linux-kernel - Re: [bug] stuck localhost TCP connections, v2.6.26-rc3+

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64.0806041402211.16829@wrl-59.cs.helsinki.fi>
Date:	Wed, 4 Jun 2008 14:14:06 +0300 (EEST)
From:	"Ilpo Järvinen" <ilpo.jarvinen@...sinki.fi>
To:	"Håkon Løvdal" <hlovdal@...il.com>
cc:	LKML <linux-kernel@...r.kernel.org>,
	Netdev <netdev@...r.kernel.org>, Ingo Molnar <mingo@...e.hu>,
	"David S. Miller" <davem@...emloft.net>,
	"Rafael J. Wysocki" <rjw@...k.pl>,
	Andrew Morton <akpm@...ux-foundation.org>
Subject: Re: [bug] stuck localhost TCP connections, v2.6.26-rc3+

On Wed, 4 Jun 2008, Håkon Løvdal wrote:

> Hi. I have now tested and taken various logs before/under/after (ps, 
> netstat, tcpdump, strace, /proc/net/tcp). The logs did not grow as big 
> as I feared however they are way too big attach here. Any tips on how to 
> distribute?

Usually such logs compress quite well. A best thing might be to put 
somewhere (if possible) and http:// reference them.

> I mentioned before that the ssh connection died on the new PC, but 
> sometimes it just hangs as well, i.e. the ssh connection is alive but 
> there is no data transferred.
> The last test I did hang after just 292MB transferred. In this case pv
> just hangs on the new PC, waiting for data that never arrives. On the 
> sending side tar which is producing data have died and the corresponding 
> ssh is locked in some uninterruptible sleep:

> //netstat before the hang:
> Proto Recv-Q Send-Q Local Address               Foreign Address
>      State       PID/Program name    Timer
> tcp        0    504 new_pc:22                   old_pc:39464
>      ESTABLISHED 17054/sshd: hlovdal on (0.20/0/0)
> 
> // after the hang:
> Proto Recv-Q Send-Q Local Address               Foreign Address
>      State       PID/Program name    Timer
> tcp        0   2896 old_pc:22                   new_pc:39464
>      ESTABLISHED -                   on (21329441.19/0/0)

??? Are these on the same machine? How come the ip-addresses got reversed 
(while ports remain the same)...?!?

...Something could be corrupting more than a little, addresses, reference 
to the process, timers all seem mixed up here...

> Many things  in /proc/17054/ are in a non-normal state (exe is an
> empty symlink, fd is empty, etc)

...


-- 
 i.