Help NEEDED--sos !!

Help NEEDED--sos !!

[Arindam Haldar]

Arindam Haldar wrote:
> hi,
> yes..:)... sorry for being a little cryptic ;)... but u guessed it right 
> !..so i will summarize my 2 Question in this listing-->
> 1)i am getting these messages in my /var/log/messages..
> 
>  iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 & 
> imq-2.4.18...
> May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840 
> &ip_conntrack_lock not readlocked
> May 30 05:10:04 cab1 kernel: ASSERT ip_nat_core.c:739
> &ip_conntrack_lock_R71150de5 readlocked
> May 30 05:10:04 cab1 kernel: ASSERT ip_conntrack_core.c:91
> &ip_conntrack_lock_R71150de5 readlocked
> 
> this pattern message is being received every minute. !.. this system is 
> on RH-7.2 with 512mb ram & has been running for a month now but the 
> mesages started coming since may 30 !...
> 
more info to the above from the server--->
# watch 'sort -nr -k 2 /proc/slabinfo'
buffer_head        34508  34560     96  864  864    1
dentry_cache       10665  10680    128  356  356    1
inode_cache         7501   7544    480  938  943    1
ip_dst_cache        2437   2800    192  140  140    1
ip_conntrack        1249   1884    320  124  157    1
# cabneigh all |wc -l
      17
# cat /proc/sys/net/ipv4/ip_conntrack_max
32248
# ls /lib/modules/2.4.18/kernel/net/ipv4/netfilter/
ip_conntrack_egg.o      iptable_nat.o      ipt_LOG.o         ipt_realm.o
ip_conntrack_ftp.o      ip_tables.o        ipt_mac.o    ipt_record_rpc.o
ip_conntrack_h323.o     ipt_ah.o           ipt_mark.o     ipt_REDIRECT.o
ip_conntrack_irc.o      ipt_connmark.o     ipt_MARK.o       ipt_REJECT.o
ip_conntrack.o          ipt_CONNMARK.o     ipt_MASQUERADE.o  ipt_state.o
ip_conntrack_rpc_tcp.o  ipt_conntrack.o    ipt_MIRROR.o     ipt_string.o
ip_conntrack_rpc_udp.o  ipt_dscp.o         ipt_mport.o      ipt_tcpmss.o
ip_nat_ftp.o            ipt_DSCP.o         ipt_multiport.o  ipt_TCPMSS.o
ip_nat_h323.o           ipt_esp.o          ipt_NETLINK.o     ipt_time.o
ip_nat_irc.o            ipt_helper.o       ipt_nth.o         ipt_tos.o
ip_nat_snmp_basic.o     ipt_IMQ.o          ipt_owner.o       ipt_TOS.o
ip_pool.o               ipt_iplimit.o      ipt_pkttype.o     ipt_ttl.o
ip_queue.o              ipt_ipv4options.o  ipt_pool.o        ipt_TTL.o
iptable_filter.o        ipt_length.o       ipt_POOL.o        ipt_ULOG.o
iptable_mangle.o        ipt_limit.o        ipt_psd.o         ipt_unclean.o
#

so surely something is wrong when i get the above said messages on 
/var/log/messages---EVERY ONE MIN...& even at none peak time like late 
midnight !! ...

can someone tell me whats wrong ?..how can i solve this problem??


> regards
> A.H
> 

Re: Help NEEDED--sos !!

[Jozsef Kadlecsik]

On Tue, 4 Jun 2002, Arindam Haldar wrote:

> > yes..:)... sorry for being a little cryptic ;)... but u guessed it right
> > !..so i will summarize my 2 Question in this listing-->
> > 1)i am getting these messages in my /var/log/messages..
> >
> >  iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 &
> > imq-2.4.18...
> > May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840
> > &ip_conntrack_lock not readlocked
>
> can someone tell me whats wrong ?..how can i solve this problem??

I'd suggest to start with a new 2.4.18 kernel, without the htb3 and imq
patches applied. Check out that it works, without emitting such messages.

If the problem persists, then it might be a netfilter related problem
(there still can be bad hardvare...). If the problem disappears then
it is related to the two additional extra patches.

Regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
WWW-Home: http://www.kfki.hu/~kadlec
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

Re: Help NEEDED--sos !!

[Arindam Haldar]

no this is not htb or imq specific problem !!...  i have tried 
with/without imq/htb/ vanila iptables... at this point of time thereis 
no htb or imq ie not complied in kernel or with iptables... but i still 
get the messages !....:(
friends do any of u faced this problem or is it the first time ?
Plsssssssssssssssssssssssssss i NEEEEEEEEEEED help !!!!

Jozsef Kadlecsik wrote:
> On Tue, 4 Jun 2002, Arindam Haldar wrote:
> 
>>>yes..:)... sorry for being a little cryptic ;)... but u guessed it right
>>>!..so i will summarize my 2 Question in this listing-->
>>>1)i am getting these messages in my /var/log/messages..
>>>
>>> iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 &
>>>imq-2.4.18...
>>>May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840
>>>&ip_conntrack_lock not readlocked
 >>>May 30 05:09:58 cab1 kernel: ASSERT: ip_conntrack_core.c:91
 >>>&ip_conntrack_lock_R71150de5 readlocked
>>can someone tell me whats wrong ?..how can i solve this problem??

> I'd suggest to start with a new 2.4.18 kernel, without the htb3 and imq
> patches applied. Check out that it works, without emitting such messages.
> 
> If the problem persists, then it might be a netfilter related problem
> (there still can be bad hardvare...). If the problem disappears then
> it is related to the two additional extra patches.
> 
> Regards,
> Jozsef

Re: Help NEEDED--sos !!

[Arindam Haldar]

hi jozsef,
:) .. no probs for asking ur welcome !.. ys the running kernel is the 
one i complied . am not too good a C programmer but am doing 
administation for 3+ years now !.. & have been doing kernel, iptables, 
etc etc etc compilation & using then since !... as far as this test r 
concerned, i have take into account that they come up with the iptables 
i compile with the corresponding kerrnel ie with/without imq/htb3..
a few confession now as i forgot to mention-->the only added modules is 
rpc from iptables & i have never tried htb2--ie was only trying 
expeitental htb3 !
last but never the least--i really am thanful to u for helping me to 
find this problem--i hope when i/u/we find out it will be a good 
guidance/tool for others to configure their systems !
in hope for a solution tonight !
regards
A.H

Jozsef Kadlecsik wrote:
> On Wed, 5 Jun 2002, Arindam Haldar wrote:
> 
>>no this is not htb or imq specific problem !!...  i have tried
>>with/without imq/htb/ vanila iptables... at this point of time thereis
>>no htb or imq ie not complied in kernel or with iptables... but i still
>>get the messages !.... :(
> 
> Sorry for the stupid question but are you definitely run the kernel you
> are talking about?
> 
> Regards,
> Jozsef
> -
> E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
> WWW-Home: http://www.kfki.hu/~kadlec
> Address : KFKI Research Institute for Particle and Nuclear Physics
>           H-1525 Budapest 114, POB. 49, Hungary
> 
> 

Re: Help NEEDED--sos !!

[George Georgalis]

May I see the command you use to load the module, (and to satisfy my
curisoty the output of 'uname -a')

// George

On Wed, Jun 05, 2002 at 10:17:09AM +0530, Arindam Haldar wrote:
>no this is not htb or imq specific problem !!...  i have tried 
>with/without imq/htb/ vanila iptables... at this point of time thereis 
>no htb or imq ie not complied in kernel or with iptables... but i still 
>get the messages !....:(
>friends do any of u faced this problem or is it the first time ?
>Plsssssssssssssssssssssssssss i NEEEEEEEEEEED help !!!!
>
>Jozsef Kadlecsik wrote:
>> On Tue, 4 Jun 2002, Arindam Haldar wrote:
>> 
>>>>yes..:)... sorry for being a little cryptic ;)... but u guessed it right
>>>>!..so i will summarize my 2 Question in this listing-->
>>>>1)i am getting these messages in my /var/log/messages..
>>>>
>>>> iptables v1.2.7-20020423 with  kernel 2.4.18 & patched htb3.3-020512 &
>>>>imq-2.4.18...
>>>>May 30 05:09:58 cab1 kernel: ASSERT: ip_nat_core.c:840
>>>>&ip_conntrack_lock not readlocked
> >>>May 30 05:09:58 cab1 kernel: ASSERT: ip_conntrack_core.c:91
> >>>&ip_conntrack_lock_R71150de5 readlocked
>>>can someone tell me whats wrong ?..how can i solve this problem??
>
>> I'd suggest to start with a new 2.4.18 kernel, without the htb3 and imq
>> patches applied. Check out that it works, without emitting such messages.
>> 
>> If the problem persists, then it might be a netfilter related problem
>> (there still can be bad hardvare...). If the problem disappears then
>> it is related to the two additional extra patches.
>> 
>> Regards,
>> Jozsef
>
>
>

-- 
GEORGE GEORGALIS, System Admin/Architect    cell: 347-451-8229 
Security Services, Web, Mail,            mailto:george@galis.org 
File, Print, DB and DNS Servers.       http://www.galis.org/george 

Re: Help NEEDED--sos !!

[Jozsef Kadlecsik]

On Wed, 5 Jun 2002, Arindam Haldar wrote:

> > Sorry for the stupid question but are you definitely run the kernel you
> > are talking about?
>
> :) .. no probs for asking ur welcome !.. ys the running kernel is the
> one i complied . am not too good a C programmer but am doing
> administation for 3+ years now !.. & have been doing kernel, iptables,
[...]
> in hope for a solution tonight !

Impossible. We are still in dark what's going on your machine.

*Probably* it could help, if you would recompile the kernel modules with
netfilter debugging enabled. You mentioned that you had got such messages
by simply loading in the ip_conntrack_ftp module. Then please try to
reproduce the problem and post the kernel logs.

Regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
WWW-Home: http://www.kfki.hu/~kadlec
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary