Subject: Re: VAX code generation problem wrt IPSEC?
To: None <port-vax@netbsd.org, current-users@netbsd.org>
From: Olaf Seibert <rhialto@polderland.nl>
List: current-users
Date: 11/12/2001 01:04:24
On Sun 11 Nov 2001 at 21:57:15 +0100, Olaf Seibert wrote:
> I am now compiling a -O0 kernel to see if it makes more difference.
For starters, it breaks savecore and domain lookups:
savecore: can't find device 3536/854608
ntpdate[111]: can't find host azenomei.falu.nl
ntpdate[111]: no servers can be used, exiting
00:49:33.214965 xzan.falu.nl.65519 > azenomei.falu.nl.domain: 63033+ A? azenomei.falu.nl.falu.nl. (42)
(with no reply)
00:50:48.441532 azenomei.falu.nl > xzan.falu.nl: icmp: echo request
and pings are not replied to anymore.
00:57:35.688598 xzan.falu.nl > azenomei.falu.nl: icmp: echo request
Pings from the vax are also not replied by the alpha??? tcpdump, running
on the alpha can see them though.
I briefly thought I had not turned off all IPsec stuff on the alpha side
(azenomei) but since tcpdunp shows this stuff in the clear, that cannot
be the case.
Looking at netstat -s gives apparently the answer:
ip:
42720111 total packets received
195 bad header checksums (and rising)
So if -O0 really breaks all that stuff it will not be very useful for
testing. At least the checksum algorithm is affected, maybe that gives a
hint for what's wrong with IPsec.
-Olaf.
--
___ Olaf 'Rhialto' Seibert - rhialto@polder --They that can give up essential
\X/ land.nl --liberty to purchase a little temporary safety
--------------deserve neither liberty or safety. - Benjamin Franklin, 1759
---People will accept your ideas much more readily if you tell them that
---Benjamin Franklin said it first. - Unknown