Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 156205 - l7-filter causing kernel soft lockup
Summary: l7-filter causing kernel soft lockup
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Core system (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Daniel Black (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-11-25 04:22 UTC by Bartosz Krzeszewski
Modified: 2007-03-05 12:36 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
log from kernel (l7filter-hang.log,9.31 KB, text/plain)
2006-11-25 04:24 UTC, Bartosz Krzeszewski
Details
kernel config (config20061124debug,26.78 KB, text/plain)
2006-11-25 04:53 UTC, Bartosz Krzeszewski
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Bartosz Krzeszewski 2006-11-25 04:22:53 UTC
when this happen my server is unworkable but after some time it back to normal operation

my iptables configuration:
*mangle
-A POSTROUTING -j CONNMARK --restore-mark 
-A POSTROUTING -m layer7 --l7proto applejuice -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto ares -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto bittorrent -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto directconnect -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto edonkey -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto fasttrack -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto gnutella -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto imesh -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto kugoo -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto mute -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto napster -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto openft -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto poco -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto soulseek -j MARK --set-mark 10
-A POSTROUTING -m layer7 --l7proto xunlei -j MARK --set-mark 10
-A POSTROUTING -j CONNMARK --save-mark

COMMIT
Comment 1 Bartosz Krzeszewski 2006-11-25 04:24:46 UTC
Created attachment 102699 [details]
log from kernel
Comment 2 Jakub Moc (RETIRED) gentoo-dev 2006-11-25 04:25:51 UTC
Well, if it gets back alive after some time, then it doesn't hang. Insufficient info to debug the problem.
Comment 3 Bartosz Krzeszewski 2006-11-25 04:46:29 UTC
what more info i should post?
Comment 4 Bartosz Krzeszewski 2006-11-25 04:51:32 UTC
ok,more info:

# uname -a
Linux STALOWA 2.6.17-gentoo-r8 #1 Fri Nov 24 20:11:15 CET 2006 i686 AMD Athlon(tm) Processor AuthenticAMD GNU/Linux

net-misc/l7-protocols-2006.10.18
net-misc/l7-filter-2.6
net-firewall/iptables-1.3.6-r1
Comment 5 Jakub Moc (RETIRED) gentoo-dev 2006-11-25 04:52:01 UTC
For starters, stuff like kernel version and .config? 
Comment 6 Bartosz Krzeszewski 2006-11-25 04:53:24 UTC
Created attachment 102700 [details]
kernel config
Comment 7 Bartosz Krzeszewski 2006-11-25 04:54:29 UTC
use flags for iptables: l7filter -extensions -imq -ipv6 -static
Comment 8 Bartosz Krzeszewski 2006-11-25 04:57:27 UTC
(In reply to comment #2)
> Well, if it gets back alive after some time, then it doesn't hang. 

so how should i call this situation?
Comment 9 Bartosz Krzeszewski 2006-12-03 06:41:26 UTC
when I hash some those line in iptables server stoped soft locking up:

#-A POSTROUTING -m layer7 --l7proto imesh -j MARK --set-mark 10
#-A POSTROUTING -m layer7 --l7proto kugoo -j MARK --set-mark 10
#-A POSTROUTING -m layer7 --l7proto mute -j MARK --set-mark 10
#-A POSTROUTING -m layer7 --l7proto openft -j MARK --set-mark 10
#-A POSTROUTING -m layer7 --l7proto poco -j MARK --set-mark 10
#-A POSTROUTING -m layer7 --l7proto soulseek -j MARK --set-mark 10
#-A POSTROUTING -m layer7 --l7proto xunlei -j MARK --set-mark 10

so one of those rules may be the problem
Comment 10 cilly 2006-12-06 16:16:53 UTC
I tried with your setup, I was not able to reproduce it.

net-misc/l7-protocols-2006.10.18
net-misc/l7-filter-2.6
net-firewall/iptables-1.3.6-r1

uname -a
Linux pluto 2.6.18.5 #1 PREEMPT Mon Dec 4 10:05:51 CET 2006 i686 VIA Samuel 2 CentaurHauls GNU/Linux


 
Comment 11 Bartosz Krzeszewski 2006-12-07 11:05:57 UTC
(In reply to comment #10)
> I tried with your setup, I was not able to reproduce it.
> 
> net-misc/l7-protocols-2006.10.18
> net-misc/l7-filter-2.6
> net-firewall/iptables-1.3.6-r1
> 
> uname -a
> Linux pluto 2.6.18.5 #1 PREEMPT Mon Dec 4 10:05:51 CET 2006 i686 VIA Samuel 2
> CentaurHauls GNU/Linux
> 
> 
> 
did you try to use those protocols I listed? I mean use them to download/upload something via p2p
Comment 12 Bartosz Krzeszewski 2006-12-07 11:17:28 UTC
p.s.
I have LAN with 130 computers and with those configuration a mentioned above my main server soft lockup average once a day. Sometimes it soft lockups over and over for an hour or two, especially in the evening.
Comment 13 Daniel Black (RETIRED) gentoo-dev 2006-12-27 11:51:05 UTC
Is this just the imesh? Does it work without imesh?

http://sourceforge.net/tracker/index.php?func=detail&aid=1602960&group_id=80085&atid=558668
Comment 14 Daniel Black (RETIRED) gentoo-dev 2007-03-05 12:36:24 UTC
reported upstream.

I'm sure i'm not willing to debug dual cpu faults without the hardware. Sorry.

Hope upstream finds it soon.