From nobody@FreeBSD.org  Tue Jan 22 01:29:35 2002
Return-Path: <nobody@FreeBSD.org>
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP id 7C29C37B402
	for <freebsd-gnats-submit@FreeBSD.org>; Tue, 22 Jan 2002 01:29:34 -0800 (PST)
Received: (from nobody@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id g0M9TY088576;
	Tue, 22 Jan 2002 01:29:34 -0800 (PST)
	(envelope-from nobody)
Message-Id: <200201220929.g0M9TY088576@freefall.freebsd.org>
Date: Tue, 22 Jan 2002 01:29:34 -0800 (PST)
From: Niels Piersma <niels@piersma.com>
To: freebsd-gnats-submit@FreeBSD.org
Subject: High NATD cpu usage
X-Send-Pr-Version: www-1.0

>Number:         34158
>Category:       bin
>Synopsis:       High NATD cpu usage
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    ru
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jan 22 01:30:01 PST 2002
>Closed-Date:    Fri Mar 22 03:57:47 PST 2002
>Last-Modified:  Thu Aug 22 16:50:02 PDT 2002
>Originator:     Niels Piersma
>Release:        4.4-RELEASE
>Organization:
>Environment:
FreeBSD mpogw.mpo.local 4.4-RELEASE FreeBSD 4.4-RELEASE #2: Sun Jan 13 16:14:42 CET 2002     niels@mpogw.mpo.local:/usr/src/sys/compile/MPOGW  i386
>Description:
NATD tops at 99,99% CPU load after about two days. (reported by top) result is a very slow machine and it needs to be rebooted. This is a Celly400 with 64Mb of RAM running IMAP, sendmail and NATD/IPFW. 

%dmesg |more
Copyright (c) 1992-2001 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 4.4-RELEASE #2: Sun Jan 13 16:14:42 CET 2002
    niels@mpogw.mpo.local:/usr/src/sys/compile/MPOGW
Timecounter "i8254"  frequency 1193182 Hz
CPU: Pentium II/Pentium II Xeon/Celeron (399.10-MHz 686-class CPU)
  Origin = "GenuineIntel"  Id = 0x665  Stepping = 5
  Features=0x183f9ff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR>
real memory  = 66977792 (65408K bytes)
config> en apm
config> q
avail memory = 60989440 (59560K bytes)
Preloaded elf kernel "kernel" at 0xc0429000.
Preloaded userconfig_script "/boot/kernel.conf" at 0xc042909c.
VESA: v1.2, 1024k memory, flags:0x0, mode table:0xc00c09da (c00009da)
VESA: S3 Incorporated. Trio64V+
Pentium Pro MTRR support enabled
md0: Malloc disk
Using $PIR table, 8 entries at 0xc00f64b0
apm0: <APM BIOS> on motherboard
apm: found APM BIOS v1.2, connected at v1.2
npx0: <math processor> on motherboard
npx0: INT 16 interface
pcib0: <Intel 82443BX (440 BX) host to PCI bridge> on motherboard
pci0: <PCI bus> on pcib0
pcib1: <Intel 82443BX (440 BX) PCI-PCI (AGP) bridge> at device 1.0 on pci0
pci1: <PCI bus> on pcib1
isab0: <Intel 82371AB PCI to ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
atapci0: <Intel PIIX4 ATA33 controller> port 0xffa0-0xffaf at device 7.1 on pci0
ata0: at 0x1f0 irq 14 on atapci0
ata1: at 0x170 irq 15 on atapci0
uhci0: <Intel 82371AB/EB (PIIX4) USB controller> port 0xef80-0xef9f irq 10 at device 7.2 on pci0
usb0: <Intel 82371AB/EB (PIIX4) USB controller> on uhci0
usb0: USB revision 1.0
uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1
uhub0: 2 ports with 2 removable, self powered
chip1: <Intel 82371AB Power management controller> port 0x440-0x44f at device 7.3 on pci0
pcm0: <AudioPCI ES1373-A> port 0xef00-0xef3f irq 9 at device 12.0 on pci0
fxp0: <Intel Pro 10/100B/100+ Ethernet> port 0xee80-0xeebf mem 0xfebc0000-0xfebdffff,0xfebef000-0xfebeffff irq 9 at device 14.0 on p
ci0
fxp0: Ethernet address 00:d0:b7:11:1e:7e
inphy0: <i82555 10/100 media interface> on miibus0
inphy0:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
pci0: <S3 Trio graphics accelerator> at 15.0 irq 11
fxp1: <Intel Pro 10/100B/100+ Ethernet> port 0xed80-0xedbf mem 0xfeba0000-0xfebbffff,0xfebee000-0xfebeefff irq 10 at device 16.0 on 
pci0
fxp1: Ethernet address 00:d0:b7:11:1f:95
inphy1: <i82555 10/100 media interface> on miibus1
inphy1:  10baseT, 10baseT-FDX, 100baseTX, 100baseTX-FDX, auto
isa0: too many memory ranges
orm0: <Option ROMs> at iomem 0xc0000-0xc7fff,0xc8000-0xc97ff,0xcc000-0xcd7ff on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x60,0x64 on isa0
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1 at port 0x2f8-0x2ff irq 3 on isa0
sio1: type 16550A
ppc0: <Parallel port> at port 0x378-0x37f irq 7 on isa0
ppc0: SMC-like chipset (ECP/EPP/PS2/NIBBLE) in COMPATIBLE mode
ppc0: FIFO with 16/16/8 bytes threshold
lpt0: <Printer> on ppbus0
lpt0: Interrupt-driven port
ppi0: <Parallel I/O> on ppbus0
plip0: <PLIP network interface> on ppbus0
unknown: <PNP0000> can't assign resources
unknown: <PNP0303> can't assign resources
unknown: <PNP0501> can't assign resources
unknown: <PNP0501> can't assign resources
unknown: <PNP0401> can't assign resources
DUMMYNET initialized (010124)
IP packet filtering initialized, divert enabled, rule-based forwarding enabled, default to deny, unlimited logging
IPsec: Initialized Security Association Processing.
IP Filter: v3.4.20 initialized.  Default = pass all, Logging = enabled
ad0: 9671MB <IBM-DTTA-351010> [19650/16/63] at ata0-master UDMA33
Mounting root from ufs:/dev/ad0s1a
fxp0: promiscuous mode enabled
module_register: module netgraph already exists!
linker_file_sysinit "netgraph.ko" failed to register! 17

kernel config:

machine         i386
cpu             I686_CPU
ident           MPOGW
maxusers        12

#makeoptions    DEBUG=-g                #Build kernel with gdb(1) debug symbols

options         MATH_EMULATE            #Support for x87 emulation
options         INET                    #InterNETworking
options         INET6                   #IPv6 communications protocols
options         FFS                     #Berkeley Fast Filesystem
options         FFS_ROOT                #FFS usable as root device [keep this!]
options         SOFTUPDATES             #Enable FFS soft updates support
options         MFS                     #Memory Filesystem
options         MD_ROOT                 #MD is a potential root device
options         NFS                     #Network Filesystem
options         NFS_ROOT                #NFS usable as root device, NFS required
options         MSDOSFS                 #MSDOS Filesystem
options         CD9660                  #ISO 9660 Filesystem
options         CD9660_ROOT             #CD-ROM usable as root, CD9660 required
options         PROCFS                  #Process filesystem
options         COMPAT_43               #Compatible with BSD 4.3 [KEEP THIS!]
options         SCSI_DELAY=15000        #Delay (in ms) before probing SCSI
options         UCONSOLE                #Allow users to grab the console
options         USERCONFIG              #boot -c editor
options         VISUAL_USERCONFIG       #visual boot -c editor
options         KTRACE                  #ktrace(1) support
options         SYSVSHM                 #SYSV-style shared memory
options         SYSVMSG                 #SYSV-style message queues
options         SYSVSEM                 #SYSV-style semaphores
options         P1003_1B                #Posix P1003_1B real-time extensions
options         _KPOSIX_PRIORITY_SCHEDULING
options         ICMP_BANDLIM            #Rate limit bad replies
options         KBD_INSTALL_CDEV        # install a CDEV entry in /dev

options         VESA
options         PNPBIOS
options         IPFIREWALL
options         IPFIREWALL_VERBOSE
options         IPFIREWALL_FORWARD
options         IPDIVERT
options         IPFILTER
options         IPFILTER_LOG
options         DUMMYNET
options         IPSTEALTH

options         NETGRAPH
options         NETGRAPH_PPPOE
options         NMBCLUSTERS=4192

options         IPSEC
options         IPSEC_ESP
options         IPSEC_DEBUG

device          isa
device          pci

# ATA and ATAPI devices
device          ata0    at isa? port IO_WD1 irq 14
device          ata1    at isa? port IO_WD2 irq 15
device          ata
device          atadisk                 # ATA disk drives
device          atapicd                 # ATAPI CDROM drives
device          atapifd                 # ATAPI floppy drives
device          atapist                 # ATAPI tape drives
options         ATA_STATIC_ID           #Static device numbering

# SCSI peripherals
device          scbus           # SCSI bus (required)
device          da              # Direct Access (disks)
device          sa              # Sequential Access (tape etc)
device          cd              # CD
device          pass            # Passthrough device (direct SCSI access)

# atkbdc0 controls both the keyboard and the PS/2 mouse
device          atkbdc0 at isa? port IO_KBD
device          atkbd0  at atkbdc? irq 1 flags 0x1
device          psm0    at atkbdc? irq 12

device          vga0    at isa?

# splash screen/screen saver
pseudo-device   splash

# syscons is the default console driver, resembling an SCO console
device          sc0     at isa? flags 0x100

# Floating point support - do not disable.
device          npx0    at nexus? port IO_NPX irq 13

# Power management support (see LINT for more options)
device          apm0    at nexus? disable flags 0x20 # Advanced Power Management

# Serial (COM) ports
device          sio0    at isa? port IO_COM1 flags 0x10 irq 4
device          sio1    at isa? port IO_COM2 irq 3

# Parallel port
device          ppc0    at isa? irq 7
device          ppbus           # Parallel port bus (required)
device          lpt             # Printer
device          plip            # TCP/IP over parallel
device          ppi             # Parallel port interface device
device          vpo             # Requires scbus and da

# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device          miibus          # MII bus support
device          fxp             # Intel EtherExpress PRO/100B (82557, 82558)
device          xl              # 3Com 3c90x (``Boomerang'', ``Cyclone'')
device          lnc             # Amd PCNET

# Pseudo devices - the number indicates how many units to allocate.
pseudo-device   loop            # Network loopback
pseudo-device   ether           # Ethernet support
pseudo-device   sl      1       # Kernel SLIP
pseudo-device   ppp     1       # Kernel PPP
pseudo-device   tun             # Packet tunnel.
pseudo-device   pty             # Pseudo-ttys (telnet etc)
pseudo-device   md              # Memory "disks"
pseudo-device   gif     4       # IPv6 and IPv4 tunneling
pseudo-device   faith   1       # IPv6-to-IPv4 relaying (translation)

# The `bpf' pseudo-device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
pseudo-device   bpf             #Berkeley packet filter

# USB support
device          uhci            # UHCI PCI->USB interface
device          ohci            # OHCI PCI->USB interface
device          usb             # USB Bus (required)
device          ugen            # Generic
device          uhid            # "Human Interface Devices"
device          ukbd            # Keyboard
device          ulpt            # Printer
device          umass           # Disks/Mass storage - Requires scbus and da
device          ums             # Mouse
device          uscanner        # Scanners
# USB Ethernet, requires mii
device          aue             # ADMtek USB ethernet
device          cue             # CATC USB ethernet
device          kue             # Kawasaki LSI USB ethernet

device          pcm
>How-To-Repeat:
Just wait a day
>Fix:
Reboot the machine
>Release-Note:
>Audit-Trail:
Responsible-Changed-From-To: freebsd-ports->freebsd-bugs 
Responsible-Changed-By: sf 
Responsible-Changed-When: Tue Jan 22 08:59:59 PST 2002 
Responsible-Changed-Why:  
not a ports issue. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=34158 

From: Ruslan Ermilov <ru@FreeBSD.org>
To: Niels Piersma <niels@piersma.com>
Cc: bug-followup@FreeBSD.org
Subject: Re: bin/34158: High NATD cpu usage
Date: Tue, 22 Jan 2002 19:17:58 +0200

 On Tue, Jan 22, 2002 at 01:29:34AM -0800, Niels Piersma wrote:
 > FreeBSD mpogw.mpo.local 4.4-RELEASE
 > 
 > NATD tops at 99,99% CPU load after about two days. (reported by
 > top) result is a very slow machine and it needs to be rebooted.
 > This is a Celly400 with 64Mb of RAM running IMAP, sendmail and
 > NATD/IPFW.
 > 
 Do you also have dummynet pipes configured on this box?
 How does your "ipfw show" output look like?
 
 
 Cheers,
 -- 
 Ruslan Ermilov		Oracle Developer/DBA,
 ru@sunbay.com		Sunbay Software AG,
 ru@FreeBSD.org		FreeBSD committer,
 +380.652.512.251	Simferopol, Ukraine
 
 http://www.FreeBSD.org	The Power To Serve
 http://www.oracle.com	Enabling The Information Age

From: Sheldon Hearn <sheldonh@starjuice.net>
To: Ruslan Ermilov <ru@FreeBSD.org>
Cc: bug-followup@freebsd.org
Subject: Re: bin/34158: High NATD cpu usage 
Date: Tue, 29 Jan 2002 18:57:49 +0200

 On Tue, 22 Jan 2002 09:20:01 PST, Ruslan Ermilov wrote:
 
 >  Do you also have dummynet pipes configured on this box?
 >  How does your "ipfw show" output look like?
 
 Hi Ruslan,
 
 On the box I had the same problem with, I wasn't using DUMMYNET.
 
 Perhaps you should give the originator the alias table dump patch you
 sent me?  I still haven't been able to try it out, and we're scheduled
 to switch to ipnat tomorrow.
 
 Ciao,
 Sheldon.

From: "Niels Piersma" <niels@piersma.com>
To: <freebsd-gnats-submit@FreeBSD.org>, <niels@piersma.com>
Cc:  
Subject: Re: bin/34158: High NATD cpu usage
Date: Fri, 1 Feb 2002 15:47:24 +0100

 This is a multi-part message in MIME format.
 
 ------=_NextPart_000_0006_01C1AB37.C14CA060
 Content-Type: text/plain;
 	charset="iso-8859-1"
 Content-Transfer-Encoding: quoted-printable
 
 Here a screen shot of TOP, with some high(er) cpu usage.
 =20
 last pid: 35819;  load averages:  0.08,  0.04,  0.00   up 12+03:18:02
 15:40:05
 28 processes:  3 running, 25 sleeping
 CPU states:  0.0% user,  0.0% nice,  0.0% system,  0.0% interrupt,  100%
 idle
 Mem: 15M Active, 12M Inact, 13M Wired, 568K Cache, 14M Buf, 18M Free
 Swap: 256M Total, 16K Used, 256M Free
 =F21;34H 0.08,  0.04,  0.00
   PID USERNAME PRI NICE  SIZE    RES STATE    TIME   WCPU    CPU COMMAND
 33734 root      28   0   492K   244K RUN     13:07  5.08%  5.08% natd
   203 root       2   0  2500K  1676K select   0:47  0.00%  0.00%
 sendmail
   269 root       2   0  1980K  1168K select   0:45  0.00%  0.00% nmbd
   258 root       2   0  1876K   972K select   0:34  0.00%  0.00% mpd
   241 root       4   0  2524K  2044K bpf      0:33  0.00%  0.00%
 arpwatch
   173 root       2   0  2392K  1768K select   0:07  0.00%  0.00% named
   195 root      10   0   968K   640K nanslp   0:05  0.00%  0.00% cron
   169 root       2   0   936K   572K select   0:05  0.00%  0.00% syslogd
   253 root       2   0  1064K   672K select   0:04  0.00%  0.00% dhcpd
   198 root       2   0  2548K  1300K select   0:02  0.00%  0.00% sshd
   200 root       2   0   904K   520K select   0:02  0.00%  0.00% usbd
   267 root       2   0  2512K  1204K select   0:01  0.00%  0.00% smbd
   193 root       2   0  1052K   696K select   0:01  0.00%  0.00% inetd
   271 root      -6   0  1940K  1044K piperd   0:00  0.00%  0.00% nmbd
 35816 niels     28   0  1896K   960K RUN      0:00  0.00%  0.00% top
 35813 root      28   0  2300K  1312K RUN      0:00  0.00%  0.00% telnetd
 =20
 This is only 5% but results in very slow ssh and telnet connections.
 =20
 Niels
 
 ------=_NextPart_000_0006_01C1AB37.C14CA060
 Content-Type: text/html;
 	charset="iso-8859-1"
 Content-Transfer-Encoding: quoted-printable
 
 <html xmlns:o=3D"urn:schemas-microsoft-com:office:office" =
 xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
 xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" =
 xmlns=3D"http://www.w3.org/TR/REC-html40">
 
 <head>
 <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
 charset=3Diso-8859-1">
 
 
 <meta name=3DProgId content=3DWord.Document>
 <meta name=3DGenerator content=3D"Microsoft Word 10">
 <meta name=3DOriginator content=3D"Microsoft Word 10">
 <link rel=3DFile-List href=3D"cid:filelist.xml@01C1AB37.BDCD3DA0">
 <o:SmartTagType =
 namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
  name=3D"PlaceType"/>
 <o:SmartTagType =
 namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
  name=3D"PlaceName"/>
 <o:SmartTagType =
 namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
  name=3D"place"/>
 <o:SmartTagType =
 namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags"
  name=3D"time"/>
 <!--[if gte mso 9]><xml>
  <o:OfficeDocumentSettings>
   <o:DoNotRelyOnCSS/>
  </o:OfficeDocumentSettings>
 </xml><![endif]--><!--[if gte mso 9]><xml>
  <w:WordDocument>
   <w:SpellingState>Clean</w:SpellingState>
   <w:GrammarState>Clean</w:GrammarState>
   <w:DocumentKind>DocumentEmail</w:DocumentKind>
   <w:EnvelopeVis/>
   <w:Compatibility>
    <w:BreakWrappedTables/>
    <w:SnapToGridInCell/>
    <w:WrapTextWithPunct/>
    <w:UseAsianBreakRules/>
   </w:Compatibility>
   <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel>
  </w:WordDocument>
 </xml><![endif]--><!--[if !mso]>
 <style>
 st1\:*{behavior:url(#default#ieooui) }
 </style>
 <![endif]-->
 <style>
 <!--
  /* Style Definitions */
  p.MsoNormal, li.MsoNormal, div.MsoNormal
 	{mso-style-parent:"";
 	margin:0cm;
 	margin-bottom:.0001pt;
 	mso-pagination:widow-orphan;
 	font-size:12.0pt;
 	font-family:"Times New Roman";
 	mso-fareast-font-family:"Times New Roman";
 	mso-ansi-language:NL;}
 a:link, span.MsoHyperlink
 	{color:blue;
 	text-decoration:underline;
 	text-underline:single;}
 a:visited, span.MsoHyperlinkFollowed
 	{color:purple;
 	text-decoration:underline;
 	text-underline:single;}
 span.EmailStyle17
 	{mso-style-type:personal-compose;
 	mso-style-noshow:yes;
 	mso-ansi-font-size:10.0pt;
 	mso-bidi-font-size:10.0pt;
 	font-family:Arial;
 	mso-ascii-font-family:Arial;
 	mso-hansi-font-family:Arial;
 	mso-bidi-font-family:Arial;
 	color:windowtext;}
 span.SpellE
 	{mso-style-name:"";
 	mso-spl-e:yes;}
 span.GramE
 	{mso-style-name:"";
 	mso-gram-e:yes;}
 @page Section1
 	{size:612.0pt 792.0pt;
 	margin:72.0pt 90.0pt 72.0pt 90.0pt;
 	mso-header-margin:35.4pt;
 	mso-footer-margin:35.4pt;
 	mso-paper-source:0;}
 div.Section1
 	{page:Section1;}
 -->
 </style>
 <!--[if gte mso 10]>
 <style>
  /* Style Definitions */=20
  table.MsoNormalTable
 	{mso-style-name:"Table Normal";
 	mso-tstyle-rowband-size:0;
 	mso-tstyle-colband-size:0;
 	mso-style-noshow:yes;
 	mso-style-parent:"";
 	mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
 	mso-para-margin:0cm;
 	mso-para-margin-bottom:.0001pt;
 	mso-pagination:widow-orphan;
 	font-size:10.0pt;
 	font-family:"Times New Roman";}
 </style>
 <![endif]-->
 </head>
 
 <body lang=3DEN-US link=3Dblue vlink=3Dpurple =
 style=3D'tab-interval:36.0pt'>
 
 <div class=3DSection1>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>Here a screen shot of TOP, =
 with some
 high(<span class=3DSpellE>er</span>) <span class=3DSpellE><span =
 class=3DGramE>cpu</span></span>
 usage.<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></font=
 ></p>
 
 <p class=3DMsoNormal><span class=3DGramE><font size=3D2 =
 face=3DArial><span
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:EN-US'>last=
 </span></font></span><font
 size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:
 EN-US'> <span class=3DSpellE>pid</span>: 35819;<span =
 style=3D'mso-spacerun:yes'>=A0
 </span>load averages:<span style=3D'mso-spacerun:yes'>=A0 =
 </span>0.08,<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.04,<span =
 style=3D'mso-spacerun:yes'>=A0
 </span>0.00<span style=3D'mso-spacerun:yes'>=A0=A0 </span>up =
 12+</span></font><st1:time
 Hour=3D"3" Minute=3D"18"><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
  =
 font-family:Arial;mso-ansi-language:EN-US'>03:18:02</span></font></st1:ti=
 me><font
 size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:
 EN-US'><span style=3D'mso-spacerun:yes'>=A0 =
 </span></span></font><st1:time Hour=3D"15"
 Minute=3D"40"><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:
  Arial;mso-ansi-language:EN-US'>15:40:05</span></font></st1:time><font =
 size=3D2
 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:
 EN-US'><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>28 processes:<span
 style=3D'mso-spacerun:yes'>=A0 </span>3 running, 25 =
 sleeping<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>CPU states:<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.0% user<span =
 class=3DGramE>,<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.0</span>% nice,<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.0% system,<span =
 style=3D'mso-spacerun:yes'>=A0
 </span>0.0% interrupt,<span style=3D'mso-spacerun:yes'>=A0 </span>100% =
 idle<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><span class=3DSpellE><font size=3D2 =
 face=3DArial><span
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:EN-US'>Mem<=
 /span></font></span><font
 size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:
 EN-US'>: 15M Active, 12M <span class=3DSpellE>Inact</span>, 13M Wired, =
 568K
 Cache, 14M <span class=3DSpellE>Buf</span>, 18M =
 Free<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>Swap: 256M Total, 16K Used, =
 256M
 Free<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>=F21<span =
 class=3DGramE>;34H</span>
 0.08,<span style=3D'mso-spacerun:yes'>=A0 </span>0.04,<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'><span =
 style=3D'mso-spacerun:yes'>=A0
 </span>PID USERNAME PRI <span class=3DGramE>NICE<span =
 style=3D'mso-spacerun:yes'>=A0
 </span>SIZE</span><span style=3D'mso-spacerun:yes'>=A0=A0=A0 =
 </span></span></font><st1:place><st1:PlaceName><font
   size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:
   EN-US'>RES</span></font></st1:PlaceName><font size=3D2 =
 face=3DArial><span
  style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:EN-US'> =
 </span></font><st1:PlaceType><font
   size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:
   EN-US'>STATE</span></font></st1:PlaceType></st1:place><font size=3D2
 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:
 EN-US'><span style=3D'mso-spacerun:yes'>=A0=A0=A0 </span>TIME<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>WCPU<span =
 style=3D'mso-spacerun:yes'>=A0=A0=A0
 </span>CPU COMMAND<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'>33734 root<span =
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0
 </span>28<span style=3D'mso-spacerun:yes'>=A0=A0 </span>0<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>492K<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>244K RUN<span style=3D'mso-spacerun:yes'>=A0=A0=A0=A0 =
 </span>13:07<span
 style=3D'mso-spacerun:yes'>=A0 </span>5.08%<span =
 style=3D'mso-spacerun:yes'>=A0
 </span>5.08% <span =
 class=3DSpellE>natd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>203 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0 </span>2500K<span
 style=3D'mso-spacerun:yes'>=A0 </span>1676K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:47<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>sendmail</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>269 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0 </span>1980K<span
 style=3D'mso-spacerun:yes'>=A0 </span>1168K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:45<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>nmbd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>258 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0 </span>1876K<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>972K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:34<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>mpd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>241 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>4<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0 </span>2524K<span
 style=3D'mso-spacerun:yes'>=A0 </span>2044K <span =
 class=3DSpellE>bpf</span><span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0 </span>0:33<span =
 style=3D'mso-spacerun:yes'>=A0
 </span>0.00%<span style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>arpwatch</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>173 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0 </span>2392K<span
 style=3D'mso-spacerun:yes'>=A0 </span>1768K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:07<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>named</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>195 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0 </span>10<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0=A0 </span>968K<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>640K <span =
 class=3DSpellE>nanslp</span><span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>0:05<span =
 style=3D'mso-spacerun:yes'>=A0
 </span>0.00%<span style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>cron</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>169 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0=A0 </span>936K<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>572K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:05<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>syslogd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>253 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0 </span>1064K<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>672K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:04 <span style=3D'mso-spacerun:yes'>=A0</span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>dhcpd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>198 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0 </span>2548K<span
 style=3D'mso-spacerun:yes'>=A0 </span>1300K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:02<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>sshd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>200 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0=A0 </span>904K<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>520K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:02<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>usbd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 </span>267 =
 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 </span>2<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0<span style=3D'mso-spacerun:yes'>=A0 </span>2512K<span
 style=3D'mso-spacerun:yes'>=A0 </span>1204K select<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:01<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>smbd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span lang=3DNL =
 style=3D'font-size:10.0pt;
 font-family:Arial'><span style=3D'mso-spacerun:yes'>=A0 =
 </span></span></font><font
 size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;font-family:Arial;mso-ansi-language:
 EN-US'>193 root<span style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0=A0 =
 </span>2<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span><span class=3DGramE>0<span
 style=3D'mso-spacerun:yes'>=A0 </span>1052K</span><span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>696K select<span style=3D'mso-spacerun:yes'>=A0=A0 =
 </span>0:01<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span =
 style=3D'mso-spacerun:yes'>=A0
 </span>0.00% <span =
 class=3DSpellE>inetd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'><span =
 style=3D'mso-spacerun:yes'>=A0
 </span>271 root<span style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0 =
 </span>-6<span
 style=3D'mso-spacerun:yes'>=A0=A0 </span><span class=3DGramE>0<span
 style=3D'mso-spacerun:yes'>=A0 </span>1940K</span><span =
 style=3D'mso-spacerun:yes'>=A0
 </span>1044K <span class=3DSpellE>piperd</span><span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span>0:00<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>nmbd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>35816 niels<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0 </span>28<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span><span class=3DGramE>0<span style=3D'mso-spacerun:yes'>=A0 =
 </span>1896K</span><span
 style=3D'mso-spacerun:yes'>=A0=A0 </span>960K RUN<span =
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0
 </span>0:00<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% =
 top<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>35813 root<span
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0 </span>28<span =
 style=3D'mso-spacerun:yes'>=A0=A0
 </span><span class=3DGramE>0<span style=3D'mso-spacerun:yes'>=A0 =
 </span>2300K</span><span
 style=3D'mso-spacerun:yes'>=A0 </span>1312K RUN<span =
 style=3D'mso-spacerun:yes'>=A0=A0=A0=A0=A0
 </span>0:00<span style=3D'mso-spacerun:yes'>=A0 </span>0.00%<span
 style=3D'mso-spacerun:yes'>=A0 </span>0.00% <span =
 class=3DSpellE>telnetd</span><o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></font=
 ></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>This is only 5% but results =
 in very
 slow <span class=3DSpellE><span class=3DGramE>ssh</span></span> and =
 telnet
 connections.<o:p></o:p></span></font></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'><o:p>&nbsp;</o:p></span></font=
 ></p>
 
 <p class=3DMsoNormal><font size=3D2 face=3DArial><span =
 style=3D'font-size:10.0pt;
 font-family:Arial;mso-ansi-language:EN-US'>Niels<o:p></o:p></span></font>=
 </p>
 
 </div>
 
 </body>
 
 </html>
 
 ------=_NextPart_000_0006_01C1AB37.C14CA060--
 
 
State-Changed-From-To: open->closed 
State-Changed-By: ru 
State-Changed-When: Fri Mar 22 03:56:57 PST 2002 
State-Changed-Why:  
Believed to be fixed in natd.c,v 1.25.2.5. 


Responsible-Changed-From-To: freebsd-bugs->ru 
Responsible-Changed-By: ru 
Responsible-Changed-When: Fri Mar 22 03:56:57 PST 2002 
Responsible-Changed-Why:  

http://www.freebsd.org/cgi/query-pr.cgi?pr=34158 

From: Lars Eggert <larse@ISI.EDU>
To: freebsd-gnats-submit@FreeBSD.org, niels@piersma.com,
	ru@FreeBSD.org
Cc:  
Subject: Re: bin/34158: High NATD cpu usage
Date: Thu, 22 Aug 2002 16:42:59 -0700

 This is a cryptographically signed message in MIME format.
 
 --------------ms040009010407040105020501
 Content-Type: text/plain; charset=us-ascii; format=flowed
 Content-Transfer-Encoding: 7bit
 
 Hi,
 
 I just hit the same problem under FreeBSD 4.6-RELEASE, so it doesn't 
 seem to be completely fixed yet. (I'm not using dummynet, and have only 
 a dozend ipfw rules configured.)
 
 Lars
 -- 
 Lars Eggert <larse@isi.edu>           USC Information Sciences Institute
 
 --------------ms040009010407040105020501
 Content-Type: application/x-pkcs7-signature; name="smime.p7s"
 Content-Transfer-Encoding: base64
 Content-Disposition: attachment; filename="smime.p7s"
 Content-Description: S/MIME Cryptographic Signature
 
 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIIrjCC
 ArUwggIeoAMCAQICAwWBRzANBgkqhkiG9w0BAQIFADCBkjELMAkGA1UEBhMCWkExFTATBgNV
 BAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUx
 HTAbBgNVBAsTFENlcnRpZmljYXRlIFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVl
 bWFpbCBSU0EgMjAwMC44LjMwMB4XDTAxMDgyNDE2NDAwMFoXDTAyMDgyNDE2NDAwMFowVDEP
 MA0GA1UEBBMGRWdnZXJ0MQ0wCwYDVQQqEwRMYXJzMRQwEgYDVQQDEwtMYXJzIEVnZ2VydDEc
 MBoGCSqGSIb3DQEJARYNbGFyc2VAaXNpLmVkdTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkC
 gYEA0AvLBsD78nxcUHeHkaMgl3b4qYPnfgbf8Lh+HQP8RgGMRG/Yb+vTpkGezlwt9pkJxiD1
 1uZDy4CNNJUu3gKxKSb+zRV70O+lkwwftuHoLHoH4xwo3LcQ2LGDpd+I95tUN4dfJ3TmeEcU
 SF50dC/SuUI4w8AlhXQ8IxrhgdayTpECAwEAAaNWMFQwKgYFK2UBBAEEITAfAgEAMBowGAIB
 BAQTTDJ1TXlmZkJOVWJOSkpjZFoyczAYBgNVHREEETAPgQ1sYXJzZUBpc2kuZWR1MAwGA1Ud
 EwEB/wQCMAAwDQYJKoZIhvcNAQECBQADgYEAheZhn0pQA8zI7U2K1ZIAl11j0a1DKxnp3GtT
 vOUrGRB3WvYxidvdZ1kizhEsWeXU81TkNDH0DaRqtOEeu6Q2OhB+jeKEqY7IDAJE4/fI0e+d
 6PnG1hd+vEvYmsKHkmzBhPc94XUOKNWO+qVNP2NGyNI3QIDy5wX4fdcOo1S34r4wggK1MIIC
 HqADAgECAgMFgUcwDQYJKoZIhvcNAQECBQAwgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxX
 ZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYD
 VQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwg
 UlNBIDIwMDAuOC4zMDAeFw0wMTA4MjQxNjQwMDBaFw0wMjA4MjQxNjQwMDBaMFQxDzANBgNV
 BAQTBkVnZ2VydDENMAsGA1UEKhMETGFyczEUMBIGA1UEAxMLTGFycyBFZ2dlcnQxHDAaBgkq
 hkiG9w0BCQEWDWxhcnNlQGlzaS5lZHUwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANAL
 ywbA+/J8XFB3h5GjIJd2+KmD534G3/C4fh0D/EYBjERv2G/r06ZBns5cLfaZCcYg9dbmQ8uA
 jTSVLt4CsSkm/s0Ve9DvpZMMH7bh6Cx6B+McKNy3ENixg6XfiPebVDeHXyd05nhHFEhedHQv
 0rlCOMPAJYV0PCMa4YHWsk6RAgMBAAGjVjBUMCoGBStlAQQBBCEwHwIBADAaMBgCAQQEE0wy
 dU15ZmZCTlViTkpKY2RaMnMwGAYDVR0RBBEwD4ENbGFyc2VAaXNpLmVkdTAMBgNVHRMBAf8E
 AjAAMA0GCSqGSIb3DQEBAgUAA4GBAIXmYZ9KUAPMyO1NitWSAJddY9GtQysZ6dxrU7zlKxkQ
 d1r2MYnb3WdZIs4RLFnl1PNU5DQx9A2karThHrukNjoQfo3ihKmOyAwCROP3yNHvnej5xtYX
 frxL2JrCh5JswYT3PeF1DijVjvqlTT9jRsjSN0CA8ucF+H3XDqNUt+K+MIIDODCCAqGgAwIB
 AgIQZkVyt8x09c9jdkWE0C6RATANBgkqhkiG9w0BAQQFADCB0TELMAkGA1UEBhMCWkExFTAT
 BgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3duMRowGAYDVQQKExFUaGF3
 dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBTZXJ2aWNlcyBEaXZpc2lv
 bjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENBMSswKQYJKoZIhvcNAQkB
 FhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAwMDgzMDAwMDAwMFoXDTA0MDgy
 NzIzNTk1OVowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNV
 BAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBT
 ZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIwMDAuOC4zMDCBnzAN
 BgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3jMypmPHCSVFPtJueCdngcXaiBmClw7jRCmKYzUq
 bXA8+tyu9+50bzC8M5B/+TRxoKNtmPHDT6Jl2w36S/HW3WGl+YXNVZo1Gp2Sdagnrthy+boC
 9tewkd4c6avgGAOofENCUFGHgzzwObSbVIoTh/+zm51JZgAtCYnslGvpoWkCAwEAAaNOMEww
 KQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVMYWJlbDEtMjk3MBIGA1UdEwEB/wQI
 MAYBAf8CAQAwCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBBAUAA4GBADGxS0dd+QFx5fVTbF15
 1j2YwCYTYoEipxL4IpXoG0m3J3sEObr85vIk65H6vewNKjj3UFWobPcNrUwbvAP0teuiR59s
 ogxYjTFCCRFssBpp0SsSskBdavl50OouJd2K5PzbDR+dAvNa28o89kTqJmmHf0iezqWf54TY
 yWJirQXGMYICpjCCAqICAQEwgZowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0ZXJu
 IENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQLExRD
 ZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNBIDIw
 MDAuOC4zMAIDBYFHMAkGBSsOAwIaBQCgggFhMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEw
 HAYJKoZIhvcNAQkFMQ8XDTAyMDgyMjIzNDI1OVowIwYJKoZIhvcNAQkEMRYEFPhpyIOhBUWZ
 1EL00yt9jRmEumiZMFIGCSqGSIb3DQEJDzFFMEMwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwIC
 AgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGtBgsqhkiG9w0B
 CRACCzGBnaCBmjCBkjELMAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAG
 A1UEBxMJQ2FwZSBUb3duMQ8wDQYDVQQKEwZUaGF3dGUxHTAbBgNVBAsTFENlcnRpZmljYXRl
 IFNlcnZpY2VzMSgwJgYDVQQDEx9QZXJzb25hbCBGcmVlbWFpbCBSU0EgMjAwMC44LjMwAgMF
 gUcwDQYJKoZIhvcNAQEBBQAEgYBPYcG6YiYgqbm/MJEA46Nr/QzgARm3tk/E97xVeFASKctp
 ay+bG/DT5GHv9M8bZ2Zj1vzY9hX77fL7+Sfiafyj6Qw4ebaBBVYHQ/nRdq1+v/wepGH53HnU
 q1TmXy5VJyHOFiM7Qu+4YqTDaOrl4cql9V2kWGeXVyYPJ6YGireRZwAAAAAAAA==
 --------------ms040009010407040105020501--
 
>Unformatted:
