memory leak after enabling bridge-netfilter

memory leak after enabling bridge-netfilter

[Ram Krishna]

I am running my linux box as a bridge. The kernel version is 2.6.18-3
I have enabled bridge-netfilter and iptables. I am seeing a memory
leak in the slab "size-64", even when I have not set any iptables
rules.
If I dont enable the bridge-netfilter and iptables kernel options then
there is no memory leak in bridge mode.

Is there any patch known to fix this memory leak? Appreciate any inputs on this.

The exact kernel options I have enabled are:

CONFIG_NETFILTER=y
CONFIG_BRIDGE_NETFILTER=y
CONFIG_NETFILTER_XTABLES=m
CONFIG_NETFILTER_XT_TARGET_MARK=m
CONFIG_NETFILTER_XT_TARGET_NFQUEUE=m
CONFIG_NETFILTER_XT_MATCH_MARK=m
CONFIG_NETFILTER_XT_MATCH_MULTIPORT=m
CONFIG_NETFILTER_XT_MATCH_PKTTYPE=m
CONFIG_IP_NF_IPTABLES=m
CONFIG_IP_NF_MATCH_IPRANGE=m
CONFIG_IP_NF_MATCH_ADDRTYPE=m
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_IP_NF_MATCH_ADDRTYPE=m
CONFIG_IP_NF_FILTER=m
CONFIG_IP_NF_TARGET_REJECT=m
CONFIG_BRIDGE=m
CONFIG_VLAN_8021Q=y

thanks,
Krishna

Re: memory leak after enabling bridge-netfilter

[Jan Engelhardt]

On Wednesday 2010-03-31 11:02, Ram Krishna wrote:

>I am running my linux box as a bridge. The kernel version is 2.6.18-3
>I have enabled bridge-netfilter and iptables. I am seeing a memory
>leak in the slab "size-64", even when I have not set any iptables
>rules.
>If I dont enable the bridge-netfilter and iptables kernel options then
>there is no memory leak in bridge mode.
>
>Is there any patch known to fix this memory leak? Appreciate any inputs 
>on this.

2.6.18 is 3 1/2 years old and long past maintenance. You are encouraged 
to try a recent kernel at the very least - the problem might have been 
fixed already.

Re: memory leak after enabling bridge-netfilter

[John Haxby]

On 31/03/10 10:02, Ram Krishna wrote:
> I am running my linux box as a bridge. The kernel version is 2.6.18-3
> I have enabled bridge-netfilter and iptables. I am seeing a memory
> leak in the slab "size-64", even when I have not set any iptables
> rules.
> If I dont enable the bridge-netfilter and iptables kernel options then
> there is no memory leak in bridge mode.
>
> Is there any patch known to fix this memory leak? Appreciate any inputs on this.
>    

2.6.18-3 ?  Is that really a dash?  Is that a Red Hat kernel?  If so 
it's very, very old, probably RHEL5 beta.

If it is the RHEL5 kernel then it was released on 2007-01-16 and you 
really should be using something newer, if only to pick up the security 
fixes.  The slab leak bug was fixed long ago.

jch