sys-kernel/gentoo-sources-2.6.17-r8 While the system log was flooded with: Sep 18 05:50:10 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:10 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:10 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:30 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:33 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:33 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:33 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:33 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:35 pluto printk: 16 messages suppressed. Sep 18 05:50:35 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:40 pluto printk: 118 messages suppressed. Sep 18 05:50:40 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:54:03 pluto syslog-ng[3568]: syslog-ng version 1.6.9 starting The system paniced and restarted automatically (as I set it up to restart automatically). You can see the restart at the logentry of syslog-ng. Google lists three hits: http://www.google.com/search?&q=ip_ct_ras%3A%20decoding%20error%3A%20out%20of%20bound The bug is related to: Linux-2.6.17/net/ipv4/netfilter/ip_conntrack_helper_h323.c After switching to vanilla sources 2.6.17.13 the log entry does not appear anymore. This bug seems to be fixed in the latest stable kernel at kernel.org. I grepped the system.log for this log entry and it has been around for a while, so probably earlier kernel sources might also be affected: grep decoding\ error /var/log/syslog.log Aug 23 13:25:18 pluto ip_ct_ras: decoding error: out of bound Aug 23 13:43:16 pluto ip_ct_ras: decoding error: out of bound Aug 23 14:34:32 pluto ip_ct_ras: decoding error: out of bound Aug 23 18:38:21 pluto ip_ct_ras: decoding error: out of bound Aug 23 19:35:36 pluto ip_ct_ras: decoding error: out of bound Aug 23 21:42:12 pluto ip_ct_ras: decoding error: out of bound Aug 24 00:35:19 pluto ip_ct_ras: decoding error: out of bound Aug 27 05:57:46 pluto ip_ct_ras: decoding error: out of bound Aug 27 13:03:01 pluto ip_ct_ras: decoding error: out of bound Aug 27 13:03:02 pluto ip_ct_ras: decoding error: out of bound Sep 1 17:07:43 pluto ip_ct_ras: decoding error: out of bound Sep 2 07:33:14 pluto ip_ct_ras: decoding error: out of bound Sep 3 21:10:29 pluto ip_ct_ras: decoding error: out of bound Sep 3 21:58:43 pluto ip_ct_ras: decoding error: out of bound Sep 3 22:45:54 pluto ip_ct_ras: decoding error: out of bound Sep 9 02:03:31 pluto ip_ct_ras: decoding error: out of bound Sep 9 19:37:05 pluto ip_ct_ras: decoding error: out of bound Sep 12 14:53:29 pluto ip_ct_ras: decoding error: out of bound Sep 12 14:53:31 pluto ip_ct_ras: decoding error: out of bound Sep 12 16:30:44 pluto ip_ct_ras: decoding error: out of bound Sep 12 16:30:46 pluto ip_ct_ras: decoding error: out of bound Sep 12 18:13:57 pluto ip_ct_ras: decoding error: out of bound Sep 12 18:14:01 pluto ip_ct_ras: decoding error: out of bound Sep 12 23:41:58 pluto ip_ct_ras: decoding error: out of bound Sep 12 23:41:59 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:10 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:10 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:10 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:30 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:33 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:33 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:33 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:33 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:34 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:35 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:50:40 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:54:52 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:54:52 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:54:54 pluto ip_ct_ras: decoding error: out of bound Sep 18 05:54:57 pluto ip_ct_ras: decoding error: out of bound
gentoo-sources-2.6.17-r8 includes 2.6.17.13 so it must be something else...
well, since this bug does not appear in vanilla-sources 2.6.17.13 and gentoo-sources use the same kernel sources, it must be something related to the applied patchset, i.e. genpatches.
pluto is a nat gateway running on dynamic IP. The following is compiled into kernel: H.323 protocol support (EXPERIMENTAL) pluto connects some clients of the LAN to the Internet using DSL connection.
I looked thru gentoo-sources and since there are many changes to VIA I thought this might be useful: It is a VIA EPIA PD 6000 and the following output is from phpsysinfo Hardware Information Processors 1 Model VIA Samuel 2 CPU Speed 601.46 MHz Cache Size 64 KB System Bogomips 1205.15 PCI Devices 00:0f.0 Ethernet controller: VIA Technologies, Inc. VT6105 [Rhine-III] 00:11.1 IDE interface: VIA Technologies, Inc. VT82C586A/B/VT82C686/A/B/VT823x/A/C PIPC Bus Master IDE 00:11.5 Multimedia audio controller: VIA Technologies, Inc. VT8233/A/8235/8237 AC97 Audio Controller 00:12.0 Ethernet controller: VIA Technologies, Inc. VT6102 [Rhine-II] 01:00.0 VGA compatible controller: VIA Technologies, Inc. VT8623 [Apollo CLE266] integrated CastleRock graphics IDE Devices hda: ST960821A (Capacity: 55.89 GB) hdc: LG CD-ROM CRN-8245B SCSI Devices ST340063 3A (Direct-Access) ST330083 1A (Direct-Access) USB Devices Linux 2.6.17.13 uhci_hcd UHCI Host Controller Linux 2.6.17.13 uhci_hcd UHCI Host Controller Linux 2.6.17.13 uhci_hcd UHCI Host Controller Linux 2.6.17.13 ehci_hcd EHCI Host Controller Prolific Technology Inc. ATAPI-6 Bridge Controller Prolific Technology Inc. ATAPI-6 Bridge Controller
This is some kind of bug with "H.323 protocol support (EXPERIMENTAL)" unloading this module seams to help (haven't tried myself, but I've got such info).
Still reproducible on 2.6.19?
I can't say anything about it, since after finding out while using the same kernel-sources the bug is only with gentoo-sources, I switched to vanilla-sources and didn't have any problems since then.
OK, please reopen if you are interested in diagnosing further.