lkml.org 
[lkml]   [1998]   [Apr]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
Subject2.0.34pre9 woes.
Well.  Last night I was nestea'd many many times, and one of the targets was
my proxy server. I upgraded as many boxes as possible to either 2.0.29 or
2.0.34pre9, both with the nestea patch.

The 2.0.29 boxes have been fine, but my proxy server, running 2.0.34 crashed
later that night, with the following error:

----------------------------------------------------------------------------------------
Apr 21 04:25:28 terra kernel: EXT2-fs error (device 08:32): ext2_find_entry: bad entry in directory #489474: directory entry across blocks - offset=204, inode=522242, rec_len=51212, name_len=2
Apr 21 04:25:28 terra squid[1866]: file_open: error opening file /mnt/sdd2/cache/03/5D/0000174F: (2) No such file or directory
Apr 21 04:25:28 terra squid[1866]: storeOpenSwapFileRead: Failed for 'http://www.nakedwomen.com/robin/art.gif'
Apr 21 04:25:28 terra squid[1866]: file_open: error opening file /mnt/sdd2/cache/03/5D/0000174F: (2) No such file or directory
Apr 21 04:25:28 terra squid[1866]: storeOpenSwapFileWrite: Unable to open swapfile: /mnt/sdd2/cache/03/5D/0000174F
Apr 21 04:25:28 terra squid[1866]: WARNING: storeOpenSwapFileRead: bad swap_file_number
Apr 21 04:25:28 terra squid[1866]: Swapfile open failed
Apr 21 04:25:28 terra squid[1866]: file_open: error opening file /mnt/sdd2/cache/03/5D/0000174F: (2) No such file or directory
Apr 21 04:25:28 terra squid[1866]: storeOpenSwapFileWrite: Unable to open swapfile: /mnt/sdd2/cache/03/5D/0000174F
Apr 21 04:25:28 terra squid[1866]: WARNING: storeOpenSwapFileRead: bad swap_file_number
Apr 21 04:25:28 terra squid[1866]: icpProcessExpired: Swapfile open failed
--------------------------------------------------------------------------------

I figured this meant that the filesystem had been corrupted during the
attacks, so this morning I rebooted the machine, fdisk'd the cache disks and
restarted the machine.

The following log shows the boot message, which should tell you all what
kind of hardware I'm running on this thing..

--------------------------------------------------------------------------------
Apr 21 09:19:58 terra syslogd 1.3-3: restart.
Apr 21 09:19:58 terra kernel: klogd 1.3-3, log source = /proc/kmsg started.
Apr 21 09:19:58 terra kernel: Cannot find map file.
Apr 21 09:19:58 terra kernel: No module symbols loaded.
Apr 21 09:19:58 terra kernel: Console: 16 point font, 400 scans
Apr 21 09:19:58 terra kernel: Console: colour VGA+ 80x25, 1 virtual console (max 63)
Apr 21 09:19:58 terra kernel: pcibios_init : BIOS32 Service Directory structure at 0x000fadd0
Apr 21 09:19:58 terra kernel: pcibios_init : BIOS32 Service Directory entry at 0xfb230
Apr 21 09:19:58 terra kernel: pcibios_init : PCI BIOS revision 2.10 entry at 0xfb260
Apr 21 09:19:58 terra kernel: Probing PCI hardware.
Apr 21 09:19:58 terra kernel: Calibrating delay loop.. ok - 53.25 BogoMIPS
Apr 21 09:19:58 terra kernel: Memory: 257036k/262144k available (780k kernel code, 384k reserved, 3944k data)
Apr 21 09:19:58 terra kernel: Swansea University Computer Society NET3.035 for Linux 2.0
Apr 21 09:19:58 terra kernel: NET3: Unix domain sockets 0.13 for Linux NET3.035.
Apr 21 09:19:58 terra kernel: Swansea University Computer Society TCP/IP for NET3.034
Apr 21 09:19:58 terra kernel: IP Protocols: ICMP, UDP, TCP
Apr 21 09:19:58 terra kernel: Checking 386/387 coupling... Ok, fpu using exception 16 error reporting.
Apr 21 09:19:58 terra kernel: Checking 'hlt' instruction... Ok.
Apr 21 09:19:58 terra kernel: Intel Pentium with F0 0F bug - workaround enabled.
Apr 21 09:19:58 terra kernel: alias mapping IDT readonly ... ... done
Apr 21 09:19:58 terra kernel: Linux version 2.0.33 (root@betelgeuse.mmedia.is) (gcc version 2.7.2) #3 Mon Apr 20 11:28:25 GMT 1998
Apr 21 09:19:58 terra kernel: Starting kswapd v 1.4.2.2
Apr 21 09:19:58 terra kernel: Serial driver version 4.13 with no serial options enabled
Apr 21 09:19:58 terra kernel: tty00 at 0x03f8 (irq = 4) is a 16550A
Apr 21 09:19:58 terra kernel: tty01 at 0x02f8 (irq = 3) is a 16550A
Apr 21 09:19:58 terra kernel: Software Watchdog Timer: 0.04, timer margin: 60 sec
Apr 21 09:19:58 terra kernel: hda: QUANTUM FIREBALL_TM3840A, 3681MB w/76kB Cache, CHS=935/128/63
Apr 21 09:19:58 terra kernel: ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
Apr 21 09:19:58 terra kernel: Floppy drive(s): fd0 is 1.44M
Apr 21 09:19:58 terra kernel: FDC 0 is a post-1991 82077
Apr 21 09:19:58 terra kernel: aic7xxx: Warning - detected auto-termination on controller:
Apr 21 09:19:58 terra kernel: aic7xxx: <Adaptec AHA-294X Ultra SCSI host adapter> at PCI 12/0
Apr 21 09:19:58 terra kernel: aic7xxx: Please verify driver detected settings are correct.
Apr 21 09:19:58 terra kernel: aic7xxx: If not, then please properly set the device termination
Apr 21 09:19:58 terra kernel: aic7xxx: in the Adaptec SCSI BIOS by hitting CTRL-A when prompted
Apr 21 09:19:58 terra kernel: aic7xxx: during machine bootup.
Apr 21 09:19:58 terra kernel: aic7xxx: Cables present (Int-50 NO, Int-68 NO, Ext-68 YES)
Apr 21 09:19:58 terra kernel: aic7xxx: Termination (Low ON, High ON)
Apr 21 09:19:58 terra kernel: (scsi0) <Adaptec AHA-294X Ultra SCSI host adapter> found at PCI 12/0
Apr 21 09:19:58 terra kernel: (scsi0) Wide Channel, SCSI ID=7, 16/255 SCBs
Apr 21 09:19:58 terra kernel: (scsi0) BIOS enabled, IO Port 0x6300, IRQ 11
Apr 21 09:19:58 terra kernel: (scsi0) IO Memory at 0xe0801000, MMAP Memory at 0x10807000
Apr 21 09:19:58 terra kernel: (scsi0) Resetting channel
Apr 21 09:19:58 terra kernel: (scsi0) Downloading sequencer code... 406 instructions downloaded
Apr 21 09:19:58 terra kernel: scsi0 : Adaptec AHA274x/284x/294x (EISA/VLB/PCI-Fast SCSI) 5.0.13/3.2.4
Apr 21 09:19:58 terra kernel: <Adaptec AHA-294X Ultra SCSI host adapter>
Apr 21 09:19:58 terra kernel: scsi : 1 host.
Apr 21 09:19:58 terra kernel: (scsi0:0:-1:-1) Scanning channel for devices.
Apr 21 09:19:58 terra kernel: (scsi0:0:0:0) Using wide (16 bit) transfers.
Apr 21 09:19:58 terra kernel: (scsi0:0:0:0) Synchronous at 10.0MHz, offset 8.
Apr 21 09:19:58 terra kernel: Vendor: QUANTUM Model: XP34550W Rev: LXY4
Apr 21 09:19:58 terra kernel: Type: Direct-Access ANSI SCSI revision: 02
Apr 21 09:19:58 terra kernel: Detected scsi disk sda at scsi0, channel 0, id 0, lun 0
Apr 21 09:19:58 terra kernel: (scsi0:0:1:0) Using wide (16 bit) transfers.
Apr 21 09:19:58 terra kernel: (scsi0:0:1:0) Synchronous at 10.0MHz, offset 8.
Apr 21 09:19:58 terra kernel: Vendor: QUANTUM Model: XP34550W Rev: LXY4
Apr 21 09:19:58 terra kernel: Type: Direct-Access ANSI SCSI revision: 02
Apr 21 09:19:58 terra kernel: Detected scsi disk sdb at scsi0, channel 0, id 1, lun 0
Apr 21 09:19:58 terra kernel: (scsi0:0:2:0) Using wide (16 bit) transfers.
Apr 21 09:19:58 terra kernel: (scsi0:0:2:0) Synchronous at 10.0MHz, offset 8.
Apr 21 09:19:58 terra kernel: Vendor: QUANTUM Model: XP34550W Rev: LXY4
Apr 21 09:19:58 terra kernel: Type: Direct-Access ANSI SCSI revision: 02
Apr 21 09:19:58 terra kernel: Detected scsi disk sdc at scsi0, channel 0, id 2, lun 0
Apr 21 09:19:58 terra kernel: (scsi0:0:3:0) Using wide (16 bit) transfers.
Apr 21 09:19:58 terra kernel: (scsi0:0:3:0) Synchronous at 10.0MHz, offset 8.
Apr 21 09:19:58 terra kernel: Vendor: QUANTUM Model: VIKING 4.5 WSE Rev: 8808
Apr 21 09:19:58 terra kernel: Type: Direct-Access ANSI SCSI revision: 02
Apr 21 09:19:58 terra kernel: Detected scsi disk sdd at scsi0, channel 0, id 3, lun 0
Apr 21 09:19:58 terra kernel: scsi : detected 4 SCSI disks total.
Apr 21 09:19:58 terra kernel: SCSI device sda: hdwr sector= 512 bytes. Sectors= 8890760 [4341 MB] [4.3 GB]
Apr 21 09:19:58 terra kernel: SCSI device sdb: hdwr sector= 512 bytes. Sectors= 8890760 [4341 MB] [4.3 GB]
Apr 21 09:19:58 terra kernel: SCSI device sdc: hdwr sector= 512 bytes. Sectors= 8890760 [4341 MB] [4.3 GB]
Apr 21 09:19:58 terra kernel: SCSI device sdd: hdwr sector= 512 bytes. Sectors= 8899737 [4345 MB] [4.3 GB]
Apr 21 09:19:58 terra kernel: PPP: version 2.2.0 (dynamic channel allocation)
Apr 21 09:19:58 terra kernel: TCP compression code copyright 1989 Regents of the University of California
Apr 21 09:19:58 terra kernel: PPP Dynamic channel allocation code copyright 1995 Caldera, Inc.
Apr 21 09:19:58 terra kernel: PPP line discipline registered.
Apr 21 09:19:58 terra kernel: SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
Apr 21 09:19:58 terra kernel: CSLIP: code copyright 1989 Regents of the University of California.
Apr 21 09:19:58 terra kernel: eth0: 3c509 at 0x300 tag 1, 10baseT port, address 00 a0 24 6a 72 10, IRQ 10.
Apr 21 09:19:58 terra kernel: 3c509.c:1.12 6/4/97 becker@cesdis.gsfc.nasa.gov
Apr 21 09:19:58 terra kernel: Partition check:
Apr 21 09:19:58 terra kernel: sda: sda1 sda2
Apr 21 09:19:58 terra kernel: sdb: sdb1 sdb2
Apr 21 09:19:58 terra kernel: sdc: sdc1 sdc2
Apr 21 09:19:58 terra kernel: sdd: sdd1 sdd2
Apr 21 09:19:58 terra kernel: hda: hda1 hda2 hda3
Apr 21 09:19:58 terra kernel: VFS: Mounted root (ext2 filesystem) readonly.
Apr 21 09:19:58 terra kernel: Adding Swap: 52204k swap-space (priority -1)
Apr 21 09:19:58 terra kernel: Adding Swap: 52204k swap-space (priority -2)
Apr 21 09:19:58 terra kernel: Adding Swap: 84636k swap-space (priority -3)
--------------------------------------------------------------------------------

The box crashed again, a few minutes later. The following fragment of an oops
was caught by syslog:

--------------------------------------------------------------------------------
Apr 21 09:40:56 terra kernel: kfree of non-kmalloced memory: 0e900cd8, next= 0ebdf000, order=1
Apr 21 09:40:56 terra kernel: general protection: 0000
Apr 21 09:40:56 terra kernel: CPU: 0
Apr 21 09:40:56 terra kernel: EIP: 0010:[<00148276>]
Apr 21 09:40:56 terra kernel: EFLAGS: 00010286
Apr 21 09:40:56 terra kernel: eax: a795144f ebx: 0e9c8ccc ecx: 00000000 edx: f000ef6f
--------------------------------------------------------------------------------

I know the EIP and the rest is useless, as I don't have a valid System.map
for you (I compiled many, many kernels last night, and forgot to save the
map for this one). But what does that kfree error mean?

And if the nestea wielding attacker is on this list, I'd just like to ask
him to stop attacking me for a month or so, so I can pass my finals. :-(
This isn't funny.

The following is the .config file.

--------------------------------------------------------------------------------
#
# Automatically generated make config: don't edit
#

#
# Code maturity level options
#
CONFIG_EXPERIMENTAL=y

#
# Loadable module support
#
CONFIG_MODULES=y
# CONFIG_MODVERSIONS is not set
CONFIG_KERNELD=y

#
# General setup
#
# CONFIG_MATH_EMULATION is not set
CONFIG_NET=y
# CONFIG_MAX_16M is not set
CONFIG_PCI=y
# CONFIG_PCI_OPTIMIZE is not set
CONFIG_SYSVIPC=y
CONFIG_BINFMT_AOUT=y
CONFIG_BINFMT_ELF=y
# CONFIG_BINFMT_JAVA is not set
CONFIG_KERNEL_ELF=y
# CONFIG_M386 is not set
# CONFIG_M486 is not set
CONFIG_M586=y
# CONFIG_M686 is not set

#
# Floppy, IDE, and other block devices
#
CONFIG_BLK_DEV_FD=y
CONFIG_BLK_DEV_IDE=y

#
# Please see Documentation/ide.txt for help/info on IDE drives
#
# CONFIG_BLK_DEV_HD_IDE is not set
CONFIG_BLK_DEV_IDECD=y
# CONFIG_BLK_DEV_IDETAPE is not set
# CONFIG_BLK_DEV_IDEFLOPPY is not set
# CONFIG_BLK_DEV_IDESCSI is not set
# CONFIG_BLK_DEV_IDE_PCMCIA is not set
CONFIG_BLK_DEV_CMD640=y
# CONFIG_BLK_DEV_CMD640_ENHANCED is not set
CONFIG_BLK_DEV_RZ1000=y
# CONFIG_BLK_DEV_TRITON is not set
# CONFIG_IDE_CHIPSETS is not set

#
# Additional Block Devices
#
# CONFIG_BLK_DEV_LOOP is not set
# CONFIG_BLK_DEV_MD is not set
# CONFIG_BLK_DEV_RAM is not set
# CONFIG_BLK_DEV_XD is not set
# CONFIG_BLK_DEV_HD is not set

#
# Networking options
#
CONFIG_FIREWALL=y
CONFIG_NET_ALIAS=y
CONFIG_INET=y
CONFIG_IP_FORWARD=y
# CONFIG_IP_MULTICAST is not set
CONFIG_SYN_COOKIES=y
CONFIG_IP_FIREWALL=y
# CONFIG_IP_FIREWALL_VERBOSE is not set
CONFIG_IP_MASQUERADE=y

#
# Protocol-specific masquerading support will be built as modules.
#
# CONFIG_IP_MASQUERADE_IPAUTOFW is not set
CONFIG_IP_MASQUERADE_ICMP=y
CONFIG_IP_TRANSPARENT_PROXY=y
CONFIG_IP_ALWAYS_DEFRAG=y
CONFIG_IP_ACCT=y
CONFIG_IP_ROUTER=y
CONFIG_NET_IPIP=m
CONFIG_IP_ALIAS=y

#
# (it is safe to leave these untouched)
#
# CONFIG_INET_PCTCP is not set
# CONFIG_INET_RARP is not set
# CONFIG_NO_PATH_MTU_DISCOVERY is not set
CONFIG_IP_NOSR=y
CONFIG_SKB_LARGE=y

#
#
#
# CONFIG_IPX is not set
# CONFIG_ATALK is not set
# CONFIG_AX25 is not set
# CONFIG_BRIDGE is not set
# CONFIG_NETLINK is not set

#
# SCSI support
#
CONFIG_SCSI=y

#
# SCSI support type (disk, tape, CD-ROM)
#
CONFIG_BLK_DEV_SD=y
CONFIG_CHR_DEV_ST=y
# CONFIG_BLK_DEV_SR is not set
# CONFIG_CHR_DEV_SG is not set

#
# Some SCSI devices (e.g. CD jukebox) support multiple LUNs
#
# CONFIG_SCSI_MULTI_LUN is not set
CONFIG_SCSI_CONSTANTS=y

#
# SCSI low-level drivers
#
# CONFIG_SCSI_7000FASST is not set
# CONFIG_SCSI_AHA152X is not set
# CONFIG_SCSI_AHA1542 is not set
# CONFIG_SCSI_AHA1740 is not set
CONFIG_SCSI_AIC7XXX=y
# CONFIG_OVERRIDE_CMDS is not set
CONFIG_AIC7XXX_PROC_STATS=y
CONFIG_AIC7XXX_RESET_DELAY=15
# CONFIG_SCSI_ADVANSYS is not set
# CONFIG_SCSI_IN2000 is not set
# CONFIG_SCSI_AM53C974 is not set
# CONFIG_SCSI_BUSLOGIC is not set
# CONFIG_SCSI_DTC3280 is not set
# CONFIG_SCSI_EATA_DMA is not set
# CONFIG_SCSI_EATA_PIO is not set
# CONFIG_SCSI_EATA is not set
# CONFIG_SCSI_FUTURE_DOMAIN is not set
# CONFIG_SCSI_GENERIC_NCR5380 is not set
# CONFIG_SCSI_NCR53C406A is not set
CONFIG_SCSI_NCR53C7xx=y
# CONFIG_SCSI_NCR53C7xx_sync is not set
# CONFIG_SCSI_NCR53C7xx_FAST is not set
# CONFIG_SCSI_NCR53C7xx_DISCONNECT is not set
# CONFIG_SCSI_PPA is not set
# CONFIG_SCSI_PAS16 is not set
# CONFIG_SCSI_QLOGIC_FAS is not set
# CONFIG_SCSI_QLOGIC_ISP is not set
# CONFIG_SCSI_SEAGATE is not set
# CONFIG_SCSI_DC390T is not set
# CONFIG_SCSI_T128 is not set
# CONFIG_SCSI_U14_34F is not set
# CONFIG_SCSI_ULTRASTOR is not set
# CONFIG_SCSI_GDTH is not set

#
# Network device support
#
CONFIG_NETDEVICES=y
CONFIG_DUMMY=y
# CONFIG_EQUALIZER is not set
# CONFIG_DLCI is not set
# CONFIG_PLIP is not set
CONFIG_PPP=y

#
# CCP compressors for PPP are only built as modules.
#
CONFIG_SLIP=y
CONFIG_SLIP_COMPRESSED=y
# CONFIG_SLIP_SMART is not set
# CONFIG_SLIP_MODE_SLIP6 is not set
# CONFIG_NET_RADIO is not set
CONFIG_NET_ETHERNET=y
CONFIG_NET_VENDOR_3COM=y
CONFIG_EL1=y
CONFIG_EL2=y
CONFIG_ELPLUS=y
CONFIG_EL16=y
CONFIG_EL3=y
# CONFIG_3C515 is not set
CONFIG_VORTEX=y
CONFIG_NET_VENDOR_SMC=y
# CONFIG_WD80x3 is not set
# CONFIG_ULTRA is not set
# CONFIG_ULTRA32 is not set
# CONFIG_SMC9194 is not set
# CONFIG_NET_PCI is not set
# CONFIG_NET_ISA is not set
# CONFIG_NET_EISA is not set
# CONFIG_NET_POCKET is not set
# CONFIG_TR is not set
# CONFIG_FDDI is not set
# CONFIG_ARCNET is not set

#
# ISDN subsystem
#
# CONFIG_ISDN is not set

#
# CD-ROM drivers (not for SCSI or IDE/ATAPI drives)
#
# CONFIG_CD_NO_IDESCSI is not set

#
# Filesystems
#
# CONFIG_QUOTA is not set
# CONFIG_MINIX_FS is not set
# CONFIG_EXT_FS is not set
CONFIG_EXT2_FS=y
# CONFIG_XIA_FS is not set
# CONFIG_NLS is not set
CONFIG_PROC_FS=y
CONFIG_NFS_FS=y
# CONFIG_ROOT_NFS is not set
# CONFIG_SMB_FS is not set
# CONFIG_HPFS_FS is not set
# CONFIG_SYSV_FS is not set
# CONFIG_AUTOFS_FS is not set
# CONFIG_AFFS_FS is not set
# CONFIG_UFS_FS is not set

#
# Character devices
#
CONFIG_SERIAL=y
# CONFIG_DIGI is not set
CONFIG_CYCLADES=m
# CONFIG_STALDRV is not set
# CONFIG_RISCOM8 is not set
# CONFIG_PRINTER is not set
# CONFIG_SPECIALIX is not set
# CONFIG_MOUSE is not set
# CONFIG_UMISC is not set
# CONFIG_QIC02_TAPE is not set
# CONFIG_FTAPE is not set
# CONFIG_APM is not set
CONFIG_WATCHDOG=y
CONFIG_WATCHDOG_NOWAYOUT=y
# CONFIG_WDT is not set
CONFIG_SOFT_WATCHDOG=y
# CONFIG_PCWATCHDOG is not set
# CONFIG_RTC is not set

#
# Sound
#
# CONFIG_SOUND is not set

#
# Kernel hacking
#
# CONFIG_PROFILE is not set
--------------------------------------------------------------------------------

--
Bjarni R. Einarsson
bre@margmidlun.is [ THIS SPACE INTENTIONALLY LEFT BLANK ]
http://www.mmedia.is/~bre
Juggler@IRC Common sense is what tells you the world is flat.


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu

\
 
 \ /
  Last update: 2005-03-22 13:42    [W:0.026 / U:0.776 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site