Messages in this thread | | | Date | Thu, 11 Nov 1999 23:20:33 +0100 (CET) | From | Robbert Muller <> | Subject | [OOPS] network dump in [unix_dgram_sendmsg] |
| |
Hi
got a oops in the network code, here is the report
[1.] One line summary of the problem: Oops in netwerk code [unix_dgram_sendmsg]
[2.] Full description of the problem/report: I'm running a scanlogd ( from http://www.openwall.com ) which checks connections made to my machine and report them when it looks like a portscan
[3.] Keywords (i.e., modules, networking, kernel): Network Datagram Sending [4.] Kernel version (from /proc/version): Linux version 2.2.13 (root@mjrider.student.utwente.nl) (gcc version egcs-2.91.66 19990314/Linux (egcs-1.1.2 release)) #1 Sat Oct 23 14:34:41 CEST 1999
[5.] Output of Oops.. message (if applicable) with symbolic information resolved (see Documentation/oops-tracing.txt) WARNING: This version of ksymoops is obsolete. WARNING: The current version can be obtained from ftp://ftp.ocs.com.au/pub/ksymoops Options used: -V (default) -o /lib/modules/2.2.13/ (default) -k /proc/ksyms (default) -l /proc/modules (default) -m /usr/src/linux/System.map (default) -c 1 (default)
You did not tell me where to find symbol information. I will assume that the log matches the kernel and modules that are running right now and I'll use the default options above for symbol resolution. If the current kernel and/or modules do not match the log, you can get more accurate output by telling me the kernel version and where to find map, modules, ksyms etc. ksymoops -h explains the options.
Warning in compare_ksyms_lsmod, module 3c59x is in lsmod but not in ksyms, probably no symbols exported Warning in compare_ksyms_lsmod, module ip_masq_ftp is in lsmod but not in ksyms, probably no symbols exported Warning in compare_ksyms_lsmod, module ip_masq_irc is in lsmod but not in ksyms, probably no symbols exported Warning in compare_ksyms_lsmod, module ip_masq_quake is in lsmod but not in ksyms, probably no symbols exported Warning in compare_ksyms_lsmod, module ip_masq_raudio is in lsmod but not in ksyms, probably no symbols exported Unable to handle kernel NULL pointer dereference at virtual address 00000000 current->tss.cr3 = 00ddf000, %cr3 = 00ddf000 *pde = 00000000 Oops: 0002 CPU: 0 EIP: 0010:[<c01850f9>] EFLAGS: 00010003 eax: 00000000 ebx: c240f340 ecx: c3229960 edx: 00000297 esi: c240f384 edi: c14dc020 ebp: c33f1e60 esp: c33f1e40 ds: 0018 es: 0018 ss: 0018 Process scanlogd-ipchai (pid: 15943, process nr: 88, stackpage=c33f1000) Stack: c0184e9c c3229960 c33f1e58 00035a4d 00000000 00000000 00000000 0000000e c3f98b3c c015a170 c3f98b3c c33f1ed4 00000030 c33f1e94 00000004 c3f98b3c 00000000 00000000 c33f1e94 c0184e9c c33f1e94 00003e47 00000000 00000000 Call Trace: [<c0184e9c>] [<c015a170>] [<c0184e9c>] [<c015ac4f>] [<c0120396>] [<c011fd5c>] [<c0118d15>] [<c0118d6f>] [<c0118e3c>] [<c015ac92>] [<c015b405>] [<c0107a85>] [<c0107980>] Code: 89 38 52 9d 8b 4d 10 51 53 8b 83 f4 02 00 00 ff d0 8b 4d e4
>>EIP: c01850f9 <unix_dgram_sendmsg+25d/2cc> Trace: c0184e9c <unix_dgram_sendmsg+0/2cc> Trace: c015a170 <sock_sendmsg+88/ac> Trace: c0184e9c <unix_dgram_sendmsg+0/2cc> Trace: c015ac4f <sys_sendto+c7/ec> Trace: c0120396 <read_swap_cache_async+92/9c> Trace: c011fd5c <swap_in+2c/160> Trace: c0118d15 <do_no_page+51/b8> Trace: c0118d6f <do_no_page+ab/b8> Code: c01850f9 <unix_dgram_sendmsg+25d/2cc> 00000000 <_EIP>: <=== Code: c01850f9 <unix_dgram_sendmsg+25d/2cc> 0: 89 38 movl %edi,(%eax) <=== Code: c01850fb <unix_dgram_sendmsg+25f/2cc> 2: 52 pushl %edx Code: c01850fc <unix_dgram_sendmsg+260/2cc> 3: 9d popf Code: c01850fd <unix_dgram_sendmsg+261/2cc> 4: 8b 4d 10 movl 0x10(%ebp),%ecx Code: c0185100 <unix_dgram_sendmsg+264/2cc> 7: 51 pushl %ecx Code: c0185101 <unix_dgram_sendmsg+265/2cc> 8: 53 pushl %ebx Code: c0185102 <unix_dgram_sendmsg+266/2cc> 9: 8b 83 f4 02 00 00 movl 0x2f4(%ebx),%eax Code: c0185108 <unix_dgram_sendmsg+26c/2cc> f: ff d0 call *%eax Code: c018510a <unix_dgram_sendmsg+26e/2cc> 11: 8b 4d e4 movl 0xffffffe4(%ebp),%ecx
8 warnings issued. Results may not be reliable.
[6.] A small shell script or example program which triggers the problem (if possible) Sorry got my version of scanlogd source in http://mjrider.student.utwente.nl/scanlogd-ipchains.c
which is modified to call ipchains to generate a firewall rule
[7.] Environment RedHat linux 6.1 with home made kernel Updated to the last update
[7.1.] Software (add the output of the ver_linux script here) -- Versions installed: (if some fields are empty or looks -- unusual then possibly you have very old versions) Linux mjrider.student.utwente.nl 2.2.13 #1 Sat Oct 23 14:34:41 CEST 1999 i586 unknown Kernel modules 2.1.121 Gnu C egcs-2.91.66 Binutils 2.9.1.0.24 Linux C Library 2.1.2 Dynamic linker ldd (GNU libc) 2.1.2 Procps 2.0.4 Mount 2.9u Net-tools 1.53 Console-tools 1999.03.02 Sh-utils 2.0 Sh-utils Parker. Sh-utils Sh-utils Inc. Sh-utils NO Sh-utils PURPOSE. Modules Loaded ip_masq_quake ip_masq_raudio ip_masq_irc ip_masq_ftp 3c509 3c59x
[7.2.] Processor information (from /proc/cpuinfo): processor : 0 vendor_id : AuthenticAMD cpu family : 5 model : 8 model name : AMD-K6(tm) 3D processor stepping : 0 cpu MHz : 299.382201 fdiv_bug : no hlt_bug : no sep_bug : no f00f_bug : no coma_bug : no fpu : yes fpu_exception : yes cpuid level : 1 wp : yes flags : fpu vme de pse tsc msr mce cx8 sep mmx 3dnow bogomips : 598.02
[7.3.] Module information (from /proc/modules): ip_masq_quake 1092 0 (unused) ip_masq_raudio 2736 0 (unused) ip_masq_irc 1360 0 ip_masq_ftp 2352 0 3c509 5812 1 (autoclean) 3c59x 19112 1 (autoclean) [7.4.] SCSI information (from /proc/scsi/scsi) No scsiB
[7.5.] Other information that might be relevant to the problem (please look in /proc and include all information that you think to be relevant): Nothing i think
[X.] Other notes, patches, fixes, workarounds: noting from that all
-- Robbert Muller
mjrider@writeme dot com | Never let a luser on your console. uin: 9659330 | Because that means they're in your room.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |