Messages in this thread | | | Date | Fri, 13 Mar 1998 10:15:27 -0800 (PST) | From | Liem Bahneman <> | Subject | Re: SYN flood = VFS: No free inodes - contact Linus? |
| |
2.0.33 + smp + tulip.c(any version) are not happy together
2.0.30 is the only stable combination that I have had on this production server. It has been stable, uptimes of 45 days are not uncommon, but when it goes down, it really goes down!
- liem
On Fri, 13 Mar 1998, Chris Evans wrote:
> Date: Fri, 13 Mar 1998 14:25:22 +0000 (GMT) > From: Chris Evans <chris@ferret.lmh.ox.ac.uk> > To: Liem Bahneman <roland@cobaltgroup.com> > Cc: linux-kernel@vger.rutgers.edu > Subject: Re: SYN flood = VFS: No free inodes - contact Linus? > > > On Thu, 12 Mar 1998, Liem Bahneman wrote: > > > We've got a beefy server here that's crashed twice today. I dont know what > > the cause of the crash, but syslog reported "VFS: No free inodes - contact > > Linus" then a mix of SYN cookie warnings and inode warnings. > > Hmmm, 2.0.30? Isn't there a known inode leak in 2.0.30? Have you tried > 2.0.32 or 2.0.33? > > > Specs: > > ALR revolution 6x6 (6x ppro200) > > 2.0.30 > > tulip.c 0.77 (only one stable with smp, locked in at 100bT/FD) > > DPT 3334UW controller > > BusLogic BT-950 > > Nice kit!! > > > > > syn/rst cookies on > > I think RST cookies have been declared potentially buggy? > > > always defrag > > filehandles patch > > Hmmm, by "filehandles patch" do you mean 1,024 fd's per process? Certain > patches implementing this were _horribly_ broken. I would check this. > > > ip_fragment.c patch (alan cox's and mount's) > > > > > > It looks like the VFS error came first, then the spew of SYN warnings and > > more VFS errors. Is this a problem with the filesyste? syn/rst cookies? > > Possibly the VFS message killed the machine's userland processes, but left > the networking alive. The listen queues for the servers would then fill up > and cause the SYN warnings you see. > > Of course the message (no free inodes) could be genuine, so remember you > can bump up the amount of system inodes and files by echo'ing things into > /proc/sys/kernel/* > > > This system hosts ~3500 web sites and has _800_ ip aliases, so its a > > regular target of attacks (any one of 800 ips), but this is the most nasty > > crash it has experienced. This specific crash has happened twice in a > > month. > > What a site! Out of interest what's the longest it's been up? And under > what sort of traffic load/load avg?!! > > Chris > > > - > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to majordomo@vger.rutgers.edu >
============================================================================ Liem Bahneman roland@cobaltgroup.com Senior Systems Administrator http://www.cobaltgroup.com/~roland The Cobalt Group (206) 269-6363 x300 Seattle, Washington F(206) 269-6350
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu
| |