Re: Any luck with Redhat Enterprise kernel?

M. Volkan Sonmez wrote:

> Ian S. Nelson wrote:
>
>> I'm getting panics in ip_refrag with it now.     It's stock RHEL 
>> 2.4.21-09 with ebtables-5 from 2.4.24 on it.    
>> I had to fix a couple parts of the patch to make it compile.   The 
>> rtable changed and instead of having a pmtu variable in the structure 
>> it's now referenced by:
>>
>> __fake_rtable.u.dst.metrics[ RTAX_MTU ] = 1500;
>>
>>
>> I can start up a bridge and get everything flowing nicely,  it's only 
>> when I do anything with the conntrack  module.  iptables -L -n -t nat 
>> will panic in this same spot every time if the bridge is up.
>>
>> Any ideas?
>>
>> thanks,
>> Ian
>>
>>                                                                                                                                                                       
>>                get status
>>            Unable to handle kernel NULL pointer dereference at 
>> virtual address 0000002c
>> *pde = 372e5001
>> *pte = 00000000
>> Oops: 0000
>> bridge iptable_nat ip_conntrack e100 e1000 ipt_REJECT iptable_filter 
>> ip_tables floppy sg microcode keybdev mousedev hid input usb-ohci 
>> usbcore ext3 jbd aacrai
>> CPU:    1
>> EIP:    0060:[<f89e750c>]    Not tainted
>> EFLAGS: 00010246
>>                                                                                                                                                                       
>>                EIP is at ip_refrag [ip_conntrack] 0x5c (2.4.21-lat6isn)
>> eax: f75935e0   ebx: c35c5af0   ecx: ea15c400   edx: 00000000
>> esi: f8a34de0   edi: f8a2e260   ebp: f8a2e260   esp: c35c5a60
>> ds: 0068   es: 0068   ss: 0068
>> Process swapper (pid: 0, stackpage=c35c5000)
>> Stack: 00000004 c35c5af0 00000000 f75cf00c f8a2e260 c35c5ad0 80000000 
>> c0518160
>>        c0230ec6 00000004 c35c5af0 00000000 f75cf00c f8a2e260 f75935e0 
>> 00000004
>>        f75cf00c f8a2e260 c02312b4 c0518160 c35c5af0 00000004 00000000 
>> f75cf00c
>> Call Trace:   [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 
>> (0xc35c5a70)
>> [<c0230ec6>] nf_iterate [kernel] 0x76 (0xc35c5a80)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5a94)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5aa4)
>> [<c02312b4>] nf_hook_slow [kernel] 0xa4 (0xc35c5aa8)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5ac4)
>> [<f89edf74>] ip_conntrack_out_ops [ip_conntrack] 0x0 (0xc35c5ad0)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5ae0)
>> [<f8a32a19>] br_nf_post_routing [bridge] 0x129 (0xc35c5ae4)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5afc)
>> [<c0230ec6>] nf_iterate [kernel] 0x76 (0xc35c5b08)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5b1c)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5b2c)
>> [<c02312b4>] nf_hook_slow [kernel] 0xa4 (0xc35c5b30)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5b4c)
>> [<f8a34f40>] br_nf_ops [bridge] 0x60 (0xc35c5b58)
>> [<f8a2e2f0>] br_forward_finish [bridge] 0x0 (0xc35c5b68)
>> [<f8a2e348>] br_forward_finish [bridge] 0x58 (0xc35c5b6c)
>> [<f8a2e260>] br_dev_queue_push_xmit [bridge] 0x0 (0xc35c5b84)
>> [<c0231318>] nf_hook_slow [kernel] 0x108 (0xc35c5b8c)
>> [<f8a2e2f0>] br_forward_finish [bridge] 0x0 (0xc35c5ba8)
>> [<f8a32610>] br_nf_forward_finish [bridge] 0x0 (0xc35c5bc4)
>> [<f8a3267b>] br_nf_forward_finish [bridge] 0x6b (0xc35c5bc8)
>> [<f8a2e2f0>] br_forward_finish [bridge] 0x0 (0xc35c5be0)
>> [<c0231318>] nf_hook_slow [kernel] 0x108 (0xc35c5be8)
>> [<f8a32610>] br_nf_forward_finish [bridge] 0x0 (0xc35c5c04)
>> [<f8a2e2f0>] br_forward_finish [bridge] 0x0 (0xc35c5c20)
>> [<f8a3271f>] br_nf_forward [bridge] 0x9f (0xc35c5c24)
>> [<f8a32610>] br_nf_forward_finish [bridge] 0x0 (0xc35c5c3c)
>> [<c0230ec6>] nf_iterate [kernel] 0x76 (0xc35c5c44)
>> [<f8a2e2f0>] br_forward_finish [bridge] 0x0 (0xc35c5c58)
>> [<f8a2e2f0>] br_forward_finish [bridge] 0x0 (0xc35c5c68)
>> [<c02312b4>] nf_hook_slow [kernel] 0xa4 (0xc35c5c6c)
>> [<f8a2e2f0>] br_forward_finish [bridge] 0x0 (0xc35c5c88)
>> [<f8a34f10>] br_nf_ops [bridge] 0x30 (0xc35c5c94)
>> [<f8a2e420>] __br_forward [bridge] 0x60 (0xc35c5ca8)
>> [<f8a2e2f0>] br_forward_finish [bridge] 0x0 (0xc35c5cc0)
>> [<f8a2e54e>] br_flood [bridge] 0x7e (0xc35c5cc8)
>> [<f8a2e3c0>] __br_forward [bridge] 0x0 (0xc35c5cd4)
>> [<f8a2e607>] br_flood_forward [bridge] 0x27 (0xc35c5ce8)
>> [<f8a2e3c0>] __br_forward [bridge] 0x0 (0xc35c5cf8)
>> [<f8a2f262>] br_handle_frame_finish [bridge] 0x122 (0xc35c5cfc)
>> [<f8a2f140>] br_handle_frame_finish [bridge] 0x0 (0xc35c5d18)
>> [<c0231318>] nf_hook_slow [kernel] 0x108 (0xc35c5d1c)
>> [<f8a2f140>] br_handle_frame_finish [bridge] 0x0 (0xc35c5d38)
>> [<f8a321ac>] br_nf_pre_routing_finish [bridge] 0xfc (0xc35c5d58)
>> [<f8a2f140>] br_handle_frame_finish [bridge] 0x0 (0xc35c5d70)
>> [<f8a320b0>] br_nf_pre_routing_finish [bridge] 0x0 (0xc35c5da0)
>> [<c0230ec6>] nf_iterate [kernel] 0x76 (0xc35c5da4)
>> [<f8a320b0>] br_nf_pre_routing_finish [bridge] 0x0 (0xc35c5db8)
>> [<f8a320b0>] br_nf_pre_routing_finish [bridge] 0x0 (0xc35c5dc8)
>> [<c0231318>] nf_hook_slow [kernel] 0x108 (0xc35c5dcc)
>> [<f8a320b0>] br_nf_pre_routing_finish [bridge] 0x0 (0xc35c5de8)
>> [<f8a2f140>] br_handle_frame_finish [bridge] 0x0 (0xc35c5e04)
>> [<f8a324d8>] br_nf_pre_routing [bridge] 0x208 (0xc35c5e08)
>> [<f8a320b0>] br_nf_pre_routing_finish [bridge] 0x0 (0xc35c5e20)
>> [<c0230ec6>] nf_iterate [kernel] 0x76 (0xc35c5e34)
>> [<f8a2f140>] br_handle_frame_finish [bridge] 0x0 (0xc35c5e48)
>> [<f8a2f140>] br_handle_frame_finish [bridge] 0x0 (0xc35c5e58)
>> [<c02312b4>] nf_hook_slow [kernel] 0xa4 (0xc35c5e5c)
>> [<f8a2f140>] br_handle_frame_finish [bridge] 0x0 (0xc35c5e78)
>> [<f8a34ee0>] br_nf_ops [bridge] 0x0 (0xc35c5e84)
>> [<f8a2f439>] br_handle_frame [bridge] 0x179 (0xc35c5e98)
>> [<f8a2f140>] br_handle_frame_finish [bridge] 0x0 (0xc35c5eb0)
>> [<c0228119>] netif_receive_skb [kernel] 0xe9 (0xc35c5ecc)
>> [<c022833c>] process_backlog [kernel] 0x7c (0xc35c5eec)
>> [<c0228479>] net_rx_action [kernel] 0x99 (0xc35c5f0c)
>> [<c012ec05>] do_softirq [kernel] 0xd5 (0xc35c5f34)
>> [<c010db68>] do_IRQ [kernel] 0x148 (0xc35c5f50)
>> [<c010da20>] do_IRQ [kernel] 0x0 (0xc35c5f74)
>> [<c0109100>] default_idle [kernel] 0x0 (0xc35c5f7c)
>> [<c0109100>] default_idle [kernel] 0x0 (0xc35c5f90)
>> [<c0109129>] default_idle [kernel] 0x29 (0xc35c5fa4)
>> [<c01091c2>] cpu_idle [kernel] 0x42 (0xc35c5fb0)
>> [<c01285e3>] call_console_drivers [kernel] 0x63 (0xc35c5fc4)
>> [<c0128903>] printk [kernel] 0x143 (0xc35c5ffc)
>>                                                                                                                                                                       
>>                Code: 8b 52 2c 39 50 64 77 07 ba 01 00 00 00 eb da 89 
>> 7c 24 04 8b
>>                                                                                                                                                                       
>>                Kernel panic: Fatal exception
>> In interrupt handler - not syncing
>>                                                                                                                                                                       
>>               
>>
>>
>>
>> -- 
>>
>> . . .
>> *Ian S. Nelson
>> Senior Software Engineer*
>> *StillSecure*
>>
>> 303-381-3813 Direct
>> 303-381-3881 Fax
>>
>> www.stillsecure.com <http://www.stillsecure.com>
>> /Reducing your risk has never been this easy./
>> . . .
>> /The information transmitted is intended only for the person
>> to which it is addressed and may contain confidential material.
>> Review or other use of this information by persons other than
>> the intended recipient is prohibited. If you've received
>> this in error, please contact the sender and delete
>> from any computer. /
>>
>>  
>>
>
I made some changes on bridge-nf patches.  And using it without
problem. It is at:

ftp://ftp.sdu.edu.tr/pub/Linux/patch/bridge-nf/ebtables-brnf-3_vs_2.4.21.RHEL3_mvs.diff.gz 





-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com