3.3 problems with named, memory and dying net interfaces

[Oliver Neubauer <oli_(_at_)_bronskill_(_dot_)_com>]

Hello all,

As of upgrading to 3.3, I've run into some problems and I'm hoping to 
pick the collective brains of the community as mailing list archive 
haven't turned up anything useful.......

The symptoms are many, but they're all essentially related to memory 
starvation. The question is: why now? (I'm still using the same amount 
of RAM, running the same services etc). The boxes in question are all 
recent upgrades to 3.3 and act as NAT gateways running pf, dhcpd, named, 
and isakmpd.

So, the symptom(s):

1. named very often dumps this into the logs or console, but continues 
to function normally (or so it seems). It only does this for requests 
that come in on a particulr interface (in this case, the "outside" one):
# May 22 02:47:15 marmot named[8641]: client 206.xx.xxx.xx#64715: error 
sending response: not enough free resources

2 I've noticed that named memory usage seems to just blossom out of 
nowhere. One machine that I have running 3.2  shows named useing just 
over 2M of memory after months of usage. The named daemons on 3.3 boxes 
runs up to 6 or 7M within less than a week.

3. One box dumped this isakmpd message to the log around the time it's 
outside network connection died (internally, the box was still 
available, but the external interface was dead and/or routes were messed up.
# May 22 02:56:25 wareroute isakmpd[12585]: sendmsg (5, 0xcfbfd8c0, 0): 
No buffer space available


The only thing I'm doing differently from before is implementing the pf 
priority queue to send empty acks before other packets. This pf config 
alteration comes right from the pf faq.....could this be causing a problem?

NMBCLUSTERS is set to 8192. Monitoring mbuf doesn't reveal anything unusual.

Any hints or tips would be very welcome.
Oliver

here's my dmesg from one of the boxes. other logs, outputs available on 
request.

OpenBSD 3.3-stable (MARMOT) #2: Thu May 15 09:30:57 PDT 2003
   root_(_at_)_marmot:/usr/src/sys/arch/i386/compile/MARMOT
cpu0: F00F bug workaround installed
cpu0: Intel Pentium (P54C) ("GenuineIntel" 586-class) 150 MHz
cpu0: FPU,V86,DE,PSE,TSC,MSR,MCE,CX8
real mem  = 33128448 (32352K)
avail mem = 28151808 (27492K)
using 430 buffers containing 1761280 bytes (1720K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(fe) BIOS, date 08/18/99, BIOS32 rev. 0 @ 0xf0530
apm0 at bios0: Power Management spec V1.2 (BIOS mgmt disabled)
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev. 2.1 @ 0xf0000/0xbb2
pcibios0: PCI IRQ Routing Table rev. 1.0 @ 0xf0b40/112 (5 entries)
pcibios0: PCI Interrupt Router at 000:07:0 ("Acer Labs M1543 PCI-ISA" 
rev 0x00)
pcibios0: PCI bus #1 is the last bus
bios0: ROM list: 0xc0000/0x8000
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Acer Labs M1541 Host-PCI" rev 0x04
ppb0 at pci0 dev 1 function 0 "Acer Labs M5243 AGP/PCI-PCI" rev 0x04
pci1 at ppb0 bus 1
"Acer Labs M7101 Power Mgmt" rev 0x00 at pci0 dev 3 function 0 not 
configured
pcib0 at pci0 dev 7 function 0 "Acer Labs M1543 PCI-ISA" rev 0xc3
ep0 at pci0 dev 9 function 0 "3Com 3c590 10Mbps" rev 0x00: address 
00:20:af:f5:c6:82, utp default utp/autoselect irq 12
vga1 at pci0 dev 11 function 0 "Cirrus Logic CL-GD5446" rev 0x00
wsdisplay0 at vga1: console (80x25, vt100 emulation)
wsdisplay0: screen 1-5 added (80x25, vt100 emulation)
pciide0 at pci0 dev 15 function 0 "Acer Labs M5229 UDMA IDE" rev 0xc1: 
DMA, channel 0 configured to compatibility, channel 1 configured to 
compatibility
wd0 at pciide0 channel 0 drive 0: <QUANTUM FIREBALL EX3.2A>
wd0: 16-sector PIO, LBA, 3079MB, 6256 cyl, 16 head, 63 sec, 6306048 sectors
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 2
pciide0: channel 1 disabled (no drives)
isa0 at pcib0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard, using wsdisplay0
ne1 at isa0 port 0x300/32 irq 10
ne1: NE2000 (RTL8019) Ethernet
ne1: address 00:40:33:d0:b0:64
pcppi0 at isa0 port 0x61
sysbeep0 at pcppi0
lpt0 at isa0 port 0x378/4 irq 7
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask 4040 netmask 5440 ttymask 54c2
pctr: 586-class performance counters and user-level cycle counter enabled
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302