linux-kernel - Re: nfs NULL procedure packets

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20081204184522.GA7575@fieldses.org>
Date:	Thu, 4 Dec 2008 13:45:22 -0500
From:	"J. Bruce Fields" <bfields@...ldses.org>
To:	Russell Miller <duskglow@...il.com>
Cc:	linux-kernel@...r.kernel.org
Subject: Re: nfs NULL procedure packets

On Wed, Dec 03, 2008 at 10:11:26AM -0800, Russell Miller wrote:
> Hi again, I was hoping someone here could answer another question.  I
> apologize if these are easy questions...
> 
> So a couple of days ago I was troubleshooting yet another NFS problem
> (not the non-one I described a few days ago).  I sent a 1G file over
> to a server, did a TCP capture, and analyzed the results.
> 
> I noticed a lot of NULL procedure packets.  A *lot* of them.  In some
> cases, one every 10 microseconds, and there were about 400,000 of them
> I captured.
> 
> This seems like a lot of network traffic for very little reason.
> 
> Is this normal behavior, or something I should investigate further?
> It seems to me like pinging the NFS server once every 10 microseconds
> is a major waste of bandwidth.

It's either a bug, or you're misreading the traces--how are you
identifying these as NULL procedures?  Also, are they NULL NFS calls, or
some other rpc protocol?  And are you using krb5?

--b.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/