bwm-tools-tech

[bwm-tools-tech] Problems with bwmd

[Gianluca F. <g.f...@io...>]

Hi folks,

After a lot of time searching the web for a badwidth throttling system, I
found bwm_tools and I must admit I simply love this tool. I installed it on
my firewall and it worked perfectly.
This morning I found a bad surprise though, my firewall crashed and all I
have found in the logs are these entries:

Sep  6 09:08:42 zizou bwmd: Failed to ACCEPT packet
Sep  6 09:09:13 zizou last message repeated 1325 times
Sep  6 09:09:15 zizou last message repeated 92 times

I'm running a SuSE Linux 9.2 - kernel 2.6.8-24-smp with bwm_tools vers.
0.2.1 and iptables 1.2.11
My bwmd config is rather simple, I only throttled incoming http:

<firewall>
<traffic>
                 <flow name="http_in" max-rate="64000" burst-rate="64000"
nfmark="100"/>
</traffic>
</firewall>

I'm marking packets coming from the outside interface from port 80 in the
prerouting chain of the mangle table, and enqueing them in the forward
chain.
The only strange thing that I've thought is that since I have set input,
forward and output chain to DROP, maybe I'm missing some rules to allow
traffic to and from the daemon itself.

Anyone got a clue on this?

Any help appreciated.

Thxs, 

---------------------------------------
Gianluca Francavilla
System Administrator
ION Trading S.r.l
Via San Martino, 52 - 56125 Pisa - Italy
Tel. +39 050 220371
Email g.f...@io...
---------------------------------------

Re: [bwm-tools-tech] Problems with bwmd

[Nigel K. <nk...@lb...>]

Gianluca Francavilla wrote:

>Hi folks,
>
>After a lot of time searching the web for a badwidth throttling system, I
>found bwm_tools and I must admit I simply love this tool. I installed it on
>my firewall and it worked perfectly.
>  
>
I'm glad  :-)

>This morning I found a bad surprise though, my firewall crashed and all I
>have found in the logs are these entries:
>
>Sep  6 09:08:42 zizou bwmd: Failed to ACCEPT packet
>Sep  6 09:09:13 zizou last message repeated 1325 times
>Sep  6 09:09:15 zizou last message repeated 92 times
>
>  
>

I saw this once aswell..... that is once few years!

I think it could be related to packets with ECN bit set, bwm-tools tries
to handle this... although I think that handling might be a bit b0rked.

Someone else reported a similar problem, I therefore disabled
ECN/QOS/PREC bit fiddling in the latest devel snapshot.

Can you try the latest snapshot and see if it doesn't solve your problem?

By the way, how often does it occur?



Regards
Nigel

RE: [bwm-tools-tech] Problems with bwmd

[Gianluca F. <g.f...@io...>]

Hi Nigel,

Thanks a lot for your quick reply, I will download and istall the latest
devel snapshot today and try it right out.
The daemon was restarted this morning about a quarter to nine and as u saw
the log reported the error about half an hour after.
Yesterday the daemon ran for the whole day and the error occurred at night.
It seems to be happening randomly.

Best regards,

Gianluca
 

-----Original Message-----
From: Nigel Kukard [mailto:nk...@lb...] 
Sent: Tuesday, September 06, 2005 9:46 AM
To: g.f...@io...
Cc: bwm...@li...
Subject: Re: [bwm-tools-tech] Problems with bwmd


Gianluca Francavilla wrote:

>Hi folks,
>
>After a lot of time searching the web for a badwidth throttling system, I
>found bwm_tools and I must admit I simply love this tool. I installed it on
>my firewall and it worked perfectly.
>  
>
I'm glad  :-)

>This morning I found a bad surprise though, my firewall crashed and all I
>have found in the logs are these entries:
>
>Sep  6 09:08:42 zizou bwmd: Failed to ACCEPT packet
>Sep  6 09:09:13 zizou last message repeated 1325 times
>Sep  6 09:09:15 zizou last message repeated 92 times
>
>  
>

I saw this once aswell..... that is once few years!

I think it could be related to packets with ECN bit set, bwm-tools tries
to handle this... although I think that handling might be a bit b0rked.

Someone else reported a similar problem, I therefore disabled
ECN/QOS/PREC bit fiddling in the latest devel snapshot.

Can you try the latest snapshot and see if it doesn't solve your problem?

By the way, how often does it occur?



Regards
Nigel