Looks like there might be a size limitation on the list so I'll split this into a few posts?
-----Original Message----- From: Olmsted, Brian Sent: Friday, April 22, 2005 4:21 AM To: '[email protected]' Subject: FW: IP Filter 4.1.8 Kernel Panic HELP!!!! This didn't seem to get to the list... -----Original Message----- From: Olmsted, Brian Sent: Friday, April 22, 2005 2:55 AM To: 'Rob MacGregor'; [email protected] Cc: Olmsted, Brian Subject: RE: IP Filter 4.1.8 Kernel Panic HELP!!!! OK, I can do that... sorry this is long. I have hidden some of the public IP space to protect the innocent. I have since reverted to non-ippool configuration in my ruleset and rebooted to see if it is more stable but I have included the IP Pool Configuration I was using and the ipf.conf that related to it at the bottom. The problem occurs on both IPF 4.1.3 and IPF 4.1.8 so I don't need to include the details from both systems here as it is too long and redundant... system crashes at the same point. I've including some of the things from the FAQ that I noticed... I'm trying to find out why the dump is not going to /var/crash/hostname I suspect this is due to the dumpadm.conf file being manually changed so I'm trying to fix that. [EMAIL PROTECTED] ipf -V ipf: IP Filter: v4.1.3 (592) Kernel: IP Filter: v4.1.3 Running: yes Log Flags: 0 = none set Default: block all, Logging: available Active list: 1 Feature mask: 0x1cf [EMAIL PROTECTED] uname -a SunOS netlog1 5.8 Generic_117350-20 sun4u sparc SUNW,Sun-Fire-V210 [EMAIL PROTECTED] isainfo -vk 64-bit sparcv9 kernel modules [EMAIL PROTECTED] ifconfig -a lo0: flags=1000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4> mtu 8232 index 3 inet 127.0.0.1 netmask ff000000 bge0: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 4 inet AAA.BBB.CCC.9 netmask ffffff80 broadcast AAA.BBB.CCC.127 ether 0:3:ba:46:11:4d bge1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 5 inet 10.206.6.9 netmask ffffff00 broadcast 10.206.6.255 ether 0:3:ba:46:11:4e lo0: flags=2000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6> mtu 8252 index 3 inet6 ::1/128 bge0: flags=2000841<UP,RUNNING,MULTICAST,IPv6> mtu 1500 index 4 ether 0:3:ba:46:11:4d inet6 fe80::203:baff:fe46:114d/10 bge1: flags=2000841<UP,RUNNING,MULTICAST,IPv6> mtu 1500 index 5 ether 0:3:ba:46:11:4e inet6 fe80::203:baff:fe46:114e/10 [EMAIL PROTECTED] [EMAIL PROTECTED] netstat -rn Routing Table: IPv4 Destination Gateway Flags Ref Use Interface -------------------- -------------------- ----- ----- ------ --------- 10.207.3.128 10.206.6.1 UG 1 0 AAA.BBB.CCC.0 AAA.BBB.CCC.9 U 1 1 bge0 10.20.30.0 10.206.6.1 UG 1 0 10.1.10.0 10.206.6.1 UG 1 0 192.168.233.0 10.206.6.1 UG 1 3 10.206.6.0 10.206.6.9 U 1 85 bge1 10.206.6.0 10.206.6.1 UG 1 0 10.1.9.0 10.206.6.1 UG 1 0 159.18.15.0 10.206.6.1 UG 1 0 10.1.201.0 10.206.6.1 UG 1 0 10.1.169.0 10.206.6.1 UG 1 0 10.207.7.0 10.206.6.1 UG 1 0 10.1.8.0 10.206.6.1 UG 1 0 10.207.6.0 10.206.6.1 UG 1 14 10.206.7.0 10.206.6.1 UG 1 0 10.1.111.0 10.206.6.1 UG 1 0 10.1.193.0 10.206.6.1 UG 1 0 10.1.7.0 10.206.6.1 UG 1 0 10.206.8.0 10.206.6.1 UG 1 0 10.207.9.0 10.206.6.1 UG 1 43 10.207.8.0 10.206.6.1 UG 1 0 10.206.9.0 10.206.6.1 UG 1 50 10.206.10.0 10.206.6.1 UG 1 0 10.207.11.0 10.206.6.1 UG 1 0 10.207.10.0 10.206.6.1 UG 1 0 10.206.11.0 10.206.6.1 UG 1 0 10.1.123.0 10.206.6.1 UG 1 0 10.1.185.0 10.206.6.1 UG 1 0 10.1.121.0 10.206.6.1 UG 1 0 192.168.250.0 10.206.6.1 UG 1 0 10.1.184.0 10.206.6.1 UG 1 0 10.1.248.0 10.206.6.1 UG 1 0 10.1.60.0 10.206.6.1 UG 1 0 10.1.147.0 10.206.6.1 UG 1 0 10.18.64.0 10.206.6.1 UG 1 0 10.207.31.0 10.206.6.1 UG 1 4 10.206.31.0 10.206.6.1 UG 1 0 10.1.112.0 10.206.6.1 UG 1 0 159.18.19.0 10.206.6.1 UG 1 0 159.18.18.0 10.206.6.1 UG 1 0 224.0.0.0 10.206.6.9 U 1 0 bge1 default AAA.BBB.CCC.1 UG 1 8 127.0.0.1 127.0.0.1 UH 1 4 lo0 Routing Table: IPv6 Destination/Mask Gateway Flags Ref Use If --------------------------- --------------------------- ----- --- ------ ----- fe80::/10 fe80::203:baff:fe46:114e U 1 0 bge1 fe80::/10 fe80::203:baff:fe46:114d U 1 0 bge0 ff00::/8 fe80::203:baff:fe46:114d U 1 0 bge0 ::1 ::1 UH 1 0 lo0 [EMAIL PROTECTED] netstat -i Name Mtu Net/Dest Address Ipkts Ierrs Opkts Oerrs Collis Queue lo0 8232 loopback localhost 4 0 4 0 0 0 bge0 1500 netlog1 netlog1 182660 0 26 0 0 0 bge1 1500 netlog1 netlog1 167593 0 42008 0 0 0 Name Mtu Net/Dest Address Ipkts Ierrs Opkts Oerrs Collis lo0 8252 localhost localhost 4 0 4 0 0 bge0 1500 fe80::203:baff:fe46:114d/10 fe80::203:baff:fe46:114d 182660 0 26 0 0 bge1 1500 fe80::203:baff:fe46:114e/10 fe80::203:baff:fe46:114e 167593 0 42012 0 0 [EMAIL PROTECTED] netstat -s -P ip IPv4 ipForwarding = 2 ipDefaultTTL = 255 ipInReceives =353281 ipInHdrErrors = 0 ipInAddrErrors = 0 ipInCksumErrs = 0 ipForwDatagrams = 0 ipForwProhibits = 0 ipInUnknownProtos = 0 ipInDiscards = 0 ipInDelivers =345874 ipOutRequests = 5791 ipOutDiscards = 0 ipOutNoRoutes = 216 ipReasmTimeout = 60 ipReasmReqds = 61 ipReasmOKs = 61 ipReasmFails = 0 ipReasmDuplicates = 0 ipReasmPartDups = 0 ipFragOKs = 2279 ipFragFails = 0 ipFragCreates = 38850 ipRoutingDiscards = 0 tcpInErrs = 0 udpNoPorts = 6163 udpInCksumErrs = 0 udpInOverflows = 0 rawipInOverflows = 0 ipsecInSucceeded = 0 ipsecInFailed = 0 ipInIPv6 = 0 ipOutIPv6 = 0 ipOutSwitchIPv6 = 2 [EMAIL PROTECTED] ipfstat bad packets: in 0 out 0 IPv6 packets: in 0 out 0 input packets: blocked 126 passed 352915 nomatch 46 counted 0 short 0 output packets: blocked 9 passed 42905 nomatch 0 counted 0 short 0 input packets logged: blocked 0 passed 3 output packets logged: blocked 0 passed 0 packets logged: input 0 output 0 log failures: input 0 output 0 fragment state(in): kept 0 lost 0 not fragmented 0 fragment state(out): kept 0 lost 0 not fragmented 0 packet state(in): kept 1569 lost 0 packet state(out): kept 340 lost 9 ICMP replies: 0 TCP RSTs sent: 0 Invalid source(in): 0 Result cache hits(in): 80 (out): 6 IN Pullups succeeded: 0 failed: 0 OUT Pullups succeeded: 36 failed: 0 Fastroute successes: 0 failures: 0 TCP cksum fails(in): 0 (out): 0 IPF Ticks: 3485 Packet log flags set: (0) none [EMAIL PROTECTED]
