[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    panic, solaris 10 3/05, pfil 2.1.7, ipf 4.1.10, ipsec tun
From:       "Logan O'Sullivan Bruns" <logan () gedanken ! org>
Date:       2006-03-19 22:22:34
Message-ID: 20060319222231.GA4625 () pravda ! gedanken ! org
[Download RAW message or body]

Hi,

I have a solaris 10 box running ipf 4.1.10 with pfil 2.1.7. I use it
as firewall, router and ipsec tunnel endpoint. I have ipf configured
on one ethernet device (qfe) and two ipsec tunnels (tun). One firewall
for traffic from the internet and two firewalls for ipsec vpn traffic
to corporate lans. It used to panic very infrequently but after adding
the second ipsec tun device recently it now panics every few hours. I
suspect ipfilter because I don't recall it panicing at all before
adding the first tun firewall configuration (and because ipf, pfil and
tun are all mentioned in the panic.)

An example of the panic is included below. I guess I'm wondering- if
the panic is indeed due to ipfilter- what I might be able to do help
track down the problem?

Thanks,
  logan


Mar 19 13:34:54 dumas.gedanken.org unix: [ID 836849 kern.notice] 
Mar 19 13:34:54 dumas.gedanken.org ^Mpanic[cpu3]/thread=2a100421cc0: 
Mar 19 13:34:55 dumas.gedanken.org unix: [ID 340138 kern.notice] BAD TRAP: type=31 \
rp=2a1004201b0 addr=78 mmu_fsr=0 occurred in module "unix" due to a NULL pointer \
                dereference
Mar 19 13:34:55 dumas.gedanken.org unix: [ID 100000 kern.notice] 
Mar 19 13:34:55 dumas.gedanken.org unix: [ID 839527 kern.notice] sched: 
Mar 19 13:34:55 dumas.gedanken.org unix: [ID 520581 kern.notice] trap type = 0x31
Mar 19 13:34:56 dumas.gedanken.org unix: [ID 381800 kern.notice] addr=0x78
Mar 19 13:34:56 dumas.gedanken.org unix: [ID 101969 kern.notice] pid=0, pc=0x105a594, \
                sp=0x2a10041fa51, tstate=0x4480001602, context=0x0
Mar 19 13:34:56 dumas.gedanken.org unix: [ID 743441 kern.notice] g1-g7: 1, 0, \
                a0001f6, 181b400, fffffd5effbde33c, 10, 2a100421cc0
Mar 19 13:34:56 dumas.gedanken.org unix: [ID 100000 kern.notice] 
Mar 19 13:34:57 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a10041fed0 \
                unix:die+78 (31, 2a1004201b0, 78, 0, 2a10041ff90, 106f000)
Mar 19 13:34:57 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000001fff 0000000000000031 0000000001000000 0000000000002000
Mar 19 13:34:57 dumas.gedanken.org   %l4-7: 0000000001819318 0000000001819000 \
                00000300070bca80 00000000f05e6078
Mar 19 13:34:57 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a10041ffb0 \
                unix:trap+8f0 (2a1004201b0, 78, 0, 1, 0, 1)
Mar 19 13:34:58 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000001833840 0000000000000031 0000000000000005 0000000000000005
Mar 19 13:34:58 dumas.gedanken.org   %l4-7: 00000000f05e6078 0000000000001fff \
                0000000000000000 00000300015ce180
Mar 19 13:34:58 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420100 \
                unix:ktl0+48 (3000158cb08, 0, 18a0800, 1, 7d26192, 8)
Mar 19 13:34:58 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000003 0000000000001400 0000004480001602 0000000001013d14
Mar 19 13:34:58 dumas.gedanken.org   %l4-7: 00000000000000c0 0000000000000000 \
                0000000000000006 000002a1004201b0
Mar 19 13:34:59 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420250 \
                unix:putnext+54 (30001c19590, 0, 3000704f380, 3000158ca88, \
                30001c19590, 0)
Mar 19 13:34:59 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000008 0000000000000010 0000000000000000 0000000000000000
Mar 19 13:34:59 dumas.gedanken.org   %l4-7: 0000000000000000 0000000000000020 \
                0000000000000000 000003000158cb08
Mar 19 13:35:00 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420300 \
ipf:fr_fastroute+588 (3000704f380, 2a1004207b0, 2a100420588, 2a100420428, \
                30002c312c0, 30001c58568)
Mar 19 13:35:00 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000030001c19300 00000000701f85e0 0000000000000004 000003000704f380
Mar 19 13:35:00 dumas.gedanken.org   %l4-7: 0000030006883ab0 000003000704f398 \
                0000030002c312c0 0000030001c19590
Mar 19 13:35:01 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a1004204b0 \
                ipf:fr_send_ip+1f4 (2a100420928, 3000704f380, 2a1004207b0, 0, 14, \
                30006883ab0)
Mar 19 13:35:01 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                000002a100420588 0000030001cb7b38 0000000040000000 0000030001cb7b38
Mar 19 13:35:01 dumas.gedanken.org   %l4-7: 0000030002d237c0 000002a100420928 \
                0000000000000000 0000000000000001
Mar 19 13:35:02 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a1004206d0 \
                ipf:fr_send_icmp_err+5a0 (3, 2a100420928, b, 2a100420bd8, \
                30006883ac4, 38)
Mar 19 13:35:02 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000024 0000030006883ad2 0000030006883acc 0000030002f740b4
Mar 19 13:35:02 dumas.gedanken.org   %l4-7: 000002a100420928 000002a100420928 \
                000002a100420928 0000030006883ab0
Mar 19 13:35:02 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420800 \
                ipf:fr_check+650 (30002f740b4, 300070bca80, 4, 0, 2a100420928, \
                2a100420da0)
Mar 19 13:35:03 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000002000 00000300066dab68 0000000000003000 0000000000002000
Mar 19 13:35:03 dumas.gedanken.org   %l4-7: 000000004000a001 0000030002f740b4 \
                000002a100420928 000002a100420bd8
Mar 19 13:35:03 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420a30 \
                pfil:pfil_precheck+b80 (0, 2a100420da0, 1, 30001cb7b38, 701fa000, \
                1160ff5)
Mar 19 13:35:04 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000014 000000007bae1a78 0000000000000000 00000300070bca80
Mar 19 13:35:04 dumas.gedanken.org   %l4-7: 00000000000000e5 000000003fcc9d18 \
                00000300070bca80 0000000000000000
Mar 19 13:35:04 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420c90 \
pfil:pfilmodrput+360 (30002daaa90, 300070bca80, 2a10041c000, 1, 30002a90b90, \
                30001cb7b38)
Mar 19 13:35:05 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                00000300003d1568 0000030001cb7b38 0000000000000001 0000030001cb7b38
Mar 19 13:35:05 dumas.gedanken.org   %l4-7: 0000000000000000 00000000701fa260 \
                00000000701fa000 000000000000000f
Mar 19 13:35:05 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420db0 \
                unix:putnext+218 (30002daac80, 30002daaa90, 300070bca80, 100, \
                30002c199e0, 0)
Mar 19 13:35:06 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000000 0000000000000000 0000000000000000 0000000000004e60
Mar 19 13:35:06 dumas.gedanken.org   %l4-7: 000000000000010d 000000007016bda0 \
                000000007baafe68 fffffd5effbe4000
Mar 19 13:35:06 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420e60 \
                tun:tun_rdata_v4+42c (47853182, 300070bca80, 1, 30002c199e0, \
                30002f740b4, 0)
Mar 19 13:35:07 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000000 00000000f0000000 0000000000000004 0000030002f740a0
Mar 19 13:35:07 dumas.gedanken.org   %l4-7: 000000000000ffff 000000000000fc00 \
                0000000000000014 0000000000000006
Mar 19 13:35:07 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100420fd0 \
                tun:tun_rproc+74 (30002c199e0, 300070bca80, 2a10041c000, 30002f740a0, \
                0, 0)
Mar 19 13:35:08 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                00000300011f81c0 000000000000000f 0000000000000001 000002a100421160
Mar 19 13:35:08 dumas.gedanken.org   %l4-7: 0000000000000004 0000000000000ed5 \
                0000000000006b05 0000000000000000
Mar 19 13:35:08 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a1004210c0 \
                unix:putnext+218 (30002c19bd0, 30002c199e0, 300070bca80, 100, \
                30002dab760, 0)
Mar 19 13:35:09 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000000 0000000000000000 0000000000000000 0000000000005170
Mar 19 13:35:09 dumas.gedanken.org   %l4-7: 000000000000010d 00000000701f0a30 \
                000000007bb30ba8 fffffd5effbe4000
Mar 19 13:35:09 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100421170 \
                ip:ip_fanout_proto+6f0 (1, 30002c1b180, 30007480cc0, 30002f740a0, 1, \
                30002dab760)
Mar 19 13:35:10 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000003 0000000000000000 00000300003d1868 0000000000000021
Mar 19 13:35:10 dumas.gedanken.org   %l4-7: 0000000000000043 0000000000000007 \
                000000003fcc9d18 0000030002dab760
Mar 19 13:35:10 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100421280 \
ip:ip_proto_input+b38 (300015e82a0, 30007480cc0, 30002f740a0, 0, 300003d1868, \
                30002f740b4)
Mar 19 13:35:11 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000001 00000300003d1868 0000000000000001 0000000000000000
Mar 19 13:35:11 dumas.gedanken.org   %l4-7: 0000000000000000 0000000000000000 \
                0000000000000005 000000000a0001f6
Mar 19 13:35:11 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100421360 \
ip:ip_fanout_proto_again+384 (30007480cc0, 300003d1868, 300003d1868, 3000257c978, 3, \
                300070bca80)
Mar 19 13:35:11 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000000 0000000000000000 0000000000000000 0000030002f740a0
Mar 19 13:35:11 dumas.gedanken.org   %l4-7: 00000300016e7c28 000000003fcc9d18 \
                0000030002f74000 0000000000000000
Mar 19 13:35:12 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100421440 \
ip:ip_proto_input+afc (300015e82a0, 30007480cc0, 30002f74090, 3000257c978, \
                300003d1868, 3)
Mar 19 13:35:12 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                00000000018a0dc0 00000300003d1868 0000000000000000 0000000000000001
Mar 19 13:35:12 dumas.gedanken.org   %l4-7: 0000000000000000 0000000000000000 \
                00000300016e7c28 00000300070bca80
Mar 19 13:35:13 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100421520 \
                ip:ip_rput+760 (0, 30000000, 0, 300003d1868, 0, 0)
Mar 19 13:35:13 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000070038800 0000000000000118 000000007003bbf8 0000000000000000
Mar 19 13:35:13 dumas.gedanken.org   %l4-7: 000003000257c978 0000000000000000 \
                0000000000000004 000003000257c978
Mar 19 13:35:14 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100421620 \
                unix:putnext+218 (300015e8490, 300015e82a0, 300070bca80, 100, \
                300015e8530, 0)
Mar 19 13:35:14 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000000 0000000000000000 0000000000000000 00000000000056d0
Mar 19 13:35:14 dumas.gedanken.org   %l4-7: 000000000000010d 000000007001ac20 \
                00000000012cf0f4 fffffd5effbe4000
Mar 19 13:35:15 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a1004216d0 \
                pfil:pfilmodrput+470 (300015e8530, 300070bca80, 2a10041c000, 1, 9410, \
                30001cb7ed8)
Mar 19 13:35:15 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000000 00000300070bca80 ffffffffffffffff 0000030001cb7ed8
Mar 19 13:35:15 dumas.gedanken.org   %l4-7: 00000000018a7800 0000000000000001 \
                0000000020000043 0000000000000000
Mar 19 13:35:15 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a1004217f0 \
                unix:putnext+218 (300015e8720, 300015e8530, 300070bca80, 100, \
                30001cd5210, 0)
Mar 19 13:35:16 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000000000 0000000000000000 0000000000000000 00000000000058a0
Mar 19 13:35:16 dumas.gedanken.org   %l4-7: 000000000000010d 000000007016bda0 \
                000000007baafe68 fffffd5effbe4000
Mar 19 13:35:16 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a1004218a0 \
                qfe:qferead_dvma+324 (30002f74090, 8, 30001cd5210, 800, 54b0, 54b0)
Mar 19 13:35:17 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                00000300070bca80 0000000000000008 0000000000005400 000003000160b040
Mar 19 13:35:17 dumas.gedanken.org   %l4-7: 0000000000000000 0000030002f74082 \
                0000000000004aa7 00000000006d5134
Mar 19 13:35:17 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100421970 \
                qfe:qfe_intr+178 (30001f32000, 80000000, 30001e5ad38, 1267e70, 5400, \
                0)
Mar 19 13:35:18 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                0000000000010000 0000000000005550 0000000000005508 0000000000000000
Mar 19 13:35:18 dumas.gedanken.org   %l4-7: 0000000000000000 0000030001f32428 \
                00000000fffefc00 00000000000054c8
Mar 19 13:35:18 dumas.gedanken.org genunix: [ID 723222 kern.notice] 000002a100421a20 \
                pcipsy:pci_intr_wrapper+9c (300000ecfc8, 300000ef0e8, 0, 0, 0, \
                30001c64bb0)
Mar 19 13:35:19 dumas.gedanken.org genunix: [ID 179002 kern.notice]   %l0-3: \
                00000000018c93e0 000003000010d540 00000000018c9428 0000030001b4b520
Mar 19 13:35:19 dumas.gedanken.org   %l4-7: 0000030001b4b550 0000030001f32000 \
                00000300003c3410 000000007baa0380
Mar 19 13:35:19 dumas.gedanken.org unix: [ID 100000 kern.notice] 
Mar 19 13:35:19 dumas.gedanken.org genunix: [ID 672855 kern.notice] syncing file \
systems...


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic