linux-kernel - Re: When does Linux drop UDP packets?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.DEB.2.00.0906041228170.14994@gandalf.stny.rr.com>
Date:	Thu, 4 Jun 2009 12:34:11 -0400 (EDT)
From:	Steven Rostedt <rostedt@...dmis.org>
To:	Philipp Reh <sefi@...-f-i.de>
cc:	LKML <linux-kernel@...r.kernel.org>
Subject: Re: When does Linux drop UDP packets?


Oh, btw, you don't need to strip LKML from replys (or any Cc), unless it 
is off topic.  LKML is a public forum, and as long as things are on topic, 
it is nice to show others the solutions that are found.

> 
> On Thu, 4 Jun 2009, Philipp Reh wrote:
> 
> > I'm not really sure it is dropped but tcpdump sees the packet and
> > recvfrom doesn't see it, so I think that the kernel might drop it
> > somewhere when processing the IP stack logic.
> 
> Looking at the udp stack, selinux plays a role, and looks like it will 
> drop a packet if it is not in the routing table.
> 
> Try:
> 
> # setenforce 0
> 
> and see if you start seeing packets.

BTW, I used ftrace to look into this:

Enable:

	CONFIG_FTRACE
	CONFIG_FUNCTION_TRACER
	CONFIG_FUNCITON_GRAPH_TRACER
	CONFIG_DYNAMIC_FTRACE

Compile and boot:

# mount -t debugfs nodev /sys/kernel/debug
# cd /sys/kernel/debug
# echo udp_rcv > set_graph_function
# echo function_graph > current_tracer
# cat trace

and this is what I see:

# tracer: function_graph
#
# CPU  DURATION                  FUNCTION CALLS
# |     |   |                     |   |   |   |
 1)               |  udp_rcv() {
 1)               |    __udp4_lib_rcv() {
 1)               |      __udp4_lib_lookup() {
 1)   0.584 us    |        T.757();
 1)   2.905 us    |      }
 1)               |      udp_queue_rcv_skb() {
 1)   0.584 us    |        nf_reset();
 1)   0.996 us    |        _spin_lock();
 1)               |        __udp_queue_rcv_skb() {
 1)               |          sock_queue_rcv_skb() {
 1)               |            sk_filter() {
 1)               |              security_sock_rcv_skb() {
 1)               |                selinux_socket_sock_rcv_skb() {
 1)               |                  selinux_parse_skb() {
 1)   0.584 us    |                    skb_header_pointer();
 1)   0.569 us    |                    skb_header_pointer();
 1)   3.074 us    |                  }
 1)               |                  selinux_netlbl_sock_rcv_skb() {
 1)   0.561 us    |                    netlbl_enabled();
 1)   1.748 us    |                  }
 1)   6.792 us    |                }
 1)   8.095 us    |              }
 1)               |              local_bh_disable() {
 1)   0.599 us    |                __local_bh_disable();
 1)   1.790 us    |              }
 1)               |              local_bh_enable() {
 1)               |                _local_bh_enable_ip() {
 1)   0.566 us    |                  T.445();
 1)   1.906 us    |                }
 1)   3.149 us    |              }
 1) + 15.722 us   |            }
 1)               |            skb_queue_tail() {
 1)   1.059 us    |              _spin_lock_irqsave();
 1)               |              _spin_unlock_irqrestore() {
 1)   0.596 us    |                T.263();
 1)   1.913 us    |              }
 1)   4.718 us    |            }
 1)   0.565 us    |            sock_flag();
 1)               |            sock_def_readable() {
 1)   0.981 us    |              _read_lock();
 1)               |              __wake_up_sync_key() {
 1)   0.887 us    |                _spin_lock_irqsave();
 1)               |                __wake_up_common() {
 1)               |                  pollwake() {
 1)               |                    default_wake_function() {
 1)               |                      try_to_wake_up() {
 1)               |                        task_rq_lock() {
 1)   0.951 us    |                          _spin_lock();
 1)   2.030 us    |                        }
 1)   0.768 us    |                        update_rq_clock();
 1)               |                        select_task_rq_fair() {
 1)   0.501 us    |                          effective_load();
 1)   0.494 us    |                          effective_load();

-- Steve

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/