Package: linux-2.6 Version: 2.6.32-13 Severity: normal
Hello, I'm trying to setup a DomU running a router (Vyatta VC6, "live virtualization ready" version), but NATed packets seems to be dropped at Dom0 level (with tcpdump on DomU all look fine) and I obtain a lots of "Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet" in Dom0's syslog. I also saw than Jeremy Fitzhardinge fix that bug the 19 May, so maybe we should update the kernel package : http://lists.xensource.com/archives/html/xen-devel/2010-05/msg01004.html Thanks in advance, Olivier -- Package-specific info: ** Version: Linux version 2.6.32-5-xen-amd64 (Debian 2.6.32-13) (m...@debian.org) (gcc version 4.3.4 (Debian 4.3.4-10) ) #1 SMP Mon May 17 20:24:46 UTC 2010 ** Command line: root=/dev/mapper/vg-lenny ro panic=300 rootdelay=5 console=tty0 ** Not tainted ** Kernel log: [ 3033.996890] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3034.915182] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3034.982097] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3035.921117] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3035.988976] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3036.911620] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3036.965206] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3037.862286] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3037.921329] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3038.853287] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3039.858051] __ratelimit: 1 callbacks suppressed [ 3039.858180] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3039.925937] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3040.859104] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3040.925910] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3041.843634] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3041.907915] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3042.805334] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3042.868228] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3043.782347] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3043.846027] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3044.815064] __ratelimit: 1 callbacks suppressed [ 3044.815190] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3045.747208] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3045.814434] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3046.753460] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3046.821353] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3047.750426] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3047.822838] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3048.705947] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3048.777645] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3049.668215] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3050.635898] __ratelimit: 1 callbacks suppressed [ 3050.636028] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3050.708396] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3051.637855] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3051.713380] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3052.627120] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3052.703139] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3053.590658] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3053.663966] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3054.567439] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3054.639730] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3055.606359] __ratelimit: 1 callbacks suppressed [ 3055.606486] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3056.523326] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 3056.598740] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 6354.543715] eth2: port 2(vif2.2) entering disabled state [ 6354.555072] eth2: port 2(vif2.2) entering disabled state [ 6354.847032] eth1: port 2(vif2.1) entering disabled state [ 6354.877167] eth1: port 2(vif2.1) entering disabled state [ 6355.402668] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6355.406210] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6355.406280] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6355.409074] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6355.409147] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6531.937937] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6531.938015] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6355.427301] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6355.684651] eth0: port 2(vif2.0) entering disabled state [ 6355.696342] eth0: port 2(vif2.0) entering disabled state [ 6417.389309] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.075994] device vif3.1 entered promiscuous mode [ 6466.078011] eth1: port 2(vif3.1) entering forwarding state [ 6466.078551] device vif3.0 entered promiscuous mode [ 6466.084952] eth0: port 2(vif3.0) entering forwarding state [ 6466.090462] device vif3.2 entered promiscuous mode [ 6466.092915] eth2: port 2(vif3.2) entering forwarding state [ 6581.116765] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.119425] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.121518] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.121592] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.129462] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.129540] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.131659] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.131731] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6466.131802] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 6404.892252] blkback: ring-ref 8, event-channel 15, protocol 2 (x86_32-abi) [ 6476.146493] vif3.0: no IPv6 routers present [ 6476.554198] vif3.1: no IPv6 routers present [ 6476.878212] vif3.2: no IPv6 routers present [ 6440.956678] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet [ 7004.279376] eth2: port 2(vif3.2) entering disabled state [ 7004.291048] eth2: port 2(vif3.2) entering disabled state [ 7004.453872] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7004.453954] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7004.454036] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7004.456867] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7004.456942] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7004.580816] eth1: port 2(vif3.1) entering disabled state [ 7004.600692] eth1: port 2(vif3.1) entering disabled state [ 7199.993957] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7199.994030] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7199.996696] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7005.390941] eth0: port 2(vif3.0) entering disabled state [ 7005.402868] eth0: port 2(vif3.0) entering disabled state [ 7200.814019] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore. [ 7014.755849] kjournald starting. Commit interval 5 seconds [ 7014.929453] EXT3 FS on dm-2, internal journal [ 7014.929564] EXT3-fs: mounted filesystem with ordered data mode. ** Model information sys_vendor: System manufacturer product_name: System Product Name product_version: System Version chassis_vendor: Chassis Manufacture chassis_version: Chassis Version bios_vendor: American Megatrends Inc. bios_version: 0601 board_vendor: ASUSTeK Computer INC. board_name: P7H55-M PRO board_version: Rev 1.xx ** Loaded modules: Module Size Used by nf_conntrack_ipv4 9833 0 nf_defrag_ipv4 1139 1 nf_conntrack_ipv4 xt_state 1303 0 nf_conntrack 46567 2 nf_conntrack_ipv4,xt_state xt_physdev 1508 0 iptable_filter 2258 0 ip_tables 13899 1 iptable_filter x_tables 12845 3 xt_state,xt_physdev,ip_tables bridge 39614 0 stp 1440 1 bridge xen_evtchn 4259 1 xenfs 9568 1 snd_pcm 60535 0 snd_timer 15582 1 snd_pcm snd 46446 2 snd_pcm,snd_timer soundcore 4598 1 snd snd_page_alloc 6249 1 snd_pcm i2c_i801 7830 0 evdev 7352 0 i2c_core 15712 1 i2c_i801 tpm_tis 7336 0 tpm 9917 1 tpm_tis tpm_bios 4521 1 tpm pcspkr 1699 0 asus_atk0110 7686 0 button 4650 0 processor 36077 0 acpi_processor 5087 1 processor,[permanent] ext3 106550 4 jbd 37101 1 ext3 mbcache 5050 1 ext3 dm_mirror 10923 0 dm_region_hash 6696 1 dm_mirror dm_log 7381 2 dm_mirror,dm_region_hash dm_snapshot 18529 0 dm_mod 53770 22 dm_mirror,dm_log,dm_snapshot raid10 17697 1 raid1 18191 1 md_mod 73664 4 raid10,raid1 sd_mod 29777 12 crc_t10dif 1276 1 sd_mod ahci 32358 8 ehci_hcd 31071 0 libata 133536 1 ahci scsi_mod 122133 2 sd_mod,libata r8169 28893 0 mii 3210 1 r8169 usbcore 121991 2 ehci_hcd nls_base 6377 1 usbcore thermal 11674 0 fan 3346 0 thermal_sys 11942 3 processor,thermal,fan ** Network interface configuration: # Used by ifup(8) and ifdown(8). See the interfaces(5) manpage or # /usr/share/doc/ifupdown/examples for more information. auto lo iface lo inet loopback auto eth0 iface eth0 inet static address 192.168.0.254 netmask 255.255.255.0 network 192.168.0.0 broadcast 192.168.0.255 gateway 192.168.0.1 post-up /usr/sbin/ethtool -K $IFACE tx off rx off auto eth1 iface eth1 inet static address 192.168.1.254 netmask 255.255.255.0 network 192.168.1.0 broadcast 192.168.1.255 post-up /usr/sbin/ethtool -K $IFACE tx off rx off auto eth2 iface eth2 inet static address 192.168.2.254 netmask 255.255.255.0 network 192.168.2.0 broadcast 192.168.2.255 post-up /usr/sbin/ethtool -K $IFACE tx off rx off ** Network status: *** IP interfaces and addresses: 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: peth0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000 link/ether e0:cb:4e:e9:3e:e1 brd ff:ff:ff:ff:ff:ff inet6 fe80::e2cb:4eff:fee9:3ee1/64 scope link valid_lft forever preferred_lft forever 3: peth1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000 link/ether 00:24:01:2e:1d:63 brd ff:ff:ff:ff:ff:ff inet6 fe80::224:1ff:fe2e:1d63/64 scope link valid_lft forever preferred_lft forever 4: peth2: <NO-CARRIER,BROADCAST,MULTICAST,PROMISC,UP> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000 link/ether 00:24:01:2e:1e:42 brd ff:ff:ff:ff:ff:ff 5: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN link/ether e0:cb:4e:e9:3e:e1 brd ff:ff:ff:ff:ff:ff inet 192.168.0.254/24 brd 192.168.0.255 scope global eth0 inet6 fe80::e2cb:4eff:fee9:3ee1/64 scope link valid_lft forever preferred_lft forever 6: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN link/ether 00:24:01:2e:1d:63 brd ff:ff:ff:ff:ff:ff inet 192.168.1.254/24 brd 192.168.1.255 scope global eth1 inet6 fe80::224:1ff:fe2e:1d63/64 scope link valid_lft forever preferred_lft forever 7: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN link/ether 00:24:01:2e:1e:42 brd ff:ff:ff:ff:ff:ff inet 192.168.2.254/24 brd 192.168.2.255 scope global eth2 inet6 fe80::224:1ff:fe2e:1e42/64 scope link valid_lft forever preferred_lft forever *** Device statistics: Inter-| Receive | Transmit face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed lo: 6619 60 0 0 0 0 0 0 6619 60 0 0 0 0 0 0 peth0:78412283 65423 0 0 0 0 0 0 2210894 26815 0 0 0 0 0 0 peth1: 80185 513 0 0 0 0 0 0 51495 632 0 0 0 0 0 0 peth2: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 eth0:77024123 60071 0 0 0 0 0 2057 1920821 24883 0 0 0 0 0 0 eth1: 54070 269 0 0 0 0 0 269 468 6 0 0 0 0 0 0 eth2: 39080 125 0 0 0 0 0 125 468 6 0 0 0 0 0 0 *** Protocol statistics: Ip: 59827 total packets received 0 forwarded 0 incoming packets discarded 58609 incoming packets delivered 24885 requests sent out 16 fragments dropped after timeout 16 reassemblies required 16 packet reassembles failed Icmp: 6 ICMP messages received 0 input ICMP message failed. Histogramme d'entrée ICMP destination unreachable: 6 7 ICMP messages sent 0 ICMP messages failed Histogramme de sortie ICMP destination unreachable: 7 IcmpMsg: InType3: 6 OutType3: 7 Tcp: 8 active connections openings 1 passive connection openings 0 failed connection attempts 1 connection resets received 1 connections established 57917 segments received 24762 segments send out 0 segments retransmited 0 bad segments received. 423 resets sent Udp: 93 packets received 7 packets to unknown port received. 0 packet receive errors 116 packets sent UdpLite: TcpExt: 4 TCP sockets finished time wait in fast timer 87 delayed acks sent 52 packets directly queued to recvmsg prequeue. 14480 bytes directly in process context from backlog 75923 bytes directly received in process context from prequeue 49829 packet headers predicted 58 packets header predicted and directly queued to user 49 acknowledgments not containing data payload received 4344 predicted acknowledgments 1 connections reset due to early user close IpExt: InMcastPkts: 62 InBcastPkts: 524 InOctets: 77088675 OutOctets: 1577238 InMcastOctets: 1984 InBcastOctets: 91428 *** Device features: eth0: 0x1800 eth1: 0x1800 eth2: 0x1800 lo: 0x13865 peth0: 0x180 peth1: 0x180 peth2: 0x180 ** PCI devices: not available ** USB devices: not available -- System Information: Debian Release: 5.0.4 APT prefers stable APT policy: (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 2.6.32-5-xen-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to fr_FR.UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages linux-image-2.6.32-5-xen-amd64 depends on: ii debconf [debconf-2.0] 1.5.24 Debian configuration management sy ii initramfs-tools 0.92o tools for generating an initramfs ii linux-base 2.6.32-13 Linux image base package ii module-init-tools 3.4-1 tools for managing Linux kernel mo Versions of packages linux-image-2.6.32-5-xen-amd64 recommends: ii firmware-linux-f 2.6.34-1~experimental.1 Binary firmware for various driver Versions of packages linux-image-2.6.32-5-xen-amd64 suggests: ii grub 0.97-47lenny2 GRand Unified Bootloader (Legacy v pn linux-doc-2.6.32 <none> (no description available) Versions of packages linux-image-2.6.32-5-xen-amd64 is related to: pn firmware-bnx2 <none> (no description available) pn firmware-bnx2x <none> (no description available) pn firmware-ipw2x00 <none> (no description available) pn firmware-ivtv <none> (no description available) pn firmware-iwlwifi <none> (no description available) ii firmware-linux 0.24~bpo50+1 Binary firmware for various driver ii firmware-linux-no 0.24~bpo50+1 Binary firmware for various driver pn firmware-qlogic <none> (no description available) pn firmware-ralink <none> (no description available) ii xen-hypervisor-4. 4.0.0-1~experimental.1 The Xen Hypervisor on AMD64 -- debconf information: linux-image-2.6.32-5-xen-amd64/prerm/would-invalidate-boot-loader-2.6.32-5-xen-amd64: true shared/kernel-image/really-run-bootloader: true linux-image-2.6.32-5-xen-amd64/postinst/bootloader-test-error-2.6.32-5-xen-amd64: linux-image-2.6.32-5-xen-amd64/prerm/removing-running-kernel-2.6.32-5-xen-amd64: true linux-image-2.6.32-5-xen-amd64/postinst/depmod-error-initrd-2.6.32-5-xen-amd64: false linux-image-2.6.32-5-xen-amd64/postinst/missing-firmware-2.6.32-5-xen-amd64: linux-image-2.6.32-5-xen-amd64/postinst/bootloader-error-2.6.32-5-xen-amd64: -- To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20100527120446.8780.56973.report...@yunze.plug