The cheese has almost slipped of my cracker (= I am getting crazy)
From: Arjen Runsink <arjen@technologist.com> Date: Fri, 1 Dec 2000 10:01:01 +0100 Message-Id: <00120110010100.00694@flaptop> Subject: The cheese has almost slipped of my cracker (= I am getting crazy) Riddle me this my good friends, My Tx-ring gets stuffed using tcp for network transmission except for SMB (Samba) transfers? At the bottom fo this message is a piece of /var/log/messages This is for a Compaq Armada 7800 wit a 3com Megahertz Cardbus 10/100, but the NIC does not seem to be the problem, I also used some other PCMCIA nicks for testing and the same happens. SuSE7.0 standard kernel, stander PCMCIA package, though I also tried the one that came with 6.2 (and recompiled that one) but still the same. I have run this machine with 2.2.14 to 2.2.17 pristine kernels without problem, but the 2.2.16.SuSE seems to be the culprit here. Is there someone (at SuSE,?) I can communicate with to get this solved because it is REALLY driving me up the wall, bonkers, nuts etc. etc. Each time I need to do some scp-ing,ssh-ing, ftp-ing, remoteX-ing It just does this within 30 sec's ! BB, Arjen the Desparate Here is a piece of my log file: (/var/log/messages is absolutely flooded with this) Nov 29 11:11:07 flaptop kernel: eth0: transmit timed out, tx_status 00 status e000. Nov 29 11:11:07 flaptop kernel: diagnostics: net 0cc2 media 8800 dma 000000a0. Nov 29 11:11:07 flaptop kernel: Flags; bus-master 1, full 1; dirty 413 current 423. Nov 29 11:11:07 flaptop kernel: Transmit list 003462e0 vs. c03462d0. Nov 29 11:11:07 flaptop kernel: 0: @c0346200 length 80000083 status 80000083 Nov 29 11:11:07 flaptop kernel: 1: @c0346210 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: 2: @c0346220 length 80000083 status 80000083 Nov 29 11:11:07 flaptop kernel: 3: @c0346230 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: 4: @c0346240 length 80000083 status 80000083 Nov 29 11:11:07 flaptop kernel: 5: @c0346250 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: 6: @c0346260 length 80000083 status 80000083 Nov 29 11:11:07 flaptop kernel: 7: @c0346270 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 8: @c0346280 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 9: @c0346290 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 10: @c03462a0 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 11: @c03462b0 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 12: @c03462c0 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 13: @c03462d0 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 14: @c03462e0 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: 15: @c03462f0 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: eth0: Resetting the Tx ring pointer. Nov 29 11:11:07 flaptop kernel: eth0: Tx Ring full, refusing to send buffer. Nov 29 11:12:02 flaptop kernel: eth0: transmit timed out, tx_status 00 status e000. Nov 29 11:12:02 flaptop kernel: diagnostics: net 0cc2 media 8800 dma 000000a0. Nov 29 11:12:02 flaptop kernel: Flags; bus-master 1, full 1; dirty 1880 current 1890. Nov 29 11:12:02 flaptop kernel: Transmit list 00346290 vs. c0346280. Nov 29 11:12:02 flaptop kernel: 0: @c0346200 length 800005ea status 800005ea Nov 29 11:12:02 flaptop kernel: 1: @c0346210 length 800005ea status 800005ea Nov 29 11:12:02 flaptop kernel: 2: @c0346220 length 800005ea status 800105ea
From: Jerry Kreps <jerrykreps@jlkreps.net> Date: Fri, 1 Dec 2000 06:20:33 -0600 Message-Id: <00120106203302.18269@JLKreps> Subject: Re: [SLE] The cheese has almost slipped of my cracker (= I am getting crazy) Do an 'ifconfig' as root and look for the word 'PROMISCUOUS" in the output. If you see it you are probably being hacked. JLK On Friday 01 December 2000 03:01, Arjen Runsink wrote:
Riddle me this my good friends,
My Tx-ring gets stuffed using tcp for network transmission except for SMB (Samba) transfers?
At the bottom fo this message is a piece of /var/log/messages
This is for a Compaq Armada 7800 wit a 3com Megahertz Cardbus 10/100, but the NIC does not seem to be the problem, I also used some other PCMCIA nicks for testing and the same happens.
SuSE7.0 standard kernel, stander PCMCIA package, though I also tried the one that came with 6.2 (and recompiled that one) but still the same.
I have run this machine with 2.2.14 to 2.2.17 pristine kernels without problem, but the 2.2.16.SuSE seems to be the culprit here. Is there someone (at SuSE,?) I can communicate with to get this solved because it is REALLY driving me up the wall, bonkers, nuts etc. etc. Each time I need to do some scp-ing,ssh-ing, ftp-ing, remoteX-ing It just does this within 30 sec's !
BB, Arjen the Desparate
Here is a piece of my log file: (/var/log/messages is absolutely flooded with this)
Nov 29 11:11:07 flaptop kernel: eth0: transmit timed out, tx_status 00 status e000. Nov 29 11:11:07 flaptop kernel: diagnostics: net 0cc2 media 8800 dma 000000a0. Nov 29 11:11:07 flaptop kernel: Flags; bus-master 1, full 1; dirty 413 current 423. Nov 29 11:11:07 flaptop kernel: Transmit list 003462e0 vs. c03462d0. Nov 29 11:11:07 flaptop kernel: 0: @c0346200 length 80000083 status 80000083 Nov 29 11:11:07 flaptop kernel: 1: @c0346210 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: 2: @c0346220 length 80000083 status 80000083 Nov 29 11:11:07 flaptop kernel: 3: @c0346230 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: 4: @c0346240 length 80000083 status 80000083 Nov 29 11:11:07 flaptop kernel: 5: @c0346250 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: 6: @c0346260 length 80000083 status 80000083 Nov 29 11:11:07 flaptop kernel: 7: @c0346270 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 8: @c0346280 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 9: @c0346290 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 10: @c03462a0 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 11: @c03462b0 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 12: @c03462c0 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 13: @c03462d0 length 800005ea status 800105ea Nov 29 11:11:07 flaptop kernel: 14: @c03462e0 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: 15: @c03462f0 length 800005ea status 800005ea Nov 29 11:11:07 flaptop kernel: eth0: Resetting the Tx ring pointer. Nov 29 11:11:07 flaptop kernel: eth0: Tx Ring full, refusing to send buffer. Nov 29 11:12:02 flaptop kernel: eth0: transmit timed out, tx_status 00 status e000. Nov 29 11:12:02 flaptop kernel: diagnostics: net 0cc2 media 8800 dma 000000a0. Nov 29 11:12:02 flaptop kernel: Flags; bus-master 1, full 1; dirty 1880 current 1890. Nov 29 11:12:02 flaptop kernel: Transmit list 00346290 vs. c0346280. Nov 29 11:12:02 flaptop kernel: 0: @c0346200 length 800005ea status 800005ea Nov 29 11:12:02 flaptop kernel: 1: @c0346210 length 800005ea status 800005ea Nov 29 11:12:02 flaptop kernel: 2: @c0346220 length 800005ea status 800105ea
-- Scientific theories, according to Sir Karl Popper, can be "falsified," or proven wrong, by experiment. Unscientific theories -Marxist dialectical history and Freudian psychology were Popper's favorites- are formed in such a way that they cannot be falsified by data.
From: Arjen Runsink <arjen@technologist.com> Date: Fri, 1 Dec 2000 15:48:16 +0100 Message-Id: <00120115481601.00699@flaptop> Subject: Re: [SLE] The cheese has almost slipped of my cracker (= I am getting crazy) On Friday 01 December 2000 13:20, Jerry Kreps wrote:
Do an 'ifconfig' as root and look for the word 'PROMISCUOUS" in the output. If you see it you are probably being hacked. JLK
On Friday 01 December 2000 03:01, Arjen Runsink wrote:
<p>The only time it is in promiscuous mode is when I run tcpdump. And that's just receiving. This started happening right after a fresh install on a clean disk of SuSE 7.0 from cd's that are made by them (You have to start trusting someone sometime if you do no have time or means to audit the source of everything yo run.) connected to a LAN where another machine is much more interesting to hack, and available for it. No, I get this error while I (me myself) send data over the network but only when I am not transferring files to ncp or smb mounted servers. Thus, all the time I use ssh or scp or ftp and so on. BB, Arjen -- Would the linux kernel get by an heuristic virusscanner?
participants (2)
-
arjen＠technologist.com -
jerrykreps＠jlkreps.net