RPC patch creates kernel panic

RPC patch creates kernel panic

[John A. Sullivan III]

I would imagine the RPC patch developers are well aware of this but I
have consistently generated kernel panics when using the RPC patch. 
This was the case using RedHat with several different kernels > 2.4.18
and patch-o-matic-20030107 (I believe).

I thought I would give patch-o-matic-20031219 a try on SUSE with kernel
2.4.25 from kernel.org patched with StrongSWAN 2.0.1 (FreeS/WAN
successor) to see if it behaved any better.  Alas, the same problem.

We have neither the skills nor time to contribute code to this patch but
it is important for us especially for our support of Microsoft shops
with their pervasive use of services spawned off of the port mapper on
135/tcp.  If there is anything we can do to help outside of development
such as testing, please let us know - John
-- 
John A. Sullivan III
Chief Technology Officer
Nexus Management
+1 207-985-7880
john.sullivan@nexusmgmt.com
---
If you are interested in helping to develop a GPL enterprise class
VPN/Firewall/Security device management console, please visit
http://iscs.sourceforge.net 

RE: RPC patch creates kernel panic

[Daniel Chemko]

Ian Latter wrote:
> Hello John,
> 
> 
>   Thank you for this report.
> 
>   The RPC conntrack helper was written to support ONC RPC -
> typically used on Unix hosts - where as Windows uses DCE RPC.
> When I last looked at that module, I tried to find technical
> information on the differences of the two, and was unable to
> find any - but had the impression from what I could find that the
> two weren't compatible.
> 
>   Whether or not the module recieves valid/invalid traffic, it
> shouldn't crash - and I want to fix that. 
> 
>   However, if you have access to documentation on DCE RPC
> protocol/standards then please forward that/them through, as any
> such documentation would be useful for broadening support.

How's this?
http://www.opengroup.org/onlinepubs/9629399/toc.htm

RE: RPC patch creates kernel panic

[Ian Latter]

Thanks Daniel - I think this is good .. skimming through it I *think* the 
protocol tower section near the bottom has what I will need ... but
a bit of reading will tell for sure (I'm looking for the on-the-wire
packet structure).

http://www.opengroup.org/onlinepubs/9629399/apdxl.htm#tagcjh_32



----- Original Message -----
>From: "Daniel Chemko" <dchemko@smgtec.com>
>To: "Ian Latter" <Ian.Latter@mq.edu.au>, "John A. Sullivan III" 
<john.sullivan@nexusmgmt.com>
>Subject:  RE: RPC patch creates kernel panic
>Date: Thu, 01 Apr 2004 14:34:56 -0800
>
> Ian Latter wrote:
> > Hello John,
> > 
> > 
> >   Thank you for this report.
> > 
> >   The RPC conntrack helper was written to support ONC RPC -
> > typically used on Unix hosts - where as Windows uses DCE RPC.
> > When I last looked at that module, I tried to find technical
> > information on the differences of the two, and was unable to
> > find any - but had the impression from what I could find that the
> > two weren't compatible.
> > 
> >   Whether or not the module recieves valid/invalid traffic, it
> > shouldn't crash - and I want to fix that. 
> > 
> >   However, if you have access to documentation on DCE RPC
> > protocol/standards then please forward that/them through, as any
> > such documentation would be useful for broadening support.
> 
> How's this?
> http://www.opengroup.org/onlinepubs/9629399/toc.htm
> 

--
Ian Latter
Internet and Networking Security Officer
Macquarie University