I have a Solaris 8 with all the latest patches installed and 4.1.23 ipfilter with the lates pfil 2.1.13
Im getting a kernel panic every day similar to the following: Jun 19 11:06:54 server unix: [ID 836849 kern.notice] Jun 19 11:06:54 server ^Mpanic[cpu0]/thread=2a1001f7d20: Jun 19 11:06:54 server unix: [ID 103648 kern.notice] recursive mutex_enter, lp=30009525828 owner=2a1001f7d20 thread=2a1001f7d20 Jun 19 11:06:55 server unix: [ID 100000 kern.notice] Jun 19 11:06:55 server genunix: [ID 723222 kern.notice] 000002a1001f6c10 unix:mutex_panic+5c (10415fe8, 3000 9525828, 20, 2a1001f71c0, 0, 26) Jun 19 11:06:55 server genunix: [ID 179002 kern.notice] %l0-3: 000000000000003c 000000000000003c 000003000 1941c90 00000300040fbe64 Jun 19 11:06:55 server %l4-7: 0000030004209180 000002a1001f71c0 000000000000003c 000002a100771ba0 Jun 19 11:06:55 server genunix: [ID 723222 kern.notice] 000002a1001f6cc0 unix:mutex_vector_enter+250 (300095 25828, 10415fc0, 10424590, 300040fbe3c, 0, 1) Jun 19 11:06:55 server genunix: [ID 179002 kern.notice] %l0-3: 000002a1001f7d20 0000030009525828 000003000 1869520 0000000000000064 Jun 19 11:06:55 server %l4-7: 0000030009525918 000002a1001f71f4 0000000000000000 00000000ff26cd40 Jun 19 11:06:55 server genunix: [ID 723222 kern.notice] 000002a1001f6d80 ipf:fr_tcpstate+120 (2a1001f71c0, 3 00040fbe3c, 30009525828, 0, 300095259bc, 1) Jun 19 11:06:55 server genunix: [ID 179002 kern.notice] %l0-3: 0000000000000000 0000030009525828 000000000 000000b 0000030009525828 Jun 19 11:06:55 server %l4-7: 00000300095259b8 000002a1001f71c0 0000030009525828 000000000000031c Jun 19 11:06:55 server genunix: [ID 723222 kern.notice] 000002a1001f6e80 ipf:fr_stlookup+7a4 (2a1001f71c0, 6 , 30009525858, 4, 30009525828, 59e16bc) Jun 19 11:06:55 server genunix: [ID 179002 kern.notice] %l0-3: 0000000000000006 0000030009525828 000000000 0001669 0000030009525828 Jun 19 11:06:55 server %l4-7: 0000030002ca0000 00000000059e16bc 000002a1001f71c8 0000000000000000 Jun 19 11:06:56 server genunix: [ID 723222 kern.notice] 000002a1001f6fd0 ipf:fr_checkstate+c0 (2a1001f71c0, 2a1001f71b4, 2a1001f71c0, ffec5f1c, 0, 0) Jun 19 11:06:56 server genunix: [ID 179002 kern.notice] %l0-3: 0000000000000001 000002a1001f71c0 000000000 000003c 000002a1001f71f4 Jun 19 11:06:56 server %l4-7: 000002a1001f71c0 0000000000000014 000000007efefeff 00000300040fbe3c Jun 19 11:06:56 server genunix: [ID 723222 kern.notice] 000002a1001f70c0 ipf:fr_check+3c4 (300040fbe28, 3000 4209180, 4, 0, 2a1001f71c0, 2a1001f7640) Jun 19 11:06:56 server genunix: [ID 179002 kern.notice] %l0-3: 0000000000000000 000002a1001f71c0 000000000 000003f 0000000000000004 Jun 19 11:06:56 server %l4-7: 000000000009bc68 0000000000000059 0000000000000000 000002a1001f7488 Jun 19 11:06:56 server genunix: [ID 723222 kern.notice] 000002a1001f72f0 pfil:pfil_precheck+c60 (0, 2a1001f7 640, 1, 300020e7ed8, 5b9001a, 30000061808) Jun 19 11:06:56 server genunix: [ID 179002 kern.notice] %l0-3: 0000000000000014 00000000780b94e8 000000000 0000000 0000030004209180 Jun 19 11:06:56 server %l4-7: 000000000000003c 000002a100771af0 0000030004209180 000002a10000f9c0 Jun 19 11:06:56 server genunix: [ID 723222 kern.notice] 000002a1001f7540 pfil:pfilmodrput+360 (30001940730, 30004209180, 1, 302d49d, 302, 300020e7ed8) Jun 19 11:06:56 server genunix: [ID 179002 kern.notice] %l0-3: 0000030000a70f10 00000300020e7ed8 000800000 0000000 0000030001940730 Jun 19 11:06:56 server %l4-7: 0000000000000000 0000000000000020 0000000000000000 0000000010423eb0 Jun 19 11:06:57 server genunix: [ID 723222 kern.notice] 000002a1001f7650 unix:putnext+218 (100, 300016e9160, 300019417d0, 30004209180, 0, 0) Jun 19 11:06:57 server genunix: [ID 179002 kern.notice] %l0-3: 0000030001940730 00000300019408f0 000003000 1941c90 000004000ff81a18 Jun 19 11:06:57 server %l4-7: 000000001035b5a8 0000000000000000 00000300033054e0 000002a100771ba0 Jun 19 11:06:57 server genunix: [ID 723222 kern.notice] 000002a1001f7700 gld:gld_recv+188 (30001941c90, 3000 4209180, 30001925800, 300040fbe1a, 300001f0560, 21a) Jun 19 11:06:57 server genunix: [ID 179002 kern.notice] %l0-3: 00000000feb05d98 0000030000138e10 000000000 0000000 0000000000000000 Jun 19 11:06:57 server %l4-7: 0000000000000000 0000000000000000 0000000000000000 00000000ff26cd40 Jun 19 11:06:57 server genunix: [ID 723222 kern.notice] 000002a1001f7800 bge:bge_receive+6c (300001f05e0, 30 004209180, 300001f0000, 10000006c, 300001bf000, 300001f1e60) Jun 19 11:06:57 server genunix: [ID 179002 kern.notice] %l0-3: 0000000000000000 00000300001f0000 000003000 16cd138 0000000010036294 Jun 19 11:06:57 server %l4-7: 00000000104351d8 0000000000000000 00000300016cf360 000002a1003c5ba0 Jun 19 11:06:57 server genunix: [ID 723222 kern.notice] 000002a1001f78b0 bge:bge_gld_intr+ac (30001925800, 4 00, 100000000, 1, 300001bf000, 300001f1e60) Jun 19 11:06:58 server genunix: [ID 179002 kern.notice] %l0-3: 000000006c000000 00000300001f0000 000000000 0012c4c 0000000000000000 I found that a Solaris 9 thread suggested updating the pfil but my pfil version seems to have that fix. Also that perhaps adding: block return-rst in quick proto tcp from any to any would help. I am not familiar with kernel dump debugging but I am open to suggestions? Thanks
