From colinr at caveo.ca Fri Jun 23 09:15:40 2006 From: colinr at caveo.ca (Colin Ryan) Date: Fri, 23 Jun 2006 12:15:40 -0400 Subject: [ethbridge-discuss] Addif to primary interface causing syslog race and eventual crash. In-Reply-To: <447782E5.2070102@sun.com> References: <44774C62.7090102@caveo.ca> <447782E5.2070102@sun.com> Message-ID: <449C13AC.8010804@caveo.ca> Thanks that seems to have fixed that problem. Just an FYI that is probably nothing new to you folks. I was curious if I could use this bridge interface to bridge the physical interface and the tun0 interface that is instantiated when openvpn is started...alas....this sends the whole thing into a tizzy. Not unsurprising since tap/tun is a userland interface I believe. I'll try to get some decent logs for you for your interest. Shame really. I was hoping to be able to take advantage of the the bridging functions that openvpn provides when used on Linux systems via the tap interface element of the tun/tap open source virtual interface. I miss the ability to have DHCP services bridged out to the VPN subnet when I move to Solaris. I expect that I could likely make something work by using two physical interfaces but my hardware platform limits me in that. The tun/tap interface is old. http://en.wikipedia.org/wiki/TUN/TAP Maybe I'll point the openvpn folks to your project..... Cheers Go OpenSolaris and all related projects!!! C Mike Ditto wrote: > Colin Ryan wrote: > [about a panic] > > We need to see a less corrupted copy of the panic messages. Or start up > mdb(1) on the crash dump files and type $c and send that output for > starters. > > You may have hit a bug in the debug message code; you could try setting > bridge_debug to 0 or 1 instead of 2. I'm pretty sure the debug level 2 > code will panic on SPARC if it receives an unaligned packet, for example. > > >> Also you reference that it doesn't work yet with IPFilter. Does this >> mean that having IP filter running AT ALL is an issue or that the bridge >> cannot span through IP filter or be otherwise managed by IP filter. > > > bridge and IPFilter co-exist just fine, but IPFilter doesn't see or > filter > packets as they go through the bridge; IPFilter only filters packets > as they > enter or leave the IP stack. Someday we'd like to have IPFilter > acting on > the packets as they go through the bridge. > > -=] Mike [=- >