Michele Guerini Rocco

> What about /proc/net/xfrm_stat is that going up with ping traffic? I don't have this file, the kernel I'm using is probably not built with xfrm_proc... > Did you enable...

A standard Linux 6.6.30 kernel. Anyway, I recompiled with `CONFIG_XFRM_STATISTICS=y` and re-run the tests. All the counters in /proc/net/xfrm_stat remain at 0 while trying to ping (client->server or server->client).

There is no firewall besides the NAT on the router, but the test fails even with server and client on the same IPv4 subnet, so I don't think the NAT...

I tried this test, on the client (2001:db8:0:0:c::) I do: ``` [root@client]# nc -u inner 1234 hello! ``` while the inner host (2001:db8::2) is running ``` [root@inner]# nc -lu ::...

> when the IPsec connection is up and pinging from the client to the server, on the server (ICMPv6 receiver) what is the output of ip -6 route ``` [root@server]#...

I tried both ways and repeating the above test: no apparent changes.

It seems to be working, but the probe is not firing while the client is pinging (either `inner` or `server`): ``` [root@server]# bpftrace -e 'kretprobe:icmpv6_echo_reply { printf("icmpv6_echo_reply returned: %d\n", retval);...

> Is the server fedora or debian? NixOS, all the hosts (client, router, server, inner) are minimal VMs running in Qemu and connected to each other using VDE switches. I...

> on the server. Do you still see tcpdump receiving ICMPv6 packet on the server? With bpftrace running? Yes.

I have been using this patch for years on GNU/Linux with X.org to get correct DPI scaling: ``` --- a/lib/matplotlib/backends/_backend_tk.py +++ b/lib/matplotlib/backends/_backend_tk.py @@ -212,6 +212,10 @@ class FigureCanvasTk(FigureCanvasBase): self._tkcanvas.focus_set() +...