Dear list, I got problems with a proxy server for a small LAN. The server crashes very often, I've read the logs, but can't find a hint about how to change the server configuration. The following services are running on the machine: -sshd ( PublicKeyAuthentication ) -apache -tomcat J2EE Engine -pdnsd ( DNS Daemon ) -socks4 -socks5 Can anyone tell me which logs to check? Here's an excerpt from messages: Apr 12 20:13:00 linux pppd[3435]: sent [LCP EchoReq id=0x99 magic=0x133d167d] Apr 12 20:13:00 linux pppd[3435]: rcvd [LCP EchoRep id=0x99 magic=0x73cb21e2] Apr 12 20:21:48 linux syslogd 1.4.1: restart. Apr 12 20:21:53 linux ddclient[352]: SUCCESS: updating XXX.XXXXXX.xom: good: IP address set to 217.235.77.3 Apr 12 20:21:53 linux kernel: klogd 1.4.1, log source = /proc/kmsg started. Apr 12 20:21:53 linux kernel: Inspecting /boot/System.map-2.4.10-4GB Apr 12 20:21:55 linux /usr/sbin/cron[461]: (CRON) STARTUP (fork ok) Apr 12 20:21:55 linux kernel: Loaded 11713 symbols from /boot/System.map-2.4.10-4GB. Apr 12 20:21:55 linux kernel: Symbols match kernel version 2.4.10. Apr 12 20:21:55 linux kernel: Loaded 270 symbols from 9 modules. Apr 12 20:21:55 linux kernel: ne2k-pci.c:v1.02 10/19/2000 D. Becker/P. Gortmaker Apr 12 20:21:55 linux kernel: http://www.scyld.com/network/ne2k-pci.html Apr 12 20:21:55 linux kernel: eth0: RealTek RTL-8029 found at 0xef80, IRQ 12, 00:40:95:41:61:EB. Apr 12 20:21:55 linux kernel: 8139too Fast Ethernet driver 0.9.18a Apr 12 20:21:55 linux kernel: eth1: RealTek RTL8139 Fast Ethernet at 0xc4814f00, 00:30:84:3d:7d:f8, IRQ 5 Apr 12 20:21:55 linux kernel: eth1: Identified 8139 chip type 'RTL-8139C' Apr 12 20:21:55 linux kernel: eth1: Setting half-duplex based on auto-negotiated partner ability 0000. Apr 12 20:21:55 linux kernel: CSLIP: code copyright 1989 Regents of the University of California Apr 12 20:21:55 linux kernel: PPP generic driver version 2.4.1 Apr 12 20:21:55 linux kernel: IPv6 v0.8 for NET4.0 Apr 12 20:21:55 linux kernel: IPv6 over IPv4 tunneling driver Apr 12 20:22:02 linux pppd[214]: sent [LCP EchoReq id=0x1 magic=0xba891d2] Apr 12 20:22:02 linux pppd[214]: rcvd [LCP EchoRep id=0x1 magic=0x6e7cdfb8] Apr 12 20:22:05 linux kernel: eth0: no IPv6 routers present Apr 12 20:22:05 linux kernel: eth1: no IPv6 routers present Apr 12 20:22:22 linux pppd[214]: sent [LCP EchoReq id=0x2 magic=0xba891d2] Apr 12 20:22:22 linux pppd[214]: rcvd [LCP EchoRep id=0x2 magic=0x6e7cdfb8] Apr 12 20:22:42 linux pppd[214]: sent [LCP EchoReq id=0x3 magic=0xba891d2] Apr 12 20:22:42 linux pppd[214]: rcvd [LCP EchoRep id=0x3 magic=0x6e7cdfb8] Apr 12 20:22:42 linux pdnsd[572]: pdnsd-1.1.7a starting. Apr 12 20:22:46 linux ssockd[588]: starting... Apr 12 20:22:47 linux ssockd[589]: bound to iface 192.168.1.1, port 1080 In the warn file, I got a number of kernel asserts like these Apr 8 12:20:10 linux kernel: KERNEL: assertion (flags&MSG_PEEK) failed at tcp.c(1463):tcp_recvmsg Apr 8 12:20:10 linux kernel: KERNEL: assertion (tp->copied_seq == tp->rcv_nxt || (flags&(MSG_PEEK|MSG_TRUNC))) failed at tcp.c(1520):tcp_recvmsg Apr 9 01:55:06 linux pppd[4317]: tcflush failed: Input/output error Apr 9 01:55:12 linux pppd[4337]: PAP authentication failed the last time it crashed, I found the following entries in the warn log: Apr 12 20:13:07 linux pppd[3435]: Child process /usr/sbin/pppoe -p /var/run/pppoe.conf-adsl.pid.pppoe -I eth1 -T 80 -U -m 1412 (pid 3436) terminated with signal 11 Apr 12 20:13:07 linux kernel: Unable to handle kernel paging request at virtual address d2bb0318 Apr 12 20:13:07 linux kernel: printing eip: Apr 12 20:13:07 linux kernel: c012cc0a Apr 12 20:13:07 linux kernel: *pde = 00000000 Apr 12 20:21:55 linux kernel: eth0: RealTek RTL-8029 found at 0xef80, IRQ 12, 00:40:95:41:61:EB. last log thing is: Apr 13 00:15:29 linux su: (to nobody) root on none Apr 13 00:15:29 linux PAM-unix2[1215]: session started for user nobody, service su Apr 13 00:15:49 linux pppd[214]: sent [LCP EchoReq id=0xbe magic=0xba891d2] Apr 13 00:15:49 linux pppd[214]: rcvd [LCP EchoRep id=0xbe magic=0x6e7cdfb8] Apr 13 00:16:09 linux pppd[214]: sent [LCP EchoReq id=0xbf magic=0xba891d2] Apr 13 00:16:09 linux pppd[214]: rcvd [LCP EchoRep id=0xbf magic=0x6e7cdfb8] Apr 13 00:16:21 linux PAM-unix2[1215]: session finished for user nobody, service su in messages. what does this mean? Nobody was working at this time! thanks in advance Andreas --_OPERAB__-x0s3yvauQ3lmYTFVC3nEYO--
Hi Andreas, the nobody-entry in the log means, that some regular tasks where performed. In order to be more secure it is common to perform as many tasks a possible with an unprivileged account. The least account of these is nobody, so this is used in your case. That's probably not the reason for your system-crash. Run last to find out, how long the system was up, then try to find something in the log files, that corresponds to the crash-time. I'd look into /var/log/messages first, if there's nothing then check the other logs. Best regards, Ralf
last log thing is: Apr 13 00:15:29 linux su: (to nobody) root on none Apr 13 00:15:29 linux PAM-unix2[1215]: session started for user nobody, service su Apr 13 00:15:49 linux pppd[214]: sent [LCP EchoReq id=0xbe magic=0xba891d2] Apr 13 00:15:49 linux pppd[214]: rcvd [LCP EchoRep id=0xbe magic=0x6e7cdfb8] Apr 13 00:16:09 linux pppd[214]: sent [LCP EchoReq id=0xbf magic=0xba891d2] Apr 13 00:16:09 linux pppd[214]: rcvd [LCP EchoRep id=0xbf magic=0x6e7cdfb8] Apr 13 00:16:21 linux PAM-unix2[1215]: session finished for user nobody, service su
in messages. what does this mean? Nobody was working at this time!
thanks in advance
Andreas --_OPERAB__-x0s3yvauQ3lmYTFVC3nEYO--
Hi, * On Sat, Apr 13, 2002 at 01:36 PM (+0200), Andreas.Novak@student.fh-nuernberg.de wrote:
I got problems with a proxy server for a small LAN.
At first I would suggest to use a more recent version of the linux kernel. 2.4.10 seems to be quite old - and, for example, as far as I know even the virtual memory management was rewritten around this release.
Here's an excerpt from messages: Apr 12 20:13:00 linux pppd[3435]: sent [LCP EchoReq id=0x99 magic=0x133d167d] Apr 12 20:13:00 linux pppd[3435]: rcvd [LCP EchoRep id=0x99 magic=0x73cb21e2]
These messages are quite normal if you use an PPPoE connection (e.g. "T-DSL"). Your machine is testing whether the remote machine (ADSL Access Concentrator) is still alive. You can suppress these messages with unsetting the option "debug" in "/etc/ppp/options".
Apr 9 01:55:06 linux pppd[4317]: tcflush failed: Input/output error
I get messages like this whenever I close my PPPoE connection, so I think that is not the problem.
Apr 9 01:55:12 linux pppd[4337]: PAP authentication failed
This can also be a authentication problem at you ISP's site (if you haven't changed your username or password).
the last time it crashed, I found the following entries in the warn log:
Apr 12 20:13:07 linux pppd[3435]: Child process /usr/sbin/pppoe -p /var/run/pppoe.conf-adsl.pid.pppoe -I eth1 -T 80 -U -m 1412 (pid 3436) terminated with signal 11
So this "signal 11" should not happen.
Apr 12 20:13:07 linux kernel: Unable to handle kernel paging request at virtual address d2bb0318 Apr 12 20:13:07 linux kernel: printing eip: Apr 12 20:13:07 linux kernel: c012cc0a Apr 12 20:13:07 linux kernel: *pde = 00000000
I think you should use a more recent version of the linux kernel. You can also try another PPPoE daemon or to disable the usage of the PPPoE kernel module... Of course, the "segmentation fault" can also be caused by bad memory or by any other hardware failure, so you might check this, too. HTH! Bye, Steffen
participants (3)
-
Andreas.Novak@student.fh-nuernberg.de
-
Ralf Ronneburger
-
Steffen Moser