bugs in ipsec

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi,

as you can read in the tunnel thread, IPsec is causing
lots and lots and lots of problems for me. racoon 
and some "ip" command dropping dead are rather normal
than the exception, for no visible reason it stops from
time to time, only to work again with no changes at all
a few seconds later and I also had serveral solid
lock ups (sorry, no serial console, but I could
try netconsole over wlan0,if you think that is
a good idea).

some of these problems might be related to ipip?
at least it is used in my configuration, too, and
shows up in the call traces.

please let me know, how I cen help finding these
problems.

here is another example of the problems I encounter:
 racoon: INFO: isakmp.c:1688:isakmp_post_acquire(): IPsec-SA request for
192.168.1.1 queued due to no phase1 found. 
 racoon: INFO: isakmp.c:797:isakmp_ph1begin_i(): initiate new phase 1
negotiation: 192.168.3.2[500]<=>192.168.1.1[500] 
 racoon: INFO: isakmp.c:802:isakmp_ph1begin_i(): begin Aggressive mode. 
 kernel: bad: scheduling while atomic!
 kernel: Call Trace:
 kernel:  [schedule+1414/1424] schedule+0x586/0x590
 kernel:  [xfrm_tmpl_resolve+175/400] xfrm_tmpl_resolve+0xaf/0x190
 kernel:  [xfrm_lookup+963/1280] xfrm_lookup+0x3c3/0x500
 kernel:  [default_wake_function+0/32] default_wake_function+0x0/0x20
 kernel:  [default_wake_function+0/32] default_wake_function+0x0/0x20
 kernel:  [ip_route_output_key+79/96] ip_route_output_key+0x4f/0x60
 kernel:  [ipip_tunnel_xmit+467/1664] ipip_tunnel_xmit+0x1d3/0x680
 kernel:  [ip_confirm+43/48] ip_confirm+0x2b/0x30
 kernel:  [dev_queue_xmit+210/672] dev_queue_xmit+0xd2/0x2a0
 kernel:  [ip_finish_output2+224/416] ip_finish_output2+0xe0/0x1a0
 kernel:  [ip_finish_output2+0/416] ip_finish_output2+0x0/0x1a0
 kernel:  [nf_hook_slow+243/320] nf_hook_slow+0xf3/0x140
 kernel:  [ip_finish_output2+0/416] ip_finish_output2+0x0/0x1a0
 kernel:  [ip_finish_output+501/512] ip_finish_output+0x1f5/0x200
 kernel:  [ip_finish_output2+0/416] ip_finish_output2+0x0/0x1a0
 kernel:  [dst_output+20/48] dst_output+0x14/0x30
 kernel:  [nf_hook_slow+243/320] nf_hook_slow+0xf3/0x140
 kernel:  [dst_output+0/48] dst_output+0x0/0x30
 kernel:  [dst_output+0/48] dst_output+0x0/0x30
 racoon: ERROR: sockmisc.c:598:sendfromto(): sendmsg (Network is down) 
 racoon: ERROR: isakmp.c:1421:isakmp_send(): sendfromto failed 
 racoon: ERROR: pfkey.c:1625:pk_recvacquire(): failed to begin ipsec sa
negotication. 
 kernel:  [ip_queue_xmit+1197/1472] ip_queue_xmit+0x4ad/0x5c0
 kernel:  [dst_output+0/48] dst_output+0x0/0x30
 kernel:  [xfrm_policy_lookup+108/832] xfrm_policy_lookup+0x6c/0x340
 kernel:  [ip_route_output_slow+1074/2064]
ip_route_output_slow+0x432/0x810
 kernel:  [flow_cache_lookup+301/448] flow_cache_lookup+0x12d/0x1c0
 kernel:  [tcp_v4_send_check+88/256] tcp_v4_send_check+0x58/0x100
 kernel:  [tcp_transmit_skb+1043/1568] tcp_transmit_skb+0x413/0x620
 kernel:  [tcp_connect+957/1168] tcp_connect+0x3bd/0x490
 kernel:  [tcp_v4_connect+971/1664] tcp_v4_connect+0x3cb/0x680
 kernel:  [inet_stream_connect+144/448] inet_stream_connect+0x90/0x1c0
 kernel:  [sys_connect+155/208] sys_connect+0x9b/0xd0
 kernel:  [sock_map_fd+273/320] sock_map_fd+0x111/0x140
 kernel:  [sock_create+408/704] sock_create+0x198/0x2c0
 kernel:  [sys_socket+61/96] sys_socket+0x3d/0x60
 kernel:  [sys_socketcall+209/672] sys_socketcall+0xd1/0x2a0
 kernel:  [do_IRQ+250/304] do_IRQ+0xfa/0x130
 kernel:  [syscall_call+7/11] syscall_call+0x7/0xb
 kernel: 
 kernel: Dead loop on virtual device ip4sec0, fix it urgently!

Regards, Andreas

-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux