTTP),110(POP3),
113(AUTH),139(SMB),443(SHTTP),554(RTSP),5001(YM_VOICE),11999(Y_GAMES)
        # UDP: 53(DNS),554(RTSP),5055(YM_VOICE)
pass    in      quick           on $int_if inet proto tcp from any to any
port $def_ports_tcp flags S/SA keep state tag passthru
pass    in      quick           on $int_if inet proto udp from any to any
port $def_ports_udp keep state tag passthru
## external interface
        # allow connections to port 113 (auth) to $ext_ip to prevent timeouts
pass    in      quick           on $ext_if inet proto tcp from any to
$ext_if port 113 flags S/SA keep state
        # allow incoming connections to ftp-proxy
pass    in      quick           on $ext_if inet proto tcp from any to
$ext_if user proxy flags S/SA keep state
        # allow incoming connections to ventrilo and t2s
pass    in      quick           on $ext_if inet proto tcp from any to
172.23.7.1 port 3784 flags S/SA keep state tag passthru
pass    in      quick           on $ext_if inet proto udp from any to
172.23.7.1 port 8767 keep state tag passthru
        # block explicit dst $me, pass the rest from $wan_net
block   in      quick   log     on $ext_if from any to $me
pass    in      quick           on $ext_if inet from $wan_net to any flags
S/SA keep state tag passthru
## sysctl -a
kern.ostype=OpenBSD
kern.osrelease=3.5
kern.osrevision=200405
kern.version=OpenBSD 3.5 (SHOCK) #0: Tue Mar 30 22:12:06 EEST 2004
    [email protected]:/usr/src/sys/arch/i386/compile/SHOCK
kern.maxvnodes=2398
kern.maxproc=1044
kern.maxfiles=3404
kern.argmax=262144
kern.securelevel=1
kern.hostname=fw-1
kern.hostid=0
kern.clockrate=tick = 10000, tickadj = 40, hz = 100, profhz = 1024, stathz
= 128
kern.posix1version=199009
kern.ngroups=16
kern.job_control=1
kern.saved_ids=1
kern.boottime=Wed Mar 31 20:22:12 2004
kern.domainname=
kern.maxpartitions=16
kern.rawpartition=2
kern.osversion=SHOCK#0
kern.somaxconn=128
kern.sominconn=80
kern.usermount=0
kern.random=5722626588 1470240 0 37631384 458 117000 0 0 0 0 0 0 943454458
24378878 238906401 1752969996 58666440 27554390 407
81433 62631177 85677528 116542295 151023622 114991562 80272976 51900849
86587005 29591557 17028224 9835485 4975121 2435487 139
2224 702145 586732 278203 0 0 0 0 0 0 0 0 0 0 3 0 0 23491 0 21651 255706
943153610 0 0 0 0 0 227828 2992569 5719406433 0 0
kern.nosuidcoredump=1
kern.fsync=1
kern.sysvmsg=1
kern.sysvsem=1
kern.sysvshm=1
kern.arandom=3831479463
kern.msgbufsize=8172
kern.malloc.buckets=16,32,64,128,256,512,1024,2048,4096,8192,16384,32768,65536,131072,262144,524288
kern.malloc.bucket.16=(calls = 71563014 total_allocated = 6656 total_free
= 5276 elements = 256 high watermark = 1280 could_fr
ee = 227316)
kern.malloc.bucket.32=(calls = 638292 total_allocated = 3584 total_free =
1339 elements = 128 high watermark = 640 could_free
= 256)
kern.malloc.bucket.64=(calls = 513308 total_allocated = 3520 total_free =
1102 elements = 64 high watermark = 320 could_free =
 609)
kern.malloc.bucket.128=(calls = 1686116 total_allocated = 1152 total_free
= 794 elements = 32 high watermark = 160 could_free
= 367959)
kern.malloc.bucket.256=(calls = 455139 total_allocated = 3280 total_free =
1113 elements = 16 high watermark = 80 could_free =
 14908)
kern.malloc.bucket.512=(calls = 14486 total_allocated = 440 total_free =
81 elements = 8 high watermark = 40 could_free = 1885
)
kern.malloc.bucket.1024=(calls = 2050241 total_allocated = 220 total_free
= 16 elements = 4 high watermark = 20 could_free = 0
)
kern.malloc.bucket.2048=(calls = 143 total_allocated = 22 total_free = 7
elements = 2 high watermark = 10 could_free = 0)
kern.malloc.bucket.4096=(calls = 7013 total_allocated = 43 total_free = 6
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.8192=(calls = 121 total_allocated = 6 total_free = 4
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.16384=(calls = 413 total_allocated = 8 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.32768=(calls = 22 total_allocated = 2 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.65536=(calls = 0 total_allocated = 0 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.131072=(calls = 0 total_allocated = 0 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.262144=(calls = 0 total_allocated = 0 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.bucket.524288=(calls = 0 total_allocated = 0 total_free = 0
elements = 1 high watermark = 5 could_free = 0)
kern.malloc.kmemnames=free,mbuf,devbuf,debug,pcb,routetbl,,fragtbl,,ifaddr,soopts,sysctl,namei,,ioctlops,,,,,iov,mount,,NFS_re
q,NFS_mount,NFS_node,vnodes,namecache,UFS_quota,UFS_mount,shm,VM_map,sem,dirhash,,VM_pmap,,,,file,file_desc,,proc,subproc,VFS_
cluster,,,MFS_node,,,Export_Host,NFS_srvsock,NFS_uid,NFS_daemon,ip_moptions,in_multi,ether_multi,mrt,ISOFS_mount,ISOFS_node,MS
DOSFS_mount,MSDOSFS_fat,MSDOSFS_node,ttys,exec,miscfs_mount,,adosfs_mount,,adosfs_anode,,,adosfs_bitmap,EXT2FS_node,,pfkey_dat
a,tdb,xform_data,,pagedep,inodedep,newblk,,,indirdep,,,,,,,,,VM_swap,,,,,RAIDframe_data,UVM_amap,UVM_aobj,,USB,USB_device,USB_
HC,,memdesc,,,crypto_data,,IPsec_creds,packet_tags,1394ctl,1394data,emuldata,,,,,,,,,ip6_options,NDP,ip6rr,rp_addr,temp,NTFS_m
ount,NTFS_node,NTFS_fnode,NTFS_dir,NTFS_hash_tables,NTFS_file_attr,NTFS_resident_data_,NTFS_decomp,NTFS_vrun
kern.malloc.kmemstat.free=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, mapblocks = 0, maxused = 0K, limit = 39250K, spar
e = 0, sizes = (none))
kern.malloc.kmemstat.mbuf=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, mapblocks = 0, maxused = 0K, limit = 39250K, spar
e = 0, sizes = (none))
kern.malloc.kmemstat.devbuf=(inuse = 785, calls = 857, memuse = 401K,
limblocks = 0, mapblocks = 0, maxused = 465K, limit = 39
250K, spare = 0, sizes = (16,32,64,128,256,512,1024,2048,4096,16384,32768))
kern.malloc.kmemstat.debug=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, mapblocks = 0, maxused = 0K, limit = 39250K, spa
re = 0, sizes = (none))
kern.malloc.kmemstat.pcb=(inuse = 29, calls = 2938, memuse = 4K, limblocks
= 0, mapblocks = 0, maxused = 12K, limit = 39250K,
spare = 0, sizes = (16,32,64,512))
kern.malloc.kmemstat.routetbl=(inuse = 5961, calls = 2826455, memuse =
685K, limblocks = 0, mapblocks = 0, maxused = 1062K, li
mit = 39250K, spare = 0, sizes = (16,32,64,128,256))
kern.malloc.kmemstat.fragtbl=(inuse = 0, calls = 3, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 1K, limit = 39250K, s
pare = 0, sizes = (32))
kern.malloc.kmemstat.ifaddr=(inuse = 102, calls = 102, memuse = 17K,
limblocks = 0, mapblocks = 0, maxused = 17K, limit = 3925
0K, spare = 0, sizes = (16,32,128,256,512,2048))
kern.malloc.kmemstat.soopts=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 0K, limit = 39250K, sp
are = 0, sizes = (none))
kern.malloc.kmemstat.sysctl=(inuse = 3, calls = 3, memuse = 2K, limblocks
= 0, mapblocks = 0, maxused = 2K, limit = 39250K, sp
are = 0, sizes = (16,128,1024))
kern.malloc.kmemstat.namei=(inuse = 0, calls = 2036707, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 8K, limit = 39250K, spare = 0,
sizes = (1024))
kern.malloc.kmemstat.ioctlops=(inuse = 0, calls = 30055, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 1K, limit = 3925
0K, spare = 0, sizes = (256,512,1024))
kern.malloc.kmemstat.iov=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, mapblocks = 0, maxused = 0K, limit = 39250K, spare
 = 0, sizes = (none))
kern.malloc.kmemstat.mount=(inuse = 6, calls = 8, memuse = 3K, limblocks =
0, mapblocks = 0, maxused = 4K, limit = 39250K, spa
re = 0, sizes = (512))
kern.malloc.kmemstat.NFS_req=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 0K, limit = 39250K, s
pare = 0, sizes = (none))
kern.malloc.kmemstat.NFS_mount=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K,
 spare = 0, sizes = (none))
kern.malloc.kmemstat.NFS_node=(inuse = 1, calls = 1, memuse = 16K,
limblocks = 0, mapblocks = 0, maxused = 16K, limit = 39250K
, spare = 0, sizes = (16384))
kern.malloc.kmemstat.vnodes=(inuse = 59, calls = 12475, memuse = 8K,
limblocks = 0, mapblocks = 0, maxused = 44K, limit = 3925
0K, spare = 0, sizes = (32,128,256))
kern.malloc.kmemstat.namecache=(inuse = 3, calls = 3, memuse = 33K,
limblocks = 0, mapblocks = 0, maxused = 33K, limit = 39250
K, spare = 0, sizes = (16,16384))
kern.malloc.kmemstat.UFS_quota=(inuse = 1, calls = 1, memuse = 16K,
limblocks = 0, mapblocks = 0, maxused = 16K, limit = 39250
K, spare = 0, sizes = (16384))
kern.malloc.kmemstat.UFS_mount=(inuse = 25, calls = 25, memuse = 60K,
limblocks = 0, mapblocks = 0, maxused = 60K, limit = 392
50K, spare = 0, sizes = (16,64,512,2048,4096,8192,16384))
kern.malloc.kmemstat.shm=(inuse = 2, calls = 2, memuse = 1K, limblocks =
0, mapblocks = 0, maxused = 1K, limit = 39250K, spare
 = 0, sizes = (256,512))
kern.malloc.kmemstat.VM_map=(inuse = 4, calls = 4, memuse = 1K, limblocks
= 0, mapblocks = 0, maxused = 1K, limit = 39250K, sp
are = 0, sizes = (256))
kern.malloc.kmemstat.sem=(inuse = 2, calls = 2, memuse = 1K, limblocks =
0, mapblocks = 0, maxused = 1K, limit = 39250K, spare
 = 0, sizes = (32,64))
kern.malloc.kmemstat.dirhash=(inuse = 39, calls = 3564, memuse = 8K,
limblocks = 0, mapblocks = 0, maxused = 51K, limit = 3925
0K, spare = 0, sizes = (16,32,64,128,256,512))
kern.malloc.kmemstat.VM_pmap=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 0K, limit = 39250K, s
pare = 0, sizes = (none))
kern.malloc.kmemstat.file=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, mapblocks = 0, maxused = 0K, limit = 39250K, spar
e = 0, sizes = (none))
kern.malloc.kmemstat.file_desc=(inuse = 7, calls = 2533, memuse = 6K,
limblocks = 0, mapblocks = 0, maxused = 8K, limit = 3925
0K, spare = 0, sizes = (256,512,1024))
kern.malloc.kmemstat.proc=(inuse = 8, calls = 339, memuse = 5K, limblocks
= 0, mapblocks = 0, maxused = 5K, limit = 39250K, sp
are = 0, sizes = (16,512,2048))
kern.malloc.kmemstat.subproc=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 0K, limit = 39250K, s
pare = 0, sizes = (none))
kern.malloc.kmemstat.VFS_cluster=(inuse = 0, calls = 131052, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 1K, limit =
39250K, spare = 0, sizes = (32))
kern.malloc.kmemstat.MFS_node=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K,
spare = 0, sizes = (none))
kern.malloc.kmemstat.Export_Host=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K, spare = 0,
sizes = (none))
kern.malloc.kmemstat.NFS_srvsock=(inuse = 2, calls = 2, memuse = 1K,
limblocks = 0, mapblocks = 0, maxused = 1K, limit = 39250
K, spare = 0, sizes = (256))
kern.malloc.kmemstat.NFS_uid=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 0K, limit = 39250K, s
pare = 0, sizes = (none))
kern.malloc.kmemstat.NFS_daemon=(inuse = 1, calls = 1, memuse = 1K,
limblocks = 0, mapblocks = 0, maxused = 1K, limit = 39250K
, spare = 0, sizes = (256))
kern.malloc.kmemstat.ip_moptions=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250
K, spare = 0, sizes = (none))
kern.malloc.kmemstat.in_multi=(inuse = 30, calls = 30, memuse = 2K,
limblocks = 0, mapblocks = 0, maxused = 2K, limit = 39250K
, spare = 0, sizes = (16,64))
kern.malloc.kmemstat.ether_multi=(inuse = 8, calls = 8, memuse = 1K,
limblocks = 0, mapblocks = 0, maxused = 1K, limit = 39250
K, spare = 0, sizes = (32))
kern.malloc.kmemstat.mrt=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, mapblocks = 0, maxused = 0K, limit = 39250K, spare
 = 0, sizes = (none))
kern.malloc.kmemstat.ISOFS_mount=(inuse = 1, calls = 1, memuse = 16K,
limblocks = 0, mapblocks = 0, maxused = 16K, limit = 392
50K, spare = 0, sizes = (16384))
kern.malloc.kmemstat.ISOFS_node=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K
, spare = 0, sizes = (none))
kern.malloc.kmemstat.MSDOSFS_mount=(inuse = 1, calls = 1, memuse = 8K,
limblocks = 0, mapblocks = 0, maxused = 8K, limit = 392
50K, spare = 0, sizes = (8192))
kern.malloc.kmemstat.MSDOSFS_fat=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250
K, spare = 0, sizes = (none))
kern.malloc.kmemstat.MSDOSFS_node=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 3925
0K, spare = 0, sizes = (none))
kern.malloc.kmemstat.ttys=(inuse = 372, calls = 372, memuse = 217K,
limblocks = 0, mapblocks = 0, maxused = 217K, limit = 3925
0K, spare = 0, sizes = (128,256,1024))
kern.malloc.kmemstat.exec=(inuse = 0, calls = 11536, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 2K, limit = 39250K,
spare = 0, sizes = (16,128,512,1024))
kern.malloc.kmemstat.miscfs_mount=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 3925
0K, spare = 0, sizes = (none))
kern.malloc.kmemstat.adosfs_mount=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 3925
0K, spare = 0, sizes = (none))
kern.malloc.kmemstat.adosfs_anode=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 3925
0K, spare = 0, sizes = (none))
kern.malloc.kmemstat.adosfs_bitmap=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 392
50K, spare = 0, sizes = (none))
kern.malloc.kmemstat.EXT2FS_node=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250
K, spare = 0, sizes = (none))
kern.malloc.kmemstat.pfkey_data=(inuse = 1, calls = 2, memuse = 1K,
limblocks = 0, mapblocks = 0, maxused = 1K, limit = 39250K
, spare = 0, sizes = (64))
kern.malloc.kmemstat.tdb=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, mapblocks = 0, maxused = 0K, limit = 39250K, spare
 = 0, sizes = (none))
kern.malloc.kmemstat.xform_data=(inuse = 0, calls = 2421, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 1K, limit = 39250K, spare = 0,
sizes = (16,32))
kern.malloc.kmemstat.pagedep=(inuse = 1, calls = 1, memuse = 2K, limblocks
= 0, mapblocks = 0, maxused = 2K, limit = 39250K, s
pare = 0, sizes = (2048))
kern.malloc.kmemstat.inodedep=(inuse = 1, calls = 26, memuse = 16K,
limblocks = 0, mapblocks = 0, maxused = 17K, limit = 39250
K, spare = 0, sizes = (128,16384))
kern.malloc.kmemstat.newblk=(inuse = 1, calls = 1, memuse = 1K, limblocks
= 0, mapblocks = 0, maxused = 1K, limit = 39250K, sp
are = 0, sizes = (256))
kern.malloc.kmemstat.indirdep=(inuse = 0, calls = 391, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 32K, limit = 39250
K, spare = 0, sizes = (16384))
kern.malloc.kmemstat.VM_swap=(inuse = 5, calls = 5, memuse = 3K, limblocks
= 0, mapblocks = 0, maxused = 3K, limit = 39250K, s
pare = 0, sizes = (16,32,2048))
kern.malloc.kmemstat.RAIDframe_data=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39
250K, spare = 0, sizes = (none))
kern.malloc.kmemstat.UVM_amap=(inuse = 1615, calls = 657426, memuse = 58K,
limblocks = 0, mapblocks = 0, maxused = 276K, limit
 = 39250K, spare = 0, sizes =
(16,32,64,128,256,512,1024,2048,4096,8192,16384))
kern.malloc.kmemstat.UVM_aobj=(inuse = 2, calls = 2, memuse = 2K,
limblocks = 0, mapblocks = 0, maxused = 2K, limit = 39250K,
spare = 0, sizes = (16,1024))
kern.malloc.kmemstat.USB=(inuse = 23, calls = 23, memuse = 2K, limblocks =
0, mapblocks = 0, maxused = 2K, limit = 39250K, spa
re = 0, sizes = (16,32,64,128))
kern.malloc.kmemstat.USB_device=(inuse = 8, calls = 8, memuse = 4K,
limblocks = 0, mapblocks = 0, maxused = 4K, limit = 39250K
, spare = 0, sizes = (128,512))
kern.malloc.kmemstat.USB_HC=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 0K, limit = 39250K, sp
are = 0, sizes = (none))
kern.malloc.kmemstat.memdesc=(inuse = 1, calls = 1, memuse = 4K, limblocks
= 0, mapblocks = 0, maxused = 4K, limit = 39250K, s
pare = 0, sizes = (4096))
kern.malloc.kmemstat.crypto_data=(inuse = 1, calls = 1, memuse = 1K,
limblocks = 0, mapblocks = 0, maxused = 1K, limit = 39250
K, spare = 0, sizes = (1024))
kern.malloc.kmemstat.IPsec_creds=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250
K, spare = 0, sizes = (none))
kern.malloc.kmemstat.packet_tags=(inuse = 62, calls = 71145266, memuse =
1K, limblocks = 0, mapblocks = 0, maxused = 27K, limi
t = 39250K, spare = 0, sizes = (16,32))
kern.malloc.kmemstat.1394ctl=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 0K, limit = 39250K, s
pare = 0, sizes = (none))
kern.malloc.kmemstat.1394data=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K,
spare = 0, sizes = (none))
kern.malloc.kmemstat.emuldata=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K,
spare = 0, sizes = (none))
kern.malloc.kmemstat.ip6_options=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250
K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NDP=(inuse = 10, calls = 12, memuse = 1K, limblocks =
0, mapblocks = 0, maxused = 1K, limit = 39250K, spa
re = 0, sizes = (64,128))
kern.malloc.kmemstat.ip6rr=(inuse = 0, calls = 0, memuse = 0K, limblocks =
0, mapblocks = 0, maxused = 0K, limit = 39250K, spa
re = 0, sizes = (none))
kern.malloc.kmemstat.rp_addr=(inuse = 0, calls = 0, memuse = 0K, limblocks
= 0, mapblocks = 0, maxused = 0K, limit = 39250K, spare = 0, sizes =
(none))
kern.malloc.kmemstat.temp=(inuse = 12, calls = 63642, memuse = 5K,
limblocks = 0, mapblocks = 0, maxused = 9K, limit = 39250K,
 spare = 0, sizes = (16,32,64,256,512,1024,4096))
kern.malloc.kmemstat.NTFS_mount=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K
, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_node=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K,
 spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_fnode=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K
, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_dir=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K,
spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_hash_tables=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit =
39250K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_file_attr=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39
250K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_resident_data_=(inuse = 0, calls = 0, memuse =
0K, limblocks = 0, mapblocks = 0, maxused = 0K, limit
 = 39250K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_decomp=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250
K, spare = 0, sizes = (none))
kern.malloc.kmemstat.NTFS_vrun=(inuse = 0, calls = 0, memuse = 0K,
limblocks = 0, mapblocks = 0, maxused = 0K, limit = 39250K,
 spare = 0, sizes = (none))
kern.cp_time=89922,170,77772,5554845,29331372
kern.nchstats.good_hits=4348673
kern.nchstats.negative_hits=170468
kern.nchstats.bad_hits=3621
kern.nchstats.false_hits=10292
kern.nchstats.misses=975044
kern.nchstats.long_names=9515
kern.nchstats.pass2=87025
kern.nchstats.2passes=95551
kern.forkstat.forks=9601
kern.forkstat.vforks=31
kern.forkstat.rforks=0
kern.forkstat.kthreads=10
kern.forkstat.fork_pages=356540
kern.forkstat.vfork_pages=1253
kern.forkstat.rfork_pages=0
kern.forkstat.kthread_pages=0
kern.nselcoll=0
kern.tty.tk_nin=32930
kern.tty.tk_nout=28589616
kern.tty.tk_rawcc=32722
kern.tty.tk_cancc=208
kern.tty.maxptys=256
kern.tty.nptys=64
kern.ccpu=1948
kern.fscale=2048
kern.nprocs=44
kern.stackgap_random=65536
kern.usercrypto=1
kern.cryptodevallowsoft=0
kern.splassert=0
kern.nfiles=90
kern.ttycount=62
kern.numvnodes=2886
kern.userasymcrypto=1
kern.seminfo.semmni=10
kern.seminfo.semmns=60
kern.seminfo.semmnu=30
kern.seminfo.semmsl=60
kern.seminfo.semopm=100
kern.seminfo.semume=10
kern.seminfo.semusz=100
kern.seminfo.semvmx=32767
kern.seminfo.semaem=16384
kern.shminfo.shmmax=33554432
kern.shminfo.shmmin=1
kern.shminfo.shmmni=128
kern.shminfo.shmseg=128
kern.shminfo.shmall=8192
kern.emul.nemuls=6
kern.emul.aout=0
kern.emul.bsdos=1
kern.emul.freebsd=1
kern.emul.ibcs2=1
kern.emul.linux=1
kern.emul.svr4=1
vm.loadavg=0.07 0.08 0.08
vm.psstrings=0xcfbfdff0
vm.swapencrypt.enable=0
vm.swapencrypt.keyscreated=0
vm.swapencrypt.keysdeleted=0
vm.nkmempages=16354
vm.anonmin=10
vm.vtextmin=5
vm.vnodemin=10
fs.posix.setuid=1
net.inet.ip.forwarding=1
net.inet.ip.redirect=1
net.inet.ip.ttl=64
net.inet.ip.sourceroute=0
net.inet.ip.directed-broadcast=0
net.inet.ip.portfirst=1024
net.inet.ip.portlast=49151
net.inet.ip.porthifirst=49152
net.inet.ip.porthilast=65535
net.inet.ip.maxqueue=300
net.inet.ip.encdebug=0
net.inet.ip.ipsec-expire-acquire=30
net.inet.ip.ipsec-invalid-life=60
net.inet.ip.ipsec-pfs=1
net.inet.ip.ipsec-soft-allocs=0
net.inet.ip.ipsec-allocs=0
net.inet.ip.ipsec-soft-bytes=0
net.inet.ip.ipsec-bytes=0
net.inet.ip.ipsec-timeout=86400
net.inet.ip.ipsec-soft-timeout=80000
net.inet.ip.ipsec-soft-firstuse=3600
net.inet.ip.ipsec-firstuse=7200
net.inet.ip.ipsec-enc-alg=aes
net.inet.ip.ipsec-auth-alg=hmac-sha1
net.inet.ip.mtudisc=1
net.inet.ip.mtudisctimeout=600
net.inet.ip.ipsec-comp-alg=deflate
net.inet.icmp.maskrepl=0
net.inet.icmp.bmcastecho=0
net.inet.icmp.errppslimit=100
net.inet.icmp.rediraccept=1
net.inet.icmp.redirtimeout=600
net.inet.icmp.tstamprepl=1
net.inet.ipip.allow=0
net.inet.tcp.rfc1323=1
net.inet.tcp.keepinittime=150
net.inet.tcp.keepidle=14400
net.inet.tcp.keepintvl=150
net.inet.tcp.slowhz=2
net.inet.tcp.baddynamic=587,749,750,751,760,761,871
net.inet.tcp.recvspace=16384
net.inet.tcp.sendspace=16384
net.inet.tcp.sack=1
net.inet.tcp.mssdflt=512
net.inet.tcp.rstppslimit=100
net.inet.tcp.ackonpush=0
net.inet.tcp.ecn=1
net.inet.tcp.syncachelimit=10255
net.inet.tcp.synbucketlimit=105
net.inet.tcp.rfc3390=1
net.inet.tcp.reasslimit=1024
net.inet.udp.checksum=1
net.inet.udp.baddynamic=587,749
net.inet.udp.recvspace=41600
net.inet.udp.sendspace=9216
net.inet.gre.allow=0
net.inet.gre.wccp=0
net.inet.esp.enable=0
net.inet.esp.udpencap=0
net.inet.esp.udpencap_port=4500
net.inet.ah.enable=0
net.inet.mobileip.allow=0
net.inet.etherip.allow=0
net.inet.ipcomp.enable=1
net.inet.carp.allow=1
net.inet.carp.preempt=0
net.inet.carp.log=0
net.inet.carp.arpbalance=0
net.inet6.ip6.forwarding=0
net.inet6.ip6.redirect=1
net.inet6.ip6.hlim=64
net.inet6.ip6.maxfragpackets=200
net.inet6.ip6.accept_rtadv=0
net.inet6.ip6.keepfaith=0
net.inet6.ip6.log_interval=5
net.inet6.ip6.hdrnestlimit=50
net.inet6.ip6.dad_count=1
net.inet6.ip6.auto_flowlabel=1
net.inet6.ip6.defmcasthlim=1
net.inet6.ip6.kame_version=OpenBSD-current
net.inet6.ip6.use_deprecated=1
net.inet6.ip6.rr_prune=5
net.inet6.ip6.v6only=1
net.inet6.ip6.maxfrags=200
net.inet6.icmp6.rediraccept=1
net.inet6.icmp6.redirtimeout=600
net.inet6.icmp6.nd6_prune=1
net.inet6.icmp6.nd6_delay=5
net.inet6.icmp6.nd6_umaxtries=3
net.inet6.icmp6.nd6_mmaxtries=3
net.inet6.icmp6.nd6_useloopback=1
net.inet6.icmp6.nodeinfo=1
net.inet6.icmp6.errppslimit=100
net.inet6.icmp6.nd6_maxnudhint=0
net.inet6.icmp6.mtudisc_hiwat=1280
net.inet6.icmp6.mtudisc_lowat=256
net.inet6.icmp6.nd6_debug=0
net.bpf.bufsize=32768
net.bpf.maxbufsize=2097152
hw.machine=i386
hw.model=AMD Athlon(tm) XP 2400+ ("AuthenticAMD" 686-class)
hw.ncpu=1
hw.byteorder=1234
hw.physmem=267956224
hw.usermem=267595776
hw.pagesize=4096
hw.disknames=wd0
hw.diskcount=1
hw.sensors.0=lm0, VCORE_A, volts_dc, 1.63 V
hw.sensors.1=lm0, VCORE_B, volts_dc, 1.68 V
hw.sensors.2=lm0, +3.3V, volts_dc, 2.67 V
hw.sensors.3=lm0, +5V, volts_dc, 5.18 V
hw.sensors.4=lm0, +12V, volts_dc, 11.98 V
hw.sensors.5=lm0, -12V, volts_dc, -7.12 V
hw.sensors.6=lm0, -5V, volts_dc, -5.25 V
hw.sensors.7=lm0, +5VSB, volts_dc, 4.99 V
hw.sensors.8=lm0, VBAT, volts_dc, 3.23 V
hw.sensors.9=lm0, Temp1, temp, 40.00 degC / 104.00 degF
hw.sensors.10=lm0, Temp2, temp, 46.50 degC / 115.70 degF
hw.sensors.11=lm0, Temp3, temp, 48.00 degC / 118.40 degF
hw.sensors.14=lm0, Fan3, fanrpm, 2812 RPM
hw.cpuspeed=2014
machdep.console_device=ttyC0
machdep.bios.diskinfo.128=bootdev = 0xa0000200, cylinders = 1024, heads =
255, sectors = 63
machdep.bios.cksumlen=1
machdep.allowaperture=0
machdep.cpuvendor=AuthenticAMD
machdep.cpuid=1696
machdep.cpufeature=58981375
machdep.apmwarn=10
machdep.kbdreset=1
machdep.apmhalt=0
machdep.userldt=0
machdep.osfxsr=1
machdep.sse=1
machdep.sse2=0
machdep.xcrypt=0
user.cs_path=/usr/bin:/bin:/usr/sbin:/sbin:/usr/X11R6/bin:/usr/local/bin
user.bc_base_max=2147483647
user.bc_dim_max=65535
user.bc_scale_max=2147483647
user.bc_string_max=2147483647
user.coll_weights_max=2
user.expr_nest_max=32
user.line_max=2048
user.re_dup_max=255
user.posix2_version=199212
user.posix2_c_bind=0
user.posix2_c_dev=0
user.posix2_char_term=0
user.posix2_fort_dev=0
user.posix2_fort_run=0
user.posix2_localedef=0
user.posix2_sw_dev=0
user.posix2_upe=0
user.stream_max=20
user.tzname_max=255
ddb.radix=16
ddb.max_width=80
ddb.max_line=24
ddb.tab_stop_width=8
ddb.panic=1
ddb.console=0
ddb.log=1
vfs.mounts.ffs has 6 mounted instances
vfs.ffs.doclusterread=1
vfs.ffs.doclusterwrite=1
vfs.ffs.doreallocblks=1
vfs.ffs.doasyncfree=1
vfs.ffs.max_softdeps=19184
vfs.ffs.sd_tickdelay=2
vfs.ffs.sd_worklist_push=0
vfs.ffs.sd_blk_limit_push=0
vfs.ffs.sd_ino_limit_push=0
vfs.ffs.sd_blk_limit_hit=0
vfs.ffs.sd_ino_limit_hit=0
vfs.ffs.sd_sync_limit_hit=0
vfs.ffs.sd_indir_blk_ptrs=391
vfs.ffs.sd_inode_bitmap=24
vfs.ffs.sd_direct_blk_ptrs=272
vfs.ffs.sd_dir_entry=111
vfs.ffs.dirhash_dirsize=2560
vfs.ffs.dirhash_maxmem=2097152
vfs.ffs.dirhash_mem=90056
vfs.nfs.iothreads=-1