i was hoping to have tested this already but i just had to burn the
couple of hours i had "spare" on getting some ipsec boxes to start
talking to each other again. maybe next week.
to replicate, on a fast nearby machine:
pkg_add netrate
netblast ip.addr.of.vr 1234 5 10
i typically saw hangs in a fraction of a second on a vr/geode system.
to recover connect in on another nic or the console and ifconfig vrX down
then ifconfig vrX up.