RE: 'packet of death' in 1.5-dev21.x86_64.el6_4

2014-02-07 Thread Lukas Tribus
Hi, Not a problem ... our Head of IS did a detailed write up on our investigation process and findings at his blog if you are interested: http://blog.tinola.com/?e=36 Thanks, thats really interesting and very detailed. Someone from RedHat really should take a look at this. Most likely

Re: 'packet of death' in 1.5-dev21.x86_64.el6_4

2014-02-07 Thread Ryan O'Hara
On Fri, Feb 07, 2014 at 07:23:42PM +0100, Lukas Tribus wrote: Hi, Not a problem ... our Head of IS did a detailed write up on our investigation process and findings at his blog if you are interested: http://blog.tinola.com/?e=36 Thanks, thats really interesting and very detailed.

Re: 'packet of death' in 1.5-dev21.x86_64.el6_4

2014-02-06 Thread James Hogarth
Hi, Just providing some closure to this interesting edge case... Thank you for this detailed report, this is *very* useful. As you tracked the crash to happen inside openssl, I think you should file a report to centos/redhat because it's a security issue. CentOS is bug-for-bug compatible

Re: 'packet of death' in 1.5-dev21.x86_64.el6_4

2014-02-06 Thread Willy Tarreau
Hi James, On Thu, Feb 06, 2014 at 08:36:00PM +, James Hogarth wrote: CentOS is bug-for-bug compatible (see recent libsvr2 issue there) and seeing as we don't at this time have a support contract with RH plus it it is not reproducible on the current release (the glibc in 6.5 fixes it) I

RE: 'packet of death' in 1.5-dev21.x86_64.el6_4

2014-01-30 Thread Lukas Tribus
Hi, If anyone has any thoughts or insights I'd be intrigued to hear them and if you want to reproduce and have difficulties doing so I'd be happy to help. Please provide the smallest config you can reproduce the problem with and the output of haproxy -vv. I cannot currently reproduce

Re: 'packet of death' in 1.5-dev21.x86_64.el6_4

2014-01-30 Thread James Hogarth
On 30 January 2014 22:21, Lukas Tribus luky...@hotmail.com wrote: Hi, If anyone has any thoughts or insights I'd be intrigued to hear them and if you want to reproduce and have difficulties doing so I'd be happy to help. Please provide the smallest config you can reproduce the problem

Re: 'packet of death' in 1.5-dev21.x86_64.el6_4

2014-01-30 Thread James Hogarth
On 30 January 2014 22:21, Lukas Tribus luky...@hotmail.com wrote: Please provide the smallest config you can reproduce the problem with and the output of haproxy -vv. I cannot currently reproduce this. Sorry I missed config and -vvv : [root@localhost ~]# haproxy -vvv HA-Proxy version

Re: 'packet of death' in 1.5-dev21.x86_64.el6_4

2014-01-30 Thread Willy Tarreau
Hi James, On Thu, Jan 30, 2014 at 11:20:07PM +, James Hogarth wrote: On 30 January 2014 22:21, Lukas Tribus luky...@hotmail.com wrote: Please provide the smallest config you can reproduce the problem with and the output of haproxy -vv. I cannot currently reproduce this. Sorry I