lkml.org 
[lkml]   [2001]   [Oct]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: kernel: svc: bad direction / kernel: svc: short len 4, dropping request
On Friday October 5, gregory.hosler@eno.ericsson.se wrote:
> Hi,
>
> I'm running Linux kernel 2.4.7, and I'm seeing the following in my syslog:
>
> Oct 5 09:13:44 camelot kernel: svc: short len 4, dropping request
> Oct 5 09:13:45 camelot kernel: svc: short len 4, dropping request
> Oct 5 09:13:46 camelot kernel: svc: bad direction 525795537, dropping request
> Oct 5 09:13:46 camelot kernel: svc: short len 4, dropping request
> Oct 5 09:13:47 camelot kernel: svc: short len 4, dropping request
> Oct 5 09:13:48 camelot kernel: svc: bad direction 525861077, dropping request
> Oct 5 09:13:48 camelot kernel: svc: bad direction 525927291, dropping request
> Oct 5 09:13:48 camelot kernel: svc: bad direction 525992033, dropping request
> Oct 5 09:13:48 camelot kernel: svc: bad direction 526057939, dropping request
> Oct 5 09:13:48 camelot kernel: svc: bad direction 526123899, dropping request
> Oct 5 09:13:48 camelot kernel: svc: short len 4, dropping request
> Oct 5 09:13:49 camelot kernel: svc: short len 4, dropping request
> Oct 5 09:13:49 camelot kernel: svc: bad direction 526189001, dropping request
> Oct 5 09:13:50 camelot kernel: svc: short len 4, dropping request
> Oct 5 09:13:50 camelot kernel: svc: bad direction 526254179, dropping request
>
> several (3 to 5) messages per second.
>
> I have tracked down these messages to coming out of:
>
> /usr/src/linux/net/sunrpc/svc.c
>
> but I do not understand what's triggering them, or what to do about
> them.

Looks like garbage packets are being delivered to either your NFS
server port (port 2049) or your lockd server port (run rpcinfo -p to
find the number).

I would run tcpdump on the interface watching for packets to those
ports from unexpected sources.

NeilBrown

>
> any suggestions, pointers, hints appreciated.
>
> thank you, and regards,
>
> -Greg
>
> ----------------------------------
> E-Mail: Gregory Hosler <gregory.hosler@eno.ericsson.se>
> Date: 05-Oct-01
> Time: 11:23:35
>
> You can release software that's good, software that's inexpensive, or
> software that's available on time. You can usually release software
> that has 2 of these 3 attributes -- but not all 3.
>
> ----------------------------------
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.tux.org/lkml/
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:05    [W:0.041 / U:0.788 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site