I keep getting these crashes in solaris 9. ipf-4.1.8 pfil-2.1.6. ( crash info is below the ruleset ) There are 4 interfaces on the box ( sun v240 ), 3 have pfil modules attached and a simple set of rules for each. Machine is pretty heavy loaded, running isc bind, isc dhcp and ldap.
# stopped using these while troubleshooting. # #block in log quick all with short #block in log all with ipopts # # # block in on bge0 all block in on bge2 all block in on bge3 all # # Allow local # pass in quick on lo0 all pass out quick on lo0 all # # Allow outgoing traffic # pass out quick on bge0 proto tcp/udp from any to any keep state pass out quick on bge0 proto icmp from any to any pass out quick on bge2 proto tcp/udp from any to any keep state pass out quick on bge2 proto icmp from any to any pass out quick on bge3 proto tcp/udp from any to any keep state pass out quick on bge3 proto icmp from any to any # # # this is for dhcp. # does the standard "out any to any" allow broadcasts as well ? # pass out quick on bge2 proto udp from 139.97.1.106 to 255.255.255.255 # # ## pass in quick on bge0 proto tcp from 217.254.116.226 to 139.97.1.101 pass in quick on bge0 proto tcp/udp from 139.97.1.0/24 to 139.97.1.101 pass in quick on bge0 proto tcp/udp from 139.97.4.0/24 to 139.97.1.101 pass in quick on bge0 proto tcp/udp from 139.97.5.0/24 to 139.97.1.101 pass in quick on bge0 proto icmp from 139.97.5.80 to 139.97.1.101 pass in quick on bge0 proto icmp from 139.97.4.0/24 to 139.97.1.101 pass in quick on bge0 proto icmp from 139.97.1.0/24 to 139.97.1.101 # # more dhcp # pass in quick on bge2 proto udp from 0.0.0.0 to 255.255.255.255 keep state # pass in quick on bge2 proto udp from 139.97.0.0/16 to 139.97.1.106 port=67 keep state pass in quick on bge2 proto tcp/udp from 139.97.1.104 to 139.97.1.106 keep state pass in quick on bge2 proto icmp from 139.97.5.80 to 139.97.1.106 pass in quick on bge2 proto icmp from 139.97.4.95 to 139.97.1.106 # # pass in quick on bge3 proto tcp/udp from any to 139.97.1.6 port=53 keep state pass in quick on bge3 proto tcp/udp from any to 139.97.1.124 port=1053 keep state pass in quick on bge3 proto tcp/udp from 139.97.1.4 to 139.97.1.6 keep state pass in quick on bge3 proto icmp from 139.97.4.0/24 to 139.97.1.6 pass in quick on bge3 proto icmp from 139.97.1.0/24 to 139.97.1.6 pass in quick on bge3 proto tcp/udp from 139.97.0.0/16 to 139.97.1.6 port=123 keep state ----------------------------- May 2 05:10:27 sun1 unix: [ID 340138 kern.notice] BAD TRAP: type=31 rp=2a1006e44a0 addr=0 mmu_fsr=0 occurred in module "unix" due to a NULL pointer dereference May 2 05:10:27 sun1 unix: [ID 100000 kern.notice] May 2 05:10:27 sun1 unix: [ID 839527 kern.notice] named: May 2 05:10:27 sun1 unix: [ID 520581 kern.notice] trap type = 0x31 May 2 05:10:27 sun1 unix: [ID 101969 kern.notice] pid=148, pc=0x10361a4, sp=0x2a1006e3d41, tstate=0x9980001605, context=0x1825 May 2 05:10:28 sun1 unix: [ID 743441 kern.notice] g1-g7: ffffffffffffffca, 1, 1388, 0, 300011199ec, 0, 300011eb280 May 2 05:10:28 sun1 unix: [ID 100000 kern.notice] May 2 05:10:28 sun1 genunix: [ID 723222 kern.notice] 000002a1006e41d0 unix:die+80 (31, 2a1006e44a0, 0, 0, d5df0800, 3000149ded8) May 2 05:10:28 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000000 0000000001413808 000002a1006e44a0 000002a1006e4398 May 2 05:10:28 sun1 %l4-7: 0000000000000031 000002a1006e58d0 00000000014d6c00 00000000014d6c00 May 2 05:10:28 sun1 genunix: [ID 723222 kern.notice] 000002a1006e42b0 unix:trap+874 (2a1006e44a0, 0, 10000, 10200, 0, 26000100) May 2 05:10:28 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000001 0000000000000000 00000300012ca010 0000000000000031 May 2 05:10:28 sun1 %l4-7: 0000000000000005 0000000000000001 0000000000000000 0000000000000000 May 2 05:10:28 sun1 genunix: [ID 723222 kern.notice] 000002a1006e43f0 unix:ktl0+48 (0, 300011eb280, 6, ffff, 8162017c, 300011199ec) May 2 05:10:28 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000006 0000000000001400 0000009980001605 000000000102cd2c May 2 05:10:28 sun1 %l4-7: 0000000000000000 0000000000000000 0000000000000000 000002a1006e44a0 May 2 05:10:28 sun1 genunix: [ID 723222 kern.notice] 000002a1006e4540 ipf:fr_movequeue+30 (300051ea290, 0, 780da898, 0, 300011199ec, 0) May 2 05:10:28 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000000 0000000000000002 0000000000000000 00000300051ea1d8 May 2 05:10:28 sun1 %l4-7: 00000300051ea190 00000300051ea190 0000030005e51308 000000000000041d May 2 05:10:29 sun1 genunix: [ID 723222 kern.notice] 000002a1006e4610 ipf:fr_updatestate+5c (2a1006e48f8, 300051ea190, 780da898, 2a1006e495c, 300051ea290, 1) May 2 05:10:29 sun1 genunix: [ID 179002 kern.notice] %l0-3: 00000000780da898 00000300051ea190 0000000000000000 00000300051ea190 May 2 05:10:29 sun1 %l4-7: 000003000491a000 000000005396dc33 000002a1006e4900 0000000000000000 May 2 05:10:29 sun1 genunix: [ID 723222 kern.notice] 000002a1006e4700 ipf:fr_checkstate+32c (2a1006e48f8, 2a1006e48e0, 40004502, 3, 300031cac98, 300051ea190) May 2 05:10:29 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000000 0000000000000011 0000000000000013 0000000000000001 May 2 05:10:29 sun1 %l4-7: 000002a1006e48f8 0000000000002800 00000000014df334 00000300011199ec May 2 05:10:29 sun1 genunix: [ID 723222 kern.notice] 000002a1006e47f0 ipf:fr_check+5e4 (300011199d8, 30006331280, 0, 1, 2a1006e48f8, 2a1006e4d40) May 2 05:10:29 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000000 000002a1006e48f8 0000000040000000 00000000780db220 May 2 05:10:29 sun1 %l4-7: 000000000000001c 0000030006331280 000000000000001c 0000000000000004 May 2 05:10:29 sun1 genunix: [ID 723222 kern.notice] 000002a1006e4a00 pfil:pfil_precheck+d28 (e, 30006331280, 2, 3000149ded8, 0, 300011199d8) May 2 05:10:29 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000014 00000000780ad558 0000000000000000 0000030006331280 May 2 05:10:29 sun1 %l4-7: 0000000000000052 00000300063312a0 0000000000000052 0000000000000000 May 2 05:10:30 sun1 genunix: [ID 723222 kern.notice] 000002a1006e4c50 pfil:pfilmodwput+17c (3000111f058, 30006331280, 20, 300011199ec, d5df0800, 3000149ded8) May 2 05:10:30 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000030000070a30 000003000149ded8 0000000000000001 000003000111f058 May 2 05:10:30 sun1 %l4-7: 000003000049fdc8 000002a1006e58d0 00000000014d6c00 00000000014d6c00 May 2 05:10:30 sun1 genunix: [ID 723222 kern.notice] 000002a1006e4d50 unix:putnext+21c (0, 30006331280, ffffffffffffffff, 0, 1ff040dc70000, 26000100) May 2 05:10:30 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000078083bc0 000003000111f148 000003000111f058 0000000000000000 May 2 05:10:30 sun1 %l4-7: 0000000000000000 000000007805dab0 0000030001437d38 0000030006331280 May 2 05:10:30 sun1 genunix: [ID 723222 kern.notice] 000002a1006e4e00 ip:ip_wput_ire+acc (10000, 30000070a30, 6, ffff, 8162017c, 30006331280) May 2 05:10:30 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000030006330c80 0000000000000008 0000030005e51308 00000300011199d8 May 2 05:10:30 sun1 %l4-7: 0000000000000000 0000000000000000 0000030001437d38 000000000000000e May 2 05:10:30 sun1 genunix: [ID 723222 kern.notice] 000002a1006e4ff0 ip:ip_wput+4d4 (0, 0, d234d654, 300011199d8, 0, 1ae7e19) May 2 05:10:30 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000030006331280 0000000000000000 00000000d234d654 00000000014ae000 May 2 05:10:30 sun1 %l4-7: 0000030003143090 00000300028d5250 0000030005e51308 00000300028d5260 May 2 05:10:31 sun1 genunix: [ID 723222 kern.notice] 000002a1006e50a0 unix:putnext+21c (0, 30001117f80, 20, 0, 0, ff0ef87c) May 2 05:10:31 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000001212038 000003000111bef8 0000030003143090 0000000000000000 May 2 05:10:31 sun1 %l4-7: 0000030001117f88 00000000014ae5d8 0000030003143ad0 0000030006331280 May 2 05:10:31 sun1 genunix: [ID 723222 kern.notice] 000002a1006e5150 udp:udp_wput+5b0 (3e, 14, 3e, 300011199ec, 300011199d8, ff0ef87c) May 2 05:10:31 sun1 genunix: [ID 179002 kern.notice] %l0-3: 00000000d234d654 0000030006331280 000000000000ffff 0000000000000035 May 2 05:10:31 sun1 %l4-7: 0000030003143ad0 000003000b991100 00000000014df334 000003000266c558 May 2 05:10:31 sun1 genunix: [ID 723222 kern.notice] 000002a1006e5220 unix:putnext+21c (0, 3000b991100, 20, 30006331280, 0, 98) May 2 05:10:31 sun1 genunix: [ID 179002 kern.notice] %l0-3: 00000000012ebfa0 0000030003143bc0 0000030003143ad0 0000000000000000 May 2 05:10:31 sun1 %l4-7: 0000000000000000 00000000014dd958 0000030003143320 000003000b991100 May 2 05:10:31 sun1 genunix: [ID 723222 kern.notice] 000002a1006e52d0 genunix:strput+270 (300031148e0, 0, 0, 2a1006e5598, 0, 0) May 2 05:10:31 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000004 0000030003143320 0000000000000000 00000300031148e0 May 2 05:10:31 sun1 %l4-7: 000003000b991100 000002a1006e58d0 0000000000000000 0000000000000000 May 2 05:10:32 sun1 genunix: [ID 723222 kern.notice] 000002a1006e54c0 genunix:kstrputmsg+36c (30001456c80, 30003143320, 0, 0, 0, 0) May 2 05:10:32 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000030003114960 000003000644a900 00000300031148e0 0000000000000004 May 2 05:10:32 sun1 %l4-7: 0000000000000083 000002a1006e58d0 0000000000000000 000003000644a900 May 2 05:10:32 sun1 genunix: [ID 723222 kern.notice] 000002a1006e55a0 sockfs:sosend_dgram+25c (0, 300043e0aa0, 10, 2a1006e58d0, 8, 1a20e80) May 2 05:10:32 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000010 000000000144f800 0000000000000036 0000030001456c80 May 2 05:10:32 sun1 %l4-7: 000003000644a900 00000000000003c0 0000000000000000 0000000000000000 May 2 05:10:32 sun1 genunix: [ID 723222 kern.notice] 000002a1006e5690 sockfs:sosendmsg+3f4 (0, 300043e0aa0, 7, 20, 39ced8, 1a20e80) May 2 05:10:32 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000010 0000000000000008 00000300043e0aa0 0000000000000000 May 2 05:10:32 sun1 %l4-7: 0000030001456c80 000002a1006e5a80 000002a1006e58d0 0000000000000000 May 2 05:10:32 sun1 genunix: [ID 723222 kern.notice] 000002a1006e5750 sockfs:sendit+15c (2a1006e58d0, 8, 30001456c80, 8, 2a1006e5900, 1ae7e19) May 2 05:10:32 sun1 genunix: [ID 179002 kern.notice] %l0-3: 00000300043e0aa0 0000000000000000 0000000000000000 0000000000000000 May 2 05:10:32 sun1 %l4-7: 00000300011e8e08 0000000000000018 0000000000000036 000002a1006e5a80 May 2 05:10:33 sun1 genunix: [ID 723222 kern.notice] 000002a1006e5820 sockfs:sendmsg+2e8 (18, ff0ef864, 0, 0, ff0ef880, ff0ef87c) May 2 05:10:33 sun1 genunix: [ID 179002 kern.notice] %l0-3: 0000000000000001 0000000000000008 00000000004205e8 0000000000100000 May 2 05:10:33 sun1 %l4-7: 0000000000008000 000000000140f7f0 0000000000100000 0000000000000584
