oguzyilmazlist at gmail
Feb 8, 2012, 7:49 AM
Post #1 of 1
(178 views)
Permalink
|
|
strange kernel oops panics
|
|
Hello,
I got the following kernel oops panic condition while running urlsnarf
and tshark. Both of them has the same error. I have no error with
tcpdump compiled for pf_ring. This is the strange point.
Urlsnarf and tshark, both of them are recompiled against pfring
enabled libpcap. I have also added some ldd output for checking
correct links.
I have also installed pfring enabled e1000 and e1000e drivers for my
ethernet interfaces.
Kernel is latest Centos 5.x kernel (2.6.18-274.3.1.el5.i686.rpm)
I have some doubt on the error about "section mismatch" during kernel
module compilation. However, module seems to be correctly loaded into
kernel without errors.
I have added some information below.
Need for your help.
Best Regards,
Oguz
# urlsnarf -n -i eth5
BUG: unable to handle kernel NULL pointer dereference at virtual
address 00000008
printing eip:
*pde = 36c6d001
Oops: 0002 [#1]
SMP
last sysfs file: /class/net/lo/type
Modules linked in: pf_ring(U) ipv6(U) xfrm_nalgo(U) crypto_api(U)
dm_mirror(U) dm_multipath(U) dm_mod(U) video(U) sbs(U) backlig)
CPU: 3
EIP: 0060:[<c0465365>] Tainted: G VLI
EFLAGS: 00010246 (2.6.18-999.lbr5.std.31 #1)
EIP is at vmalloc_user+0x37/0x4a
eax: 00000000 ebx: 00000000 ecx: 80000000 edx: 00000163
esi: 08000000 edi: 00004094 ebp: f75bfddc esp: f70e3f28
ds: 007b es: 007b ss: 0068
Process urlsnarf (pid: 1776, ti=f70e2000 task=f7bf3550 task.ti=f70e2000)
Stack: f7be1400 f8cdbe7d f79ae200 f7be1400 b7f62000 b7f61000 f8ceccc0 001000fb
ffffffea f79ae200 c05a582d f75bfddc c0462a0e f7abe900 f6c5ee68 00000000
00000001 00000000 00000001 00001000 b7f61000 f7ad97c8 f7ad97d0 f7ad9cd4
Call Trace:
[<f8cdbe7d>] ring_mmap+0x159/0x468 [pf_ring]
[<c05a582d>] sock_mmap+0xc/0xe
[<c0462a0e>] do_mmap_pgoff+0x448/0x6e2
[<c04092d2>] sys_mmap2+0x89/0xa3
[<c0404e95>] sysenter_past_esp+0x56/0x79
=======================
Code: ff 35 c0 64 67 c0 e8 41 fe ff ff 89 c3 b8 44 df 67 c0 e8 07 4a
1a 00 a1 a0 0b 75 c0 5a 59 eb 07 39 18 74 07 8b 40 18 85 c0
EIP: [<c0465365>] vmalloc_user+0x37/0x4a SS:ESP 0068:f70e3f28
<0>Kernel panic - not syncing: Fatal exception
<0>Rebooting in 10 seconds..
# ldd /usr/sbin/urlsnarf
linux-gate.so.1 => (0x009f8000)
libpfring.so => /usr/lib/libpfring.so (0x0053e000)
libpthread.so.0 => /lib/libpthread.so.0 (0x007ab000)
libresolv.so.2 => /lib/libresolv.so.2 (0x0098c000)
libnsl.so.1 => /lib/libnsl.so.1 (0x00971000)
libnids.so.1.24 => /usr/lib/libnids.so.1.24 (0x00d8e000)
libglib-2.0.so.0 => /lib/libglib-2.0.so.0 (0x0089d000)
libgthread-2.0.so.0 => /lib/libgthread-2.0.so.0 (0x00879000)
libpcap.so.1 => /usr/lib/libpcap.so.1 (0x00110000)
libnet.so.1 => /lib/libnet.so.1 (0x004a4000)
libc.so.6 => /lib/libc.so.6 (0x00649000)
libnl.so.1 => /lib/libnl.so.1 (0x00410000)
/lib/ld-linux.so.2 (0x00625000)
librt.so.1 => /lib/librt.so.1 (0x0080b000)
libm.so.6 => /lib/libm.so.6 (0x007c6000)
# ldd /usr/lib/libpcap.so.1.1.1
linux-gate.so.1 => (0x00a0c000)
libnl.so.1 => /lib/libnl.so.1 (0x00f89000)
libc.so.6 => /lib/libc.so.6 (0x00cce000)
libm.so.6 => /lib/libm.so.6 (0x0071f000)
/lib/ld-linux.so.2 (0x00625000)
# ldd /usr/lib/libnids.so.1.24
linux-gate.so.1 => (0x00c0d000)
libgthread-2.0.so.0 => /lib/libgthread-2.0.so.0 (0x00ef9000)
libnsl.so.1 => /lib/libnsl.so.1 (0x00ebe000)
libglib-2.0.so.0 => /lib/libglib-2.0.so.0 (0x00c2c000)
libnet.so.1 => /lib/libnet.so.1 (0x00d46000)
libpcap.so.1 => /usr/lib/libpcap.so.1 (0x0018f000)
libpthread.so.0 => /lib/libpthread.so.0 (0x00110000)
libc.so.6 => /lib/libc.so.6 (0x00307000)
librt.so.1 => /lib/librt.so.1 (0x00129000)
libnl.so.1 => /lib/libnl.so.1 (0x00905000)
/lib/ld-linux.so.2 (0x00625000)
libm.so.6 => /lib/libm.so.6 (0x00bb7000)
Kernel module errors:
$ make clean
make -C /lib/modules/2.6.18-999.lbr5.std.31/build
SUBDIRS=/home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel
clean
makmake[1]: Entering directory `/lib/modules/2.6.18-999.lbr5.std.31/build'
make[1]: warning: jobserver unavailable: using -j1. Add `+' to parent
make rule.
CLEAN /home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/.tmp_versions
emake[1]: Leaving directory `/lib/modules/2.6.18-999.lbr5.std.31/build'
\rm -f *~ Module.symvers Module.markers modules.order *#
[developer [at] oguz-deve kernel]$ make
make -C /lib/modules/2.6.18-999.lbr5.std.31/build
SUBDIRS=/home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel
EXTRA_CFLAGS='-I/home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel
-DSVN_REV="\"exported\""' modules
make[1]: Entering directory `/lib/modules/2.6.18-999.lbr5.std.31/build'
make[1]: warning: jobserver unavailable: using -j1. Add `+' to parent
make rule.
CC [M] /home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/pf_ring.o
Building modules, stage 2.
MODPOST
WARNING: vmlinux - Section mismatch: reference to
.init.text:start_kernel from .text between 'is386' (at offset
0xc0401166) and 'check_x87'
WARNING: vmlinux - Section mismatch: reference to .init.text: from
.text between 'rest_init' (at offset 0xc04012ea) and 'try_name'
WARNING: vmlinux - Section mismatch: reference to
.init.text:__alloc_bootmem from .text between 'cpu_init' (at offset
0xc040b74d) and 'c_start'
WARNING: vmlinux - Section mismatch: reference to .init.text: from
.text between 'online_page' (at offset 0xc041d493) and
'free_init_pages'
WARNING: vmlinux - Section mismatch: reference to
.init.text:__alloc_bootmem from .text between 'vgacon_startup' (at
offset 0xc04fb053) and 'vgacon_scrolldelta'
WARNING: vmlinux - Section mismatch: reference to
.init.data:logo_linux_clut224 from .text between 'fb_find_logo' (at
offset 0xc0503944) and 'cfb_fillrect'
WARNING: vmlinux - Section mismatch: reference to
.init.text:reserve_ibft_region from __ksymtab between
'__ksymtab_reserve_ibft_region' (at offset 0xc065cb18) and
'__ksymtab_ibft_addr'
WARNING: vmlinux - Section mismatch: reference to .init.text: from
.data between 'apic_bigsmp' (at offset 0xc0672704) and 'cpu.4444'
CC /home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/pf_ring.mod.o
LD [M] /home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/pf_ring.ko
make[1]: Leaving directory `/lib/modules/2.6.18-999.lbr5.std.31/build'
cd plugins; make
make[1]: Entering directory
`/home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/plugins'
make[1]: warning: jobserver unavailable: using -j1. Add `+' to parent
make rule.
make -C /lib/modules/2.6.18-999.lbr5.std.31/build
SUBDIRS=/home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/plugins
modules
make[2]: Entering directory `/lib/modules/2.6.18-999.lbr5.std.31/build'
CC [M] /home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/plugins/dummy_plugin.o
Building modules, stage 2.
MODPOST
WARNING: vmlinux - Section mismatch: reference to
.init.text:start_kernel from .text between 'is386' (at offset
0xc0401166) and 'check_x87'
WARNING: vmlinux - Section mismatch: reference to .init.text: from
.text between 'rest_init' (at offset 0xc04012ea) and 'try_name'
WARNING: vmlinux - Section mismatch: reference to
.init.text:__alloc_bootmem from .text between 'cpu_init' (at offset
0xc040b74d) and 'c_start'
WARNING: vmlinux - Section mismatch: reference to .init.text: from
.text between 'online_page' (at offset 0xc041d493) and
'free_init_pages'
WARNING: vmlinux - Section mismatch: reference to
.init.text:__alloc_bootmem from .text between 'vgacon_startup' (at
offset 0xc04fb053) and 'vgacon_scrolldelta'
WARNING: vmlinux - Section mismatch: reference to
.init.data:logo_linux_clut224 from .text between 'fb_find_logo' (at
offset 0xc0503944) and 'cfb_fillrect'
WARNING: vmlinux - Section mismatch: reference to
.init.text:reserve_ibft_region from __ksymtab between
'__ksymtab_reserve_ibft_region' (at offset 0xc065cb18) and
'__ksymtab_ibft_addr'
WARNING: vmlinux - Section mismatch: reference to .init.text: from
.data between 'apic_bigsmp' (at offset 0xc0672704) and 'cpu.4444'
WARNING: "pf_ring_add_module_dependency"
[/home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/plugins/dummy_plugin.ko]
undefined!
CC /home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/plugins/dummy_plugin.mod.o
LD [M] /home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/plugins/dummy_plugin.ko
make[2]: Leaving directory `/lib/modules/2.6.18-999.lbr5.std.31/build'
make[1]: Leaving directory
`/home/developer/rpm/src/pf_ring-5.2.1/PF_RING-5.2.1/kernel/plugins'
_______________________________________________
Ntop-misc mailing list
Ntop-misc [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
|
