If STCP is started while /proc/sys/net/sctp/auth_enable is set 0 and
association is established between endpoints. Then if
/proc/sys/net/sctp/auth_enable is set 1, a received AUTH chunk will
cause kernel panic.
Test as following:
step 1: echo 0 /proc/sys/net/sctp/auth_enable
step 2:
SCTP
On 02/04/2008 10:40 PM, Oliver Pinter wrote:
On 2/4/08, Oliver Pinter [EMAIL PROTECTED] wrote:
On 2/4/08, Jiri Slaby [EMAIL PROTECTED] wrote:
On 02/04/2008 03:00 PM, Oliver Pinter (Pintér Olivér) wrote:
[ 413.118874] wpa_supplicant[4388]: segfault at 30 ip 080697ca sp
bfc9cab0 error 4 in
If SCTP-AUTH is enabled, received AUTH chunk with BAD shared key
identifier will cause kernel panic.
Test as following:
step1: enabled /proc/sys/net/sctp/auth_enable
step 2: connect to SCTP server with auth capable. Association is
established between endpoints. Then send a AUTH chunk with a
Subject: fix fib_proc compilation error
From: Daniel Lezcano [EMAIL PROTECTED]
Fix fib_proc_[init|exit] definition when CONFIG_PROCFS=no
Signed-off-by: Daniel Lezcano [EMAIL PROTECTED]
---
include/net/ip_fib.h | 10 ++
1 file changed, 10 insertions(+)
Index:
1. Let's assume a driver which has a HW csum capability, however it has a
privilege to assign any value for ip_summed.
For example the driver assigns unnecessary for most of the packets, however
it fails to verify the packets less than 96 bytes (checksum_none).
Now, the LRO will aggregate all
Subject: fix sysctl compilation error
From: Daniel Lezcano [EMAIL PROTECTED]
Move ipv6_icmp_sysctl_init and ipv6_route_sysctl_init into
the right ifdef section otherwise that does not compile when
CONFIG_SYSCTL=yes and CONFIG_PROC_FS=no
Signed-off-by: Daniel Lezcano [EMAIL PROTECTED]
Acked-by:
On Tuesday 05 February 2008 01:01, Ben Dooks wrote:
This patch set is a series of updates for the DM9000
driver, to tidy-up some of the source, stop the accesses
to the PHY and EEPROM sitting and spinning with locks
held, and to add ethtool support.
This set includes a pair of patches from
On Tuesday 05 February 2008 09:56, Kostya B wrote:
1. Let's assume a driver which has a HW csum capability, however it has a
privilege to assign any value for ip_summed.
For example the driver assigns unnecessary for most of the packets, however
it fails to verify the packets less than 96
[(the other) Ivan took a few days holidays, so I'm replacing him for
this issue.]
Andi, you spotted it, it was really the start of an IP header, and it
shows up that these are ESP packets for a quite complicated VPN tunnel
we have (re-routing packets from an office to another, with some NAT
The line in the /proc/net/fib_trie for route with TOS specified
- has extra \n at the end
- does not have a space after route scope
like below.
|-- 1.1.1.1
/32 universe UNICASTtos =1
Signed-off-by: Denis V. Lunev [EMAIL PROTECTED]
---
net/ipv4/fib_trie.c |3 +--
1
From: Daniel Lezcano [EMAIL PROTECTED]
Date: Tue, 05 Feb 2008 10:10:05 +0100
Subject: fix sysctl compilation error
From: Daniel Lezcano [EMAIL PROTECTED]
Move ipv6_icmp_sysctl_init and ipv6_route_sysctl_init into
the right ifdef section otherwise that does not compile when
From: Rami Rosen [EMAIL PROTECTED]
Date: Sun, 3 Feb 2008 10:51:42 +0200
The 2.6 latest git build was broken when using the following
configuration options:
CONFIG_NET_EMATCH=n
CONFIG_NET_CLS_FLOW=y
with the following error:
net/sched/cls_flow.c: In function 'flow_dump':
From: Denis V. Lunev [EMAIL PROTECTED]
Date: Tue, 5 Feb 2008 12:58:56 +0300
The line in the /proc/net/fib_trie for route with TOS specified
- has extra \n at the end
- does not have a space after route scope
like below.
|-- 1.1.1.1
/32 universe UNICASTtos =1
From: Herbert Xu [EMAIL PROTECTED]
Date: Sun, 3 Feb 2008 09:22:26 +1100
On Sat, Feb 02, 2008 at 11:16:35PM +0200, Adrian Bunk wrote:
A bug every C programmer makes at some point in time...
Signed-off-by: Adrian Bunk [EMAIL PROTECTED]
Good catch!
Acked-by: Herbert Xu [EMAIL
From: Daniel Lezcano [EMAIL PROTECTED]
Date: Tue, 05 Feb 2008 10:11:54 +0100
Subject: fix fib_proc compilation error
From: Daniel Lezcano [EMAIL PROTECTED]
Fix fib_proc_[init|exit] definition when CONFIG_PROCFS=no
Signed-off-by: Daniel Lezcano [EMAIL PROTECTED]
Li Zefan already posted a
From: Pavel Emelyanov [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 11:10:37 +0300
The port offset calculations depend on the protocol family, but,
as Adrian noticed, I broke this logic with the commit
5ee31fc1ecdcbc234c8c56dcacef87c8e09909d8
[INET]: Consolidate inet(6)_hash_connect.
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:48:20 -0800
From: Dave Young [EMAIL PROTECTED]
rfcomm dev could be deleted in tty_hangup, so we must not call
rfcomm_dev_del again to prevent from destroying rfcomm dev before tty
close.
Signed-off-by: Dave Young [EMAIL PROTECTED]
Cc:
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:48:18 -0800
akpm:
No idea. trollmerge.
Cc: Arjan van de Ven [EMAIL PROTECTED]
Cc: Alan Cox [EMAIL PROTECTED]
Cc: Marcel Holtmann [EMAIL PROTECTED]
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
I'll let Marcel and/or Alan take a look
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:48:17 -0800
From: Andy Shevchenko [EMAIL PROTECTED]
This device is recognized as bluetooth, but still not works.
Signed-off-by: Andy Shevchenko [EMAIL PROTECTED]
Cc: Marcel Holtmann [EMAIL PROTECTED]
Signed-off-by: Andrew Morton [EMAIL
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:48:16 -0800
From: Adrian Bunk [EMAIL PROTECTED]
This patch fixes a double-free spotted by the Coverity checker.
Signed-off-by: Adrian Bunk [EMAIL PROTECTED]
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
Applied.
--
To unsubscribe from
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:48:16 -0800
From: Adrian Bunk [EMAIL PROTECTED]
This patch fixea a memleak spotted by the Coverity checker.
Signed-off-by: Adrian Bunk [EMAIL PROTECTED]
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
Applied, thanks.
--
To unsubscribe
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:48:15 -0800
From: Andrew Morton [EMAIL PROTECTED]
Remove all those inlines which were either a) unneeded or b) increased code
size.
textdata bss dec hex filename
before: 6997 74 870791ba7
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:48:13 -0800
From: Dave Young [EMAIL PROTECTED]
According to the bluetooth HID spec v1.0 chapter 7.4.2
This code requests a major state change in a BT-HID device. A HID_CONTROL
request does not generate a HANDSHAKE response.
A
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:45:21 -0800
From: Nathaniel Filardo [EMAIL PROTECTED]
Taken from http://bugzilla.kernel.org/show_bug.cgi?id=9806
The TUN/TAP driver only permits one-way transitions of IFF_NO_PI or
IFF_ONE_QUEUE during the lifetime of a tap/tun interface.
From: Wei Yongjun [EMAIL PROTECTED]
Date: Tue, 05 Feb 2008 17:26:37 +0900
If SCTP-AUTH is enabled, received AUTH chunk with BAD shared key
identifier will cause kernel panic.
...
Signed-off-by: Wei Yongjun [EMAIL PROTECTED]
Acked-by: Neil Horman [EMAIL PROTECTED]
Acked-by: Vlad Yasevich
From: Wei Yongjun [EMAIL PROTECTED]
Date: Tue, 05 Feb 2008 17:21:06 +0900
If STCP is started while /proc/sys/net/sctp/auth_enable is set 0 and
association is established between endpoints. Then if
/proc/sys/net/sctp/auth_enable is set 1, a received AUTH chunk will
cause kernel panic.
...
From: [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 23:45:20 -0800
From: Randy Dunlap [EMAIL PROTECTED]
hw[] is used in both init and exit functions so it cannot be initdata (section
mismatch is when CONFIG_MODULES=n and CONFIG_DMASCC=y).
WARNING: vmlinux.o(.exit.text+0xba7): Section mismatch:
From: Johann Felix Soden [EMAIL PROTECTED]
Date: Mon, 04 Feb 2008 08:31:40 +0100
From: Johann Felix Soden [EMAIL PROTECTED]
The Kconfig of igb and enc28j60 contains references to
obsolet Documentation/networking/net-modules.txt.
Signed-off-by: Johann Felix Soden [EMAIL PROTECTED]
From: Adrian Bunk [EMAIL PROTECTED]
Date: Fri, 1 Feb 2008 18:19:04 +0200
On Wed, Jan 30, 2008 at 09:04:33PM +0100, Patrick McHardy wrote:
Adrian Bunk wrote:
This patch #if 0's the following no longer used functions:
- rtattr_parse()
- rtattr_strlcpy()
- __rtattr_parse_nested_compat()
From: Stephen Hemminger [EMAIL PROTECTED]
Date: Thu, 31 Jan 2008 22:37:31 -0800
if_addrlabel.h is needed for iproute2 usage.
Signed-off-by: Stephen Hemminger [EMAIL PROTECTED]
Applied, thanks.
--
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to
From: Stephen Hemminger [EMAIL PROTECTED]
Date: Thu, 31 Jan 2008 21:07:32 -0800
Provide a way to use tc filters on vlan tag even if tag is buried in
skb due to hardware acceleration.
Signed-off-by: Stephen Hemminger [EMAIL PROTECTED]
Applied, thanks.
--
To unsubscribe from this list: send
Hi,
When CONFIG_PROC_FS is not set and CONFIG_PPPOL2TP is set,
we have the following warning in build:
drivers/net/pppol2tp.c: In function 'pppol2tp_init':
drivers/net/pppol2tp.c:2472: warning: label
'out_unregister_pppox_proto' defined but not used
This patches fixes this warning by adding
* Andrew Morton [EMAIL PROTECTED] [2008-02-04 14:04]:
but that code really needs help.
Using spin_lock_irqsave() is what rtc_get_rtc_time() does which was
used before I changed to get_rtc_time() does. So it should be ok. I
missed that difference. However, I agree with you the whole RTC
I got the following oops during interface ifup. Unfortunately its not
easily reproducable so I cant say for sure that my fix fixes this
problem, but I am confident and I think its correct anyway:
2kernel BUG at /space/kvm/drivers/virtio/virtio_ring.c:234!
4illegal operation: 0001 [#1]
Hello,
Can you help me? What can I read to solve the task:
The is Altlinux installed on the computer with Ethernet card connected
with the local network/Internet (DHCP) + WiFi USB stick.
There is notebook with Windows XP + Wi-FI PCMCIA card.
I want to connect with notebook AD-HOC: Samba,
David Miller wrote:
From: Stephen Hemminger [EMAIL PROTECTED]
Date: Thu, 31 Jan 2008 21:50:25 -0800
On Fri, 01 Feb 2008 06:34:34 +0100
Patrick McHardy [EMAIL PROTECTED] wrote:
Stephen Hemminger wrote:
Provide a way to use tc filters on vlan tag even if tag is buried in
skb due to hardware
While recevied ASCONF chunk with serial number less then needed, kernel
will treat this chunk as a retransmitted ASCONF chunk and find cached
ASCONF-ACK chunk used sctp_assoc_lookup_asconf_ack(). But this function
will always return NO-NULL. So response with cached ASCONF-ACKs chunk
will cause
[NET_SCHED]: cls_flow: support classification based on VLAN tag
Signed-off-by: Patrick McHardy [EMAIL PROTECTED]
---
commit 104092e6d90cba5fa00902a3154155872d693f42
tree 0e3fd5871a861fa022bbc2f34d314bb8672b556a
parent 03faf81b8195be455c3c7592d76d712ea9d80b13
author Patrick McHardy [EMAIL
These patches fix a compile warning in em_meta, an invalid check in
the flow classifier and add VLAN tag based classification to cls_flow.
Please apply, thanks.
include/linux/if_vlan.h |7 ---
include/linux/pkt_cls.h |1 +
net/sched/cls_flow.c| 17 +++--
[VLAN]: Constify skb argument to vlan_get_tag()
Required by next patch to use it from the flow classifier.
Signed-off-by: Patrick McHardy [EMAIL PROTECTED]
---
commit 03faf81b8195be455c3c7592d76d712ea9d80b13
tree 9da377d2bd44421494a4c4d7cf6c705d199c26ce
parent
[NET_SCHED]: em_meta: fix compile warning
net/sched/em_meta.c: In function 'meta_int_vlan_tag':
net/sched/em_meta.c:179: warning: 'tag' may be used uninitialized in this
function
Signed-off-by: Patrick McHardy [EMAIL PROTECTED]
---
commit adfab462c5e0a32274927bba4eec3afc6e35
tree
[NET_SCHED]: cls_flow: fix key mask validity check
Since we're using fls(), we need to check whether the value is non-zero first.
Signed-off-by: Patrick McHardy [EMAIL PROTECTED]
---
commit 2e5915ef51e55135522e59e041bb176432857d82
tree 9a42fac3d1646a378acdc91b55642b68c9d97dde
parent
On Mon, Feb 04, 2008 at 03:01:01PM -0800, Glenn Griffin wrote:
Add IPv6 support to TCP SYN cookies. This is written and tested against
2.6.24, and applies cleanly to linus' current HEAD (d2fc0b). Unfortunately
linus' HEAD breaks my sky2 card at the moment, so I'm unable to test against
that.
commit 94e9cba778cb97d77d9146dc3bd38ff195bc2c8a
Author: Patrick McHardy [EMAIL PROTECTED]
Date: Sat Feb 2 18:22:16 2008 +0100
[IPROUTE]: cls_flow: add vlan-tag support
Signed-off-by: Patrick McHardy [EMAIL PROTECTED]
diff --git a/include/linux/pkt_cls.h b/include/linux/pkt_cls.h
Wei Yongjun wrote:
While recevied ASCONF chunk with serial number less then needed, kernel
will treat this chunk as a retransmitted ASCONF chunk and find cached
ASCONF-ACK chunk used sctp_assoc_lookup_asconf_ack(). But this function
will always return NO-NULL. So response with cached
On Tue, Feb 05, 2008 at 03:42:13PM +, Alan Cox wrote:
Syncookies are discouraged these days. They disable too many
valuable TCP features (window scaling, SACK) and even without them
the kernel is usually strong enough to defend against syn floods
and systems have much more memory
Also your sub PC class appliances rarely run LISTEN servers anyways
that are open to the world.
Really. The ones that first come to mind often have exposed ports
including PDA devices and phones. (Ditto low end PC boxes - portscan an
EEPC some day ;))
Is the other stuff enough - good question,
On Tue, Feb 05, 2008 at 04:03:01PM +, Alan Cox wrote:
Also your sub PC class appliances rarely run LISTEN servers anyways
that are open to the world.
Really. The ones that first come to mind often have exposed ports
including PDA devices and phones. (Ditto low end PC boxes - portscan
(I let full quote here for reference, my text is on the bottom)
On Sonntag, 27. Januar 2008 Andrew Morton wrote:
(cc netdev)
On Fri, 25 Jan 2008 12:55:42 +0100 Michael Monnerie
[EMAIL PROTECTED] wrote: Dear lists,
I've been spending a LOT of time trying to find out where's the
Syncookies are discouraged these days. They disable too many
valuable TCP features (window scaling, SACK) and even without them
the kernel is usually strong enough to defend against syn floods
and systems have much more memory than they used to be.
Somewhat untrue. Network speeds have risen
What kind of LISTEN ports? And does it matter if they're DoS'ed?
I guess that depends on the opinion of the owner
- Push based mobile services
- Email delivery
- VoIP
- Management ports
- Peer to peer data transfer
- Instant messaging direct user/user connections
Some of that can also be
On Tue, 05 Feb 2008 15:26:07 +0100
Patrick McHardy [EMAIL PROTECTED] wrote:
David Miller wrote:
From: Stephen Hemminger [EMAIL PROTECTED]
Date: Thu, 31 Jan 2008 21:50:25 -0800
On Fri, 01 Feb 2008 06:34:34 +0100
Patrick McHardy [EMAIL PROTECTED] wrote:
Stephen Hemminger wrote:
Patrick McHardy wrote:
Chuck Ebbert wrote:
On 01/31/2008 01:03 PM, Chuck Ebbert wrote:
On 01/29/2008 12:18 PM, Patrick McHardy wrote:
Chuck Ebbert wrote:
nf_nat_move_storage():
/usr/src/debug/kernel-2.6.23/linux-2.6.23.i686/net/ipv4/netfilter/nf_nat_core.c:612
87: f7 47 64 80
Hi David,
akpm:
No idea. trollmerge.
Cc: Arjan van de Ven [EMAIL PROTECTED]
Cc: Alan Cox [EMAIL PROTECTED]
Cc: Marcel Holtmann [EMAIL PROTECTED]
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
I'll let Marcel and/or Alan take a look at this one.
we might have to re-work
Hi David,
From: Andy Shevchenko [EMAIL PROTECTED]
This device is recognized as bluetooth, but still not works.
Signed-off-by: Andy Shevchenko [EMAIL PROTECTED]
Cc: Marcel Holtmann [EMAIL PROTECTED]
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
Applied.
But, what driver
The commit
093af8d7f0ba3c6be1485973508584ef081e9f93
x86_32: trim memory by updating e820
broke my e1000 card: on loading driver says that
e1000: probe of :04:03.0 failed with error -5
and the interface doesn't appear.
With this commit reset everything is OK.
lspci
Acked-by: James Chapman [EMAIL PROTECTED]
Rami Rosen wrote:
Hi,
When CONFIG_PROC_FS is not set and CONFIG_PPPOL2TP is set,
we have the following warning in build:
drivers/net/pppol2tp.c: In function 'pppol2tp_init':
drivers/net/pppol2tp.c:2472: warning: label
'out_unregister_pppox_proto'
Would appreciate a status update on this submission, posted 1/15/08.
Thanks - Fred
[EMAIL PROTECTED]
-Original Message-
From: Templin, Fred L
Sent: Tuesday, January 15, 2008 11:57 AM
To: netdev@vger.kernel.org
Cc: YOSHIFUJI Hideaki / 吉藤英明
Subject: [PATCH 01/03] ISATAP V2 (header
[Added Ingo, Thomas, Justin who signed off on the patch/tested it]
Pavel Emelyanov wrote:
The commit
093af8d7f0ba3c6be1485973508584ef081e9f93
x86_32: trim memory by updating e820
broke my e1000 card: on loading driver says that
e1000: probe of :04:03.0 failed
On Tuesday 05 February 2008 09:24:17 am Kok, Auke wrote:
[Added Ingo, Thomas, Justin who signed off on the patch/tested it]
Pavel Emelyanov wrote:
The commit
093af8d7f0ba3c6be1485973508584ef081e9f93
x86_32: trim memory by updating e820
broke my e1000 card: on loading
[EMAIL PROTECTED] wrote:
From: Michael Pyne [EMAIL PROTECTED]
Partially revert a change to mac address detection introduced to the forcedeth
driver. The change was intended to correct mac address detection for newer
nVidia chipsets where the mac address was stored in reverse order. One of
Rami Rosen wrote:
Hi,
When CONFIG_PROC_FS is not set and CONFIG_PPPOL2TP is set,
we have the following warning in build:
drivers/net/pppol2tp.c: In function 'pppol2tp_init':
drivers/net/pppol2tp.c:2472: warning: label
'out_unregister_pppox_proto' defined but not used
This patches fixes
Syncookies are discouraged these days. They disable too many
valuable TCP features (window scaling, SACK) and even without them
the kernel is usually strong enough to defend against syn floods
and systems have much more memory than they used to be.
So I don't think it makes much sense to add
Stephen Rothwell wrote:
WARNING: vmlinux.o(.text+0x25dca0): Section mismatch in reference from the
function .veth_probe() to the function .init.text:.veth_probe_one()
Signed-off-by: Stephen Rothwell [EMAIL PROTECTED]
---
drivers/net/iseries_veth.c |2 +-
1 files changed, 1 insertions(+),
[EMAIL PROTECTED] wrote:
From: Byron Bradley [EMAIL PROTECTED]
The Marvell Orion system on chips have an integrated mv643xx MAC. On these
little endian ARM devices mv643xx will oops when checksum offload is
enabled. Swapping the byte order of the protocol and checksum solves this
problem.
Erik Mouw wrote:
Hi,
Changes in other networking paths uncovered a bug in the xircom_cb
driver which made the kernel spew lots of the following error messages:
BUG eth1 code -5 qlen 0
It turned out that the driver returned -EIO when there was no
descriptor available for sending packets. It
Auke Kok wrote:
From: Ayyappan Veeraiyan [EMAIL PROTECTED]
Just like our other drivers before we can switch ixgbe to
provide real-time packet/byte counters to the stack easily.
Signed-off-by: Ayyappan Veeraiyan [EMAIL PROTECTED]
Signed-off-by: Auke Kok [EMAIL PROTECTED]
---
Krzysztof Halasa wrote:
Fixes kernel panic in Frame Relay mode
Signed-off-by: Krzysztof Halasa [EMAIL PROTECTED]
applied 1-3
--
To unsubscribe from this list: send the line unsubscribe netdev in
the body of a message to [EMAIL PROTECTED]
More majordomo info at
Stephen Hemminger wrote:
The Yukon FE chip has a ram buffer therefore it needs the alignment
restriction and hang check workarounds.
Therefore:
* Autodetect the prescence/absence of ram buffer
* Rename the flag value to reflect this
* Use it consistently (ie don't reread register)
Jeff Garzik wrote:
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
NAK - this fixes one set of users, and breaks a working set of users.
Need to add DMI check for the specific motherboard (dmi_check_system),
and flip flag according to success/failure of that check.
Either that, or detect
H. Peter Anvin wrote:
Jeff Garzik wrote:
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
NAK - this fixes one set of users, and breaks a working set of users.
Need to add DMI check for the specific motherboard (dmi_check_system),
and flip flag according to success/failure of that check.
From: Johann Felix Soden [EMAIL PROTECTED]
Handle CONFIG_PROC_FS=n in net/ipv4/fib_frontend.c because:
net/ipv4/fib_frontend.c: In function 'fib_net_init':
net/ipv4/fib_frontend.c:1032: error: implicit declaration of function
'fib_proc_init'
net/ipv4/fib_frontend.c: In function 'fib_net_exit':
Andrew Morton wrote:
On Tue, 05 Feb 2008 13:20:59 -0500 Jeff Garzik [EMAIL PROTECTED] wrote:
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
NAK - this fixes one set of users, and breaks a working set of users.
Need to add DMI check for the specific motherboard (dmi_check_system),
and flip
Andrew Morton wrote:
On Tue, 05 Feb 2008 13:20:59 -0500 Jeff Garzik [EMAIL PROTECTED] wrote:
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
NAK - this fixes one set of users, and breaks a working set of users.
Need to add DMI check for the specific motherboard (dmi_check_system),
and
On Tue, Feb 05, 2008 at 10:29:28AM -0800, Glenn Griffin wrote:
Syncookies are discouraged these days. They disable too many
valuable TCP features (window scaling, SACK) and even without them
the kernel is usually strong enough to defend against syn floods
and systems have much more memory
Jeff Garzik wrote:
Ayaz Abdulla wrote:
Andrew Morton wrote:
On Tue, 05 Feb 2008 13:20:59 -0500 Jeff Garzik [EMAIL PROTECTED] wrote:
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
NAK - this fixes one set of users, and breaks a working set of users.
Need to add DMI check for the
The problem is that any reasonably recent PC can generate enough
forged SYN packets to overwhelm reasonable SYN queues on a much more
powerful server.
Have you actually seen this with a recent kernel in the wild or are
you just talking theoretically?
Linux uses some heuristics to manage the
From: David Brownell [EMAIL PROTECTED]
Prevent unaligned packet oops on enc28j60 packet RX.
Keep enc28j60 chips in low-power mode when they're not in use.
At typically 120 mA, these chips run hot even when idle. Low
power mode cuts that power usage by a factor of around 100.
Signed-off-by:
On Tue, 05 Feb 2008 13:20:59 -0500 Jeff Garzik [EMAIL PROTECTED] wrote:
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
NAK - this fixes one set of users, and breaks a working set of users.
Need to add DMI check for the specific motherboard (dmi_check_system),
and flip flag according to
Ayaz Abdulla wrote:
Andrew Morton wrote:
On Tue, 05 Feb 2008 13:20:59 -0500 Jeff Garzik [EMAIL PROTECTED] wrote:
Signed-off-by: Andrew Morton [EMAIL PROTECTED]
NAK - this fixes one set of users, and breaks a working set of users.
Need to add DMI check for the specific motherboard
On Tue, Feb 05, 2008 at 10:29:28AM -0800, Glenn Griffin wrote:
Syncookies are discouraged these days. They disable too many
valuable TCP features (window scaling, SACK) and even without them
the kernel is usually strong enough to defend against syn floods
and systems have much more memory
On Feb 5 2008 16:55, Andi Kleen wrote:
On Mon, Feb 04, 2008 at 03:01:01PM -0800, Glenn Griffin wrote:
Add IPv6 support to TCP SYN cookies. This is written and tested against
2.6.24, and applies cleanly to linus' current HEAD (d2fc0b). Unfortunately
linus' HEAD breaks my sky2 card at the
Jeff Garzik wrote:
Indeed, that would work too... though we would need to put out a call
for Gigabyte testers during 2.6.25-rc.
It is an entirely reasonable scenario for NVIDIA to deploy a fix to
Gigabyte, which would then return us to the same scenario we have today:
some work and some
Johann Felix Soden wrote:
From: Johann Felix Soden [EMAIL PROTECTED]
Handle CONFIG_PROC_FS=n in net/ipv4/fib_frontend.c because:
net/ipv4/fib_frontend.c: In function 'fib_net_init':
net/ipv4/fib_frontend.c:1032: error: implicit declaration of function
'fib_proc_init'
On Tue, Feb 05, 2008 at 09:02:11PM +0100, Andi Kleen ([EMAIL PROTECTED]) wrote:
On Tue, Feb 05, 2008 at 10:29:28AM -0800, Glenn Griffin wrote:
Syncookies are discouraged these days. They disable too many
valuable TCP features (window scaling, SACK) and even without them
the kernel is
On Tue, Feb 05, 2008 at 11:39:11PM +0300, Evgeniy Polyakov wrote:
On Tue, Feb 05, 2008 at 09:02:11PM +0100, Andi Kleen ([EMAIL PROTECTED])
wrote:
On Tue, Feb 05, 2008 at 10:29:28AM -0800, Glenn Griffin wrote:
Syncookies are discouraged these days. They disable too many
valuable TCP
No available servers is more an error message than something informational. It
should also be rate-limited, else we're going to flood our logs on a busy
director, if all real servers are out of order with a weight of zero.
Signed-off-by: Sven Wegener [EMAIL PROTECTED]
---
Actually, do we need
On Thu, 31 Jan 2008 10:14:58 +1100
Benjamin Herrenschmidt [EMAIL PROTECTED] wrote:
On Wed, 2008-01-30 at 07:16 +0100, Stefan Roese wrote:
On Wednesday 16 January 2008, Josh Boyer wrote:
On Wed, 16 Jan 2008 20:53:59 +1100
Benjamin Herrenschmidt [EMAIL PROTECTED] wrote:
On Wed,
Jeff, any chance this can get into .25 soon? I have another patch
queued up behind this one that requires it, and I don't see it in any
of your trees or branches.
Or, if you aren't opposed, I can take it through Paul's tree with your
Ack.
In case my it's fine wasn't enough, here's an:
On Tue, Feb 05, 2008 at 09:11:06PM +0100, Andi Kleen wrote:
The problem is that any reasonably recent PC can generate enough
forged SYN packets to overwhelm reasonable SYN queues on a much more
powerful server.
Have you actually seen this with a recent kernel in the wild or are
you just
How does syncookies prevent windows from growing?
Enabling them doesn't.
Most (if not all) distributions have them enabled and window growing
works just fine. Actually I do not see any reason why connection
establishment handshake should prevent any run-time operations at all,
even if it
So I don't think it makes much sense to add more code to it, sorry.
Distributions should then probably deactivate it by default.
SUSE 10.3 for example still has it enabled on default installs.
Even though I work the loyal opposition to SuSE I'd say SuSE 10.3 is
correct in having it enabled
Hi Andi, Alan,
I've run extensive tests with/without syn cookies recently.
On Tue, Feb 05, 2008 at 05:39:12PM +0100, Andi Kleen wrote:
On Tue, Feb 05, 2008 at 03:42:13PM +, Alan Cox wrote:
Syncookies are discouraged these days. They disable too many
valuable TCP features (window
This patch fixes the issue where the transmitter and receiver must be
restarted when applying new changes to certain registers.
Signed-off-by: Ayaz Abdulla [EMAIL PROTECTED]
--- old/drivers/net/forcedeth.c 2008-01-15 17:41:00.0 -0500
+++ new/drivers/net/forcedeth.c 2008-01-15
This patch supports a new fix in hardware regarding tx collisions. In
the cases where we are in autoneg mode and the link partner is in forced
mode, we need to setup the tx deferral register differently in order to
reduce collisions on the wire.
Signed-off-by: Ayaz Abdulla [EMAIL PROTECTED]
The driver needs to ack only the phy status bits that it is currently
handling and preserve the other bits for the other handlers. For
example, when reading/writing from the phy, it should not clear the link
change interrupt bit. This will cause a missing link change interrupt.
Signed-off-by:
New chipsets introduced variant Rx FIFO sizes that need to be taken into
account when setting up the tx pause watermarks. This patch introduces
the new device feature flags based on a version and implements the new
watermarks.
Signed-off-by: Ayaz Abdulla [EMAIL PROTECTED]
---
Various registers need to be preserved before resetting the device.
Signed-off-by: Ayaz Abdulla [EMAIL PROTECTED]
--- old/drivers/net/forcedeth.c 2008-01-17 16:51:40.0 -0500
+++ new/drivers/net/forcedeth.c 2008-01-20 11:56:45.0 -0500
@@ -1443,16 +1443,30 @@
{
struct
On Tue, Feb 05, 2008 at 09:53:45PM +0100, Andi Kleen ([EMAIL PROTECTED]) wrote:
How does syncookies prevent windows from growing?
Syncookies do not allow window scaling so you can't have any windows 64k
Then you meant not windows change, but the fact, that option is ignored
as long as sack
Hi Alan.
On Tue, Feb 05, 2008 at 09:20:17PM +, Alan Cox ([EMAIL PROTECTED]) wrote:
Most (if not all) distributions have them enabled and window growing
works just fine. Actually I do not see any reason why connection
establishment handshake should prevent any run-time operations at all,
1 - 100 of 127 matches
Mail list logo
