[leaf-devel] 2.4.21 kernel anybody?

2003-07-28 Thread Jaime Nebrera Herrera
  Hi all,

  Some time ago we suffered a DOS attack based on a known bug in 2.4.20 kernel 
(something related to ARP tables). Thishas been solved in 2.4.21 but seems 
nobody has a Bering system with such a kernel.

  I recall Jaques had some problems with the IDE module. Any success? Anybody 
is using a 2.4.21 bering system? I have seen in the webpage that the 2.0 
release is still based on 2.4.20 :(

  Regards.

-- 
Jaime Nebrera - [EMAIL PROTECTED]



---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01

___
leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel


[leaf-devel] [ leaf-Support Requests-779034 ] eth0: Too much work at interrupt, IntrStatus=0x0040

2003-07-28 Thread SourceForge.net
Support Requests item #779034, was opened at 2003-07-28 17:05
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=213751&aid=779034&group_id=13751

Category: Release/Branch: Bering
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Jed Anderson (drbios_jah)
Assigned to: Mike Noyes (mhnoyes)
Summary: eth0: Too much work at interrupt, IntrStatus=0x0040

Initial Comment:
hi 
  i have a p133 mhz with 2 realtek 8139d ethernet cards 
using mii.o and 8139too.o with no problems except this 
message in dmesg log:

eth0: Too much work at interrupt, IntrStatus=0x0040

several time in a normal day of work:

-
Linux version 2.4.20 ([EMAIL PROTECTED]) (gcc version 2.95.4 
20011002 (Debian prerelease)) #1 Sun May 11 18:53:34 
CEST 2003
BIOS-provided physical RAM map:
 BIOS-e801:  - 0009f000 
(usable)
 BIOS-e801: 0010 - 0180 
(usable)
24MB LOWMEM available.
On node 0 totalpages: 6144
zone(0): 4096 pages.
zone(1): 2048 pages.
zone(2): 0 pages.
Kernel command line: BOOT_IMAGE=linux initrd=initrd.lrp 
init=/linuxrc rw root=/dev/ram0 boot=/dev/hda1:msdos 
PKGPATH=/dev/hda1 auto
Initializing CPU#0
Detected 133.227 MHz processor.
Console: colour VGA+ 80x25
Calibrating delay loop... 265.42 BogoMIPS
Memory: 21404k/24576k available (948k kernel code, 
2784k reserved, -1176k data, 64k init, 0k highmem)
Dentry cache hash table entries: 4096 (order: 3, 32768 
bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 
bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 
bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 
bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 
bytes)
Intel Pentium with F0 0F bug - workaround enabled.
CPU: After generic, caps: 01bf  
 
CPU: Common caps: 01bf  
 
CPU: Intel Pentium 75 - 200 stepping 0c
Checking 'hlt' instruction... OK.
POSIX conformance testing by UNIFIX
PCI: PCI BIOS revision 2.10 entry at 0xf0200, last bus=0
PCI: Using configuration type 1
PCI: Probing PCI hardware
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society 
NET3.039
Initializing RT netlink socket
Starting kswapd
pty: 256 Unix98 ptys configured
Serial driver version 5.05c (2001-07-08) with 
MANY_PORTS SHARE_IRQ DETECT_IRQ SERIAL_PCI 
enabled
keyboard: Timeout - AT keyboard not present?(ed)
keyboard: Timeout - AT keyboard not present?(f4)
ttyS00 at 0x03f8 (irq = 4) is a 16550A
Real Time Clock Driver v1.10e
Software Watchdog Timer: 0.05, timer margin: 60 sec
Floppy drive(s): fd0 is 1.44M
FDC 0 is a post-1991 82077
RAMDISK driver initialized: 16 RAM disks of 4096K size 
1024 blocksize
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP, IGMP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 2048)
ip_conntrack version 2.1 (192 buckets, 1536 max) - 320 
bytes per conntrack
ip_tables: (C) 2000-2002 Netfilter core team
arp_tables: (C) 2002 David S. Miller
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
RAMDISK: Compressed image found at block 0
Freeing initrd memory: 1023k freed
VFS: Mounted root (minix filesystem).
Freeing unused kernel memory: 64k freed
Uniform Multi-Platform E-IDE driver Revision: 6.31
ide: Assuming 33MHz system bus speed for PIO modes; 
override with idebus=xx
CMD640: ignored by ide_scan_pci_device() (uses own 
driver)
hda: M1614TA, ATA DISK drive
ide0 at 0x1f0-0x1f7,0x3f6 on irq 14
hda: 2131584 sectors (1091 MB) w/64KiB Cache, 
CHS=2114/16/63
Partition check:
 hda: [PTBL] [528/64/63] hda1
8139too Fast Ethernet driver 0.9.26
eth0: RealTek RTL8139 Fast Ethernet at 0xc202c100, 
00:e0:7d:fc:ef:f5, IRQ 9
eth0:  Identified 8139 chip type 'RTL-8139C'
eth1: RealTek RTL8139 Fast Ethernet at 0xc202e000, 
00:e0:7d:fc:f0:17, IRQ 5
eth1:  Identified 8139 chip type 'RTL-8139C'
parport0: PC-style at 0x278 [PCSPP(,...)]
lp0: using parport0 (polling).
eth0: Setting 100mbps full-duplex based on auto-
negotiated partner ability 45e1.
eth0: Setting 100mbps full-duplex based on auto-
negotiated partner ability 45e1.
eth1: Setting half-duplex based on auto-negotiated 
partner ability .
eth0: Too much work at interrupt, IntrStatus=0x0040.

-
# less ioports   
-001f : dma1
0020-003f : pic1
0040-005f : timer
0060-006f : keyboard
0070-007f : rtc
0080-008f : dma page reg
00a0-00bf : pic2
00c0-00df : dma2
00f0-00ff : fpu
01f0-01f7 : ide0
0278-027a : parport0
03c0-03df : vga+
03f6-03f6 : ide0
03f8-03ff : serial(auto)
0cf8-0cff : PCI conf1
d000-d0ff : PCI device 10ec:8139
  d000-d0ff : 8139too
d100-d1ff : PCI device 10ec:8139
  d100-d1ff : 8139too


# less pci
PCI devices found:
  Bus  0, device   0, function  0:
Class 06

Re: [leaf-devel] 2.4.21 kernel anybody?

2003-07-28 Thread Martin Hejl
Jaime Nebrera Herrera wrote:
  Hi all,

  Some time ago we suffered a DOS attack based on a known bug in 2.4.20 kernel 
(something related to ARP tables). Thishas been solved in 2.4.21 but seems 
nobody has a Bering system with such a kernel.

  I recall Jaques had some problems with the IDE module. Any success? Anybody 
is using a 2.4.21 bering system? I have seen in the webpage that the 2.0 
release is still based on 2.4.20 :(
Do you have a link for that exploit? From what I've heard, 2.4.21 does 
indeed still cause trouble, but that doesn't mean that one couldn't 
release a 2.4.21 version which is patched for that vulerability.

Martin



---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01
___
leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel


Re: [leaf-devel] 2.4.21 kernel anybody?

2003-07-28 Thread Martin Hejl
Martin Hejl wrote:
but that doesn't mean that one couldn't 
release a 2.4.21 version which is patched for that vulerability.
^^
Obviously, that should have been 2.4.20
sorry

Martin



---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01
___
leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel


Re: [leaf-devel] 2.4.21 kernel anybody?

2003-07-28 Thread Jaime Nebrera Herrera
  Hi,

> Do you have a link for that exploit? 

  After some "mind flash back" searching in all the places were I usually 
surf, I finally found it :))

  You can see the announcement in spanish in:

http://barrapunto.com/article.pl?sid=03/06/13/2018205&mode=thread

  They give a link from debian in english:

http://www.debian.org/security/2003/dsa-311

  The related bug announcement can be found here:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0244

  The bug can cause a DOS attack (CPU reaching 100%) if badly configured 
packages enter the network and "play" with the routing table. Actually we 
suffered this problem when the local net of a firewall we were managing was 
infected by a virus that started to "fill the network" with stupid packages.

  The firewall (bering) just blowed up :( as its CPU was completelly 
saturated. The client tried to say it was our fault untill other linux 
systems in his net also came down :)

  Hope it helps.

-- 
Jaime Nebrera - [EMAIL PROTECTED]



---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_072303_01/01

___
leaf-devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-devel