Re: firewall lockup (arpresolve: can't allocate llinfo)

[Frank Bax <fbax_(_at_)_sympatico_(_dot_)_ca>]

I just joined this list on the weekend, so don't know the background to
this problem.
Recently I got a lot of these messages also, but we fixed it.  Here's what
happened.

I have had an OpenBSD 2.6 system running at my ISP's server park for about
a year now.  Last week I installed 2.8 on a newer box and took it to the
server room with plans to migrate from 2.6 box to 2.8 box.  When I first
reconfigured ip, subnet, gateway, etc for the new enviroment on the new 2.8
box, it was connected to the same hub/switch/subnet as the 2.6 box, but I
got a lot of these messages and it turned out to be a routing problem in
the network, nothing wrong with my settings.  We didn't exactly identify
the specific cause of the problem; we were in a hurry; my box was simply
re-connected to a new hub/switch/subnet, given a new ip addr and gateway;
problem went away.

A few days later; when the final moment came to "swap" the ip addresses of
the two boxes (to go "live" on 2.8), we swapped cables between to boxes and
settings for ip,subnet,gateway,etc.  I ran into the same problem again
because I mistyped the ip address of the gateway server on the 2.8 box.
Fixed my typo, rebooted and messages went away.

Sorry if this is completely unrelated to the original problem...

Frank


At 05:05 PM 5/22/01 +0200, you wrote:
>On Tue, May 22, 2001 at 03:18:41PM +0100, Ben Summers wrote:
>[...]
>> 
>> I get lots of
>> 
>> 	/bsd arpresolve: can't allocate llinfo
>> 
>[...]
>> 
>> I've searched around on the openbsd site, faqs, google and deja, and can't 
>> find exactly what this message means, and what can be done about it.
>
>yes, i've been stuck a while ago with the similar problem. my fw did
>not fall, but generated a huge number of such messages. when i changed
>arpresolve() in sys/netinet/if_ether.c to show dst, it shows me i
>can't allocate llinfo for dst 127.0.0.1. i've been planning to take
>tcpdumps off all interfaces and analyze them at the time messages were
>generated...
>
>i've also searched through the i-net, but had no success finding what
>this message can mean, despite number of questions about it. may be
>people who understand the logic could help us once and for good?..
>
>BTW, my fw dhcp which serves two networks and acts as fw/nat/dns/smtp/pop3
>box...
>
>-- 
>Denis A. Doroshenko  [GPRS/IN/WAP, VAS group engineer] .-.        _|_  |
>[Omnitel Ltd., T.Sevcenkos st. 25, Vilnius, Lithuania] | | _ _  _ .| _ |
>[Phone: +370 9863486 E-mail: d_(_dot_)_doroshenko_(_at_)_omnitel_(_dot_)_net] |_|| | || |||(/_|_