[fraser@greynet.net: Kernel crash ... debug included]

Gary Lawrence Murphy (garym@maya.dyn.ml.org)
Sun, 28 Jun 1998 16:09:15 -0400


Forwarded from a friend running an ISP server:

------- Start of forwarded message -------

Date: Sun, 28 Jun 1998 12:54:48 -0400
From: Fraser Campbell <fraser@greynet.net>
Newsgroups: comp.os.linux.development.system,comp.os.linux.help
CC: garym@greynet.net
Subject: Kernel crash ... debug included

Here is some debugging output from a kernel crash 2.0.33 -- this server
runs around the clock and has been for over 2 years. This is the first
crash I have ever seen.

Hardware Info:
Cyrix P166+, 32 MB EDO RAM, 64 SWAP, IDE drives, no exotic hardware
attached, NE2000 clone.

Anyone have any idea what caused the crash? I have attached a few
messages that occurred shortly before the crash ... did someone exploit
a remote vulnerability?

Please let me know what happened if you can tell. Thanks!
- ---------------------------------------------------------------------
Jun 27 22:03:02 www wu.ftpd[13838]: warning: can't get client address:
Connection reset by peer
Jun 27 22:03:03 www ftpd[13838]: getpeername (wu.ftpd): Transport
endpoint is not connected
Jun 27 22:03:04 www in.telnetd[13839]: warning: can't get client
address: Connection reset by peer
Jun 27 22:07:33 www wu.ftpd[13851]: warning: can't get client address:
Connection reset by peer
Jun 27 22:07:33 www ftpd[13851]: getpeername (wu.ftpd): Transport
endpoint is not connected
Jun 27 22:07:35 www in.telnetd[13852]: warning: can't get client
address: Connection reset by peer
Jun 27 22:09:08 www kernel: Warning: kfree_skb passed an skb still on a
list (from 0046f8f8).
Jun 27 22:09:08 www kernel: Unable to handle kernel paging request at
virtual address e0202020
Jun 27 22:09:08 www kernel: current->tss.cr3 = 00101000, |r3 = 00101000
Jun 27 22:09:08 www kernel: *pde = 00000000
Jun 27 22:09:08 www kernel: Oops: 0000
Jun 27 22:09:08 www kernel: CPU: 0
Jun 27 22:09:08 www kernel: EIP: 0010:[<20202020>]
Jun 27 22:09:08 www kernel: EFLAGS: 00010202
Jun 27 22:09:08 www kernel: eax: 20202020 ebx: 00d500e3 ecx:
0046f800 edx: 0046f000
Jun 27 22:09:08 www kernel: esi: 00000184 edi: 00000000 ebp:
00000000 esp: 001b1704
Jun 27 22:09:08 www kernel: ds: 0018 es: 0018 fs: 002b gs: 0018
ss: 0018
Jun 27 22:09:08 www kernel: Process swapper (pid: 0, process nr: 0,
stackpage=001af850)
Jun 27 22:09:08 www kernel: Stack: 00139623 00d500e3 00d500e3 0046f8f8
00139923 00d500e3 0046f8f8 00000000
Jun 27 22:09:08 www kernel: 00a000ae 0046f8f8 00141a65 0046f8f8
00000000 00000000 0046fb44 001b50b0
Jun 27 22:09:08 www kernel: 001d0008 0000007a 00000300 00000001
0046fb94 00000001 00000100 001d3a00
Jun 27 22:09:08 www kernel: Call Trace: [sock_wfree+35/44]
[kfree_skb+183/244] [ip_rcv+1065/1272] [net_bh+252/284]
[do_bottom_half+59/96] [handle_bottom_half+11/32] [sys_idle+92/112]
Jun 27 22:09:08 www kernel: [system_call+82/128] [init+0/616]
[SHATransform+132/6796] [start_kernel+429/440]
Jun 27 22:09:08 www kernel: Code: <1>Unable to handle kernel paging
request at virtual address e0202020
Jun 27 22:09:08 www kernel: current->tss.cr3 = 00101000, |r3 = 00101000
Jun 27 22:09:08 www kernel: *pde = 00000000
Jun 27 22:09:08 www kernel: Oops: 0000
- --
*****************************************************************
* Fraser M. Campbell - currently unemployed *
* Email: fraser@greynet.net Phone: (519) 364-6115 *
* http://www.greynet.net/fraser/ *
*****************************************************************
------- End of forwarded message -------
Gary Lawrence Murphy <garym@canada.com> ----- http://visitweb.com/~garym/
TeleDynamics http://visitweb.com/teledynamics/ RR#1 Sauble Beach, Ont CAN
telecenter design -- telework systems -- intranet/extranet consulting
"You don't play what you know; you play what you hear." ----- Miles Davis

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu