ip_net_ftp message !

ip_net_ftp message !

[Arindam Haldar]

hi all,
this time while insmod ip_nat_ftp(after ip_conntrack_ftp) & i got this 
message-->
ASSERT ip_conntrack_core.c:541 & ip_conntrack_lock not read locked !

this time i tried for the first time rh7.3. i have complied the kernel 
2.4.18(downloaded & not from rh7.3) with iptables v1.2.7-2002528.

what does it mean ??..did i miss something ?

thanking in advance
A.H

Re: ip_net_ftp message !

[Jozsef Kadlecsik]

On Mon, 3 Jun 2002, Arindam Haldar wrote:

> this time while insmod ip_nat_ftp(after ip_conntrack_ftp) & i got this
> message-->
> ASSERT ip_conntrack_core.c:541 & ip_conntrack_lock not read locked !
>
> this time i tried for the first time rh7.3. i have complied the kernel
> 2.4.18(downloaded & not from rh7.3) with iptables v1.2.7-2002528.

You mean, (sorry, I have difficulties in understanding your sentences)
that you downloaded the kernel source from ftp.kernel.org, compiled it,
installed both the kernel image and the modules and then got the message
above?

Regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
WWW-Home: http://www.kfki.hu/~kadlec
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

Re: ip_net_ftp message !

[Arindam Haldar]

hi,

yes..:)... sorry for being a little cryptic ;)... but u guessed it right 
!..so i will summarize my 2 Question in this listing-->
1)i am getting these messages in my /var/log/messages..

  iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 & 
imq-2.4.18...
May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840 
&ip_conntrack_lock not readlocked
May 30 05:10:04 cab1 kernel: ASSERT ip_nat_core.c:739
&ip_conntrack_lock_R71150de5 readlocked
May 30 05:10:04 cab1 kernel: ASSERT ip_conntrack_core.c:91
&ip_conntrack_lock_R71150de5 readlocked

this pattern message is being received every minute. !.. this system is 
on RH-7.2 with 512mb ram & has been running for a month now but the 
mesages started coming since may 30 !...

2) while insmod ip_nat_ftp(after ip_conntrack_ftp) & i got this message 
on RH-7.3(using RH-7.3 for 1st time !).. the kernel was downloaded from 
ftp.kernel.org & iptables v1.2.7-2002528 -->
ASSERT ip_conntrack_core.c:541 & ip_conntrack_lock not read locked !

i have similar configuration done on different pc(with rh7.2) with 
various iptables veriosn but didnt get any of the errors mentioned above !

ur help is my guidance...
regards
A.H

Re: ip_net_ftp message !

[Jozsef Kadlecsik]

Hi,

On Mon, 3 Jun 2002, Arindam Haldar wrote:

> 1)i am getting these messages in my /var/log/messages..
>
>   iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 &
> imq-2.4.18...
> May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840
> &ip_conntrack_lock not readlocked
>
> this pattern message is being received every minute. !.. this system is
> on RH-7.2 with 512mb ram & has been running for a month now but the
> mesages started coming since may 30 !...
>
> 2) while insmod ip_nat_ftp(after ip_conntrack_ftp) & i got this message
> on RH-7.3(using RH-7.3 for 1st time !).. the kernel was downloaded from
> ftp.kernel.org & iptables v1.2.7-2002528 -->
> ASSERT ip_conntrack_core.c:541 & ip_conntrack_lock not read locked !
>
> i have similar configuration done on different pc(with rh7.2) with
> various iptables veriosn but didnt get any of the errors mentioned above !

The iptables version is irrelevant in these cases - only the kernel and
its version counts. I can think of two possibilities (therefore stressed
the question on from where did you get the source of the running kernel):

- you run a vendor-provided kernel, compiled from vendor-provided source
- the additional patches you applied break some internal mechanism in
  netfilter

I know it's not much help for you.

Regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
WWW-Home: http://www.kfki.hu/~kadlec
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

Help NEEDED--sos !!

[Arindam Haldar]

Arindam Haldar wrote:
> hi,
> yes..:)... sorry for being a little cryptic ;)... but u guessed it right 
> !..so i will summarize my 2 Question in this listing-->
> 1)i am getting these messages in my /var/log/messages..
> 
>  iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 & 
> imq-2.4.18...
> May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840 
> &ip_conntrack_lock not readlocked
> May 30 05:10:04 cab1 kernel: ASSERT ip_nat_core.c:739
> &ip_conntrack_lock_R71150de5 readlocked
> May 30 05:10:04 cab1 kernel: ASSERT ip_conntrack_core.c:91
> &ip_conntrack_lock_R71150de5 readlocked
> 
> this pattern message is being received every minute. !.. this system is 
> on RH-7.2 with 512mb ram & has been running for a month now but the 
> mesages started coming since may 30 !...
> 
more info to the above from the server--->
# watch 'sort -nr -k 2 /proc/slabinfo'
buffer_head        34508  34560     96  864  864    1
dentry_cache       10665  10680    128  356  356    1
inode_cache         7501   7544    480  938  943    1
ip_dst_cache        2437   2800    192  140  140    1
ip_conntrack        1249   1884    320  124  157    1
# cabneigh all |wc -l
      17
# cat /proc/sys/net/ipv4/ip_conntrack_max
32248
# ls /lib/modules/2.4.18/kernel/net/ipv4/netfilter/
ip_conntrack_egg.o      iptable_nat.o      ipt_LOG.o         ipt_realm.o
ip_conntrack_ftp.o      ip_tables.o        ipt_mac.o    ipt_record_rpc.o
ip_conntrack_h323.o     ipt_ah.o           ipt_mark.o     ipt_REDIRECT.o
ip_conntrack_irc.o      ipt_connmark.o     ipt_MARK.o       ipt_REJECT.o
ip_conntrack.o          ipt_CONNMARK.o     ipt_MASQUERADE.o  ipt_state.o
ip_conntrack_rpc_tcp.o  ipt_conntrack.o    ipt_MIRROR.o     ipt_string.o
ip_conntrack_rpc_udp.o  ipt_dscp.o         ipt_mport.o      ipt_tcpmss.o
ip_nat_ftp.o            ipt_DSCP.o         ipt_multiport.o  ipt_TCPMSS.o
ip_nat_h323.o           ipt_esp.o          ipt_NETLINK.o     ipt_time.o
ip_nat_irc.o            ipt_helper.o       ipt_nth.o         ipt_tos.o
ip_nat_snmp_basic.o     ipt_IMQ.o          ipt_owner.o       ipt_TOS.o
ip_pool.o               ipt_iplimit.o      ipt_pkttype.o     ipt_ttl.o
ip_queue.o              ipt_ipv4options.o  ipt_pool.o        ipt_TTL.o
iptable_filter.o        ipt_length.o       ipt_POOL.o        ipt_ULOG.o
iptable_mangle.o        ipt_limit.o        ipt_psd.o         ipt_unclean.o
#

so surely something is wrong when i get the above said messages on 
/var/log/messages---EVERY ONE MIN...& even at none peak time like late 
midnight !! ...

can someone tell me whats wrong ?..how can i solve this problem??


> regards
> A.H
> 

Re: Help NEEDED--sos !!

[Jozsef Kadlecsik]

On Tue, 4 Jun 2002, Arindam Haldar wrote:

> > yes..:)... sorry for being a little cryptic ;)... but u guessed it right
> > !..so i will summarize my 2 Question in this listing-->
> > 1)i am getting these messages in my /var/log/messages..
> >
> >  iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 &
> > imq-2.4.18...
> > May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840
> > &ip_conntrack_lock not readlocked
>
> can someone tell me whats wrong ?..how can i solve this problem??

I'd suggest to start with a new 2.4.18 kernel, without the htb3 and imq
patches applied. Check out that it works, without emitting such messages.

If the problem persists, then it might be a netfilter related problem
(there still can be bad hardvare...). If the problem disappears then
it is related to the two additional extra patches.

Regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
WWW-Home: http://www.kfki.hu/~kadlec
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

Re: Help NEEDED--sos !!

[Arindam Haldar]

no this is not htb or imq specific problem !!...  i have tried 
with/without imq/htb/ vanila iptables... at this point of time thereis 
no htb or imq ie not complied in kernel or with iptables... but i still 
get the messages !....:(
friends do any of u faced this problem or is it the first time ?
Plsssssssssssssssssssssssssss i NEEEEEEEEEEED help !!!!

Jozsef Kadlecsik wrote:
> On Tue, 4 Jun 2002, Arindam Haldar wrote:
> 
>>>yes..:)... sorry for being a little cryptic ;)... but u guessed it right
>>>!..so i will summarize my 2 Question in this listing-->
>>>1)i am getting these messages in my /var/log/messages..
>>>
>>> iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 &
>>>imq-2.4.18...
>>>May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840
>>>&ip_conntrack_lock not readlocked
 >>>May 30 05:09:58 cab1 kernel: ASSERT: ip_conntrack_core.c:91
 >>>&ip_conntrack_lock_R71150de5 readlocked
>>can someone tell me whats wrong ?..how can i solve this problem??

> I'd suggest to start with a new 2.4.18 kernel, without the htb3 and imq
> patches applied. Check out that it works, without emitting such messages.
> 
> If the problem persists, then it might be a netfilter related problem
> (there still can be bad hardvare...). If the problem disappears then
> it is related to the two additional extra patches.
> 
> Regards,
> Jozsef

Re: Help NEEDED--sos !!

[George Georgalis]

May I see the command you use to load the module, (and to satisfy my
curisoty the output of 'uname -a')

// George

On Wed, Jun 05, 2002 at 10:17:09AM +0530, Arindam Haldar wrote:
>no this is not htb or imq specific problem !!...  i have tried 
>with/without imq/htb/ vanila iptables... at this point of time thereis 
>no htb or imq ie not complied in kernel or with iptables... but i still 
>get the messages !....:(
>friends do any of u faced this problem or is it the first time ?
>Plsssssssssssssssssssssssssss i NEEEEEEEEEEED help !!!!
>
>Jozsef Kadlecsik wrote:
>> On Tue, 4 Jun 2002, Arindam Haldar wrote:
>> 
>>>>yes..:)... sorry for being a little cryptic ;)... but u guessed it right
>>>>!..so i will summarize my 2 Question in this listing-->
>>>>1)i am getting these messages in my /var/log/messages..
>>>>
>>>> iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 &
>>>>imq-2.4.18...
>>>>May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840
>>>>&ip_conntrack_lock not readlocked
> >>>May 30 05:09:58 cab1 kernel: ASSERT: ip_conntrack_core.c:91
> >>>&ip_conntrack_lock_R71150de5 readlocked
>>>can someone tell me whats wrong ?..how can i solve this problem??
>
>> I'd suggest to start with a new 2.4.18 kernel, without the htb3 and imq
>> patches applied. Check out that it works, without emitting such messages.
>> 
>> If the problem persists, then it might be a netfilter related problem
>> (there still can be bad hardvare...). If the problem disappears then
>> it is related to the two additional extra patches.
>> 
>> Regards,
>> Jozsef
>
>
>

-- 
GEORGE GEORGALIS, System Admin/Architect    cell: 347-451-8229 
Security Services, Web, Mail,            mailto:george@galis.org 
File, Print, DB and DNS Servers.       http://www.galis.org/george 

Re: Help NEEDED--sos !!

[Arindam Haldar]

hi jozsef,
:) .. no probs for asking ur welcome !.. ys the running kernel is the 
one i complied . am not too good a C programmer but am doing 
administation for 3+ years now !.. & have been doing kernel, iptables, 
etc etc etc compilation & using then since !... as far as this test r 
concerned, i have take into account that they come up with the iptables 
i compile with the corresponding kerrnel ie with/without imq/htb3..
a few confession now as i forgot to mention-->the only added modules is 
rpc from iptables & i have never tried htb2--ie was only trying 
expeitental htb3 !
last but never the least--i really am thanful to u for helping me to 
find this problem--i hope when i/u/we find out it will be a good 
guidance/tool for others to configure their systems !
in hope for a solution tonight !
regards
A.H

Jozsef Kadlecsik wrote:
> On Wed, 5 Jun 2002, Arindam Haldar wrote:
> 
>>no this is not htb or imq specific problem !!...  i have tried
>>with/without imq/htb/ vanila iptables... at this point of time thereis
>>no htb or imq ie not complied in kernel or with iptables... but i still
>>get the messages !.... :(
> 
> Sorry for the stupid question but are you definitely run the kernel you
> are talking about?
> 
> Regards,
> Jozsef
> -
> E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
> WWW-Home: http://www.kfki.hu/~kadlec
> Address : KFKI Research Institute for Particle and Nuclear Physics
>           H-1525 Budapest 114, POB. 49, Hungary
> 
> 

Re: Help NEEDED--sos !!

[Jozsef Kadlecsik]

On Wed, 5 Jun 2002, Arindam Haldar wrote:

> > Sorry for the stupid question but are you definitely run the kernel you
> > are talking about?
>
> :) .. no probs for asking ur welcome !.. ys the running kernel is the
> one i complied . am not too good a C programmer but am doing
> administation for 3+ years now !.. & have been doing kernel, iptables,
[...]
> in hope for a solution tonight !

Impossible. We are still in dark what's going on your machine.

*Probably* it could help, if you would recompile the kernel modules with
netfilter debugging enabled. You mentioned that you had got such messages
by simply loading in the ip_conntrack_ftp module. Then please try to
reproduce the problem and post the kernel logs.

Regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
WWW-Home: http://www.kfki.hu/~kadlec
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary