On Tue, Sep 15, 2015 at 09:55:16AM +0200, Markus Gaugusch wrote:
Hi,
I'm running a firewall with shorewall-4.6.3.4 (SuSE package) on openSUSE 13.2. Since about a week I receive lots and lots of messages like these:
Sep 15 09:37:32 proxy kernel: bsalg: parser failed Sep 15 09:37:33 proxy kernel: bsalg: parser failed Sep 15 09:37:33 proxy kernel: bsalg: parser failed Sep 15 09:37:35 proxy kernel: net_ratelimit: 2 callbacks suppressed
Last Kernel update was on August 18th, kernel-default 3.16.7-24.1. But the messages did not start immediately after this update. Shorewall is the original version included in the distribution.
This comes from net/ipv4/netfilter/nf_nat_snmp_basic.c and happens if SNMP requests can not be correctly NATed. Open a bug agaisnt the kernel. If possible, try to capture this SNMP network traffic that causes this problem. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org