Hi, This is the first time I've come across this: pid 11415 (ipfw), uid 0: exited on signal 11 (core dumped) The core dump landed in root's home directory in one of my jails. Has anyone seen this before? Should I be concerned? chkrootkit says nothing. (How trustworthy is its output? ;-) Thanks. Cheers. -- Ng Pheng Siong <ngps@netmemetic.com> http://firewall.rulemaker.net -+- Cisco PIX & Netscreen Config Version Control http://sandbox.rulemaker.net/ngps -+- M2Crypto, ZServerSSL for Zope, Blog
On Fri, 27 Aug 2004 08:21:00 +0800, Ng Pheng Siong <ngps@netmemetic.com> wrote:> Hi, > > This is the first time I've come across this: > > pid 11415 (ipfw), uid 0: exited on signal 11 (core dumped) > > The core dump landed in root's home directory in one of my jails. > > Has anyone seen this before? Should I be concerned? chkrootkit says > nothing. (How trustworthy is its output? ;-) >I have on a src upgrade from 4.10-RELEASE-p2 to 5.2.1. I can give no details as to the "why". -- David D.W. Downey
On Fri, Aug 27, 2004 at 06:12:28PM +1200, Andrew McNaughton wrote:> Is ipfw in your jail in sync with the kernel?It should be. Gdb'ing the core file shows a bunch of "???". Anyways, thank you and all others for your suggestions. It has happened again, and the core file registered the same time, at 3.01am. I'm conjecturing that this is caused by the periodic/security stuff in one of 500.ipfwdenied or 550.ipfwlimit. Maybe a bug in ipfw. Does this ring a bell with anyone? Thanks. Cheers. -- Ng Pheng Siong <ngps@netmemetic.com> http://firewall.rulemaker.net -+- Cisco PIX & Netscreen Config Version Control http://sandbox.rulemaker.net/ngps -+- M2Crypto, ZServerSSL for Zope, Blog