Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
From: David Gwynne (dlgcvs.openbsd.org)
Date: Fri Jul 09 2010 - 06:16:45 CDT
Module name: src
Changes by: dlgcvs.openbsd.org 2010/07/09 05:16:45
sys/net : if_pfsync.c
the current code doesnt detect when its filled a bulk packet so it
keeps on building them, which means that it floods the tx ring on
the pfsync interface rather than actually sending many packets.
this change correctly calculates when we've filled a bulk update
many thanks to david for making me go chase this. ive been wondering
why the state count on my firewalls has had such a discrepency for
a long time now.