search for: nf_iter

...68 c04d4020 80000000 c0359b4d c030d562 00000000 c0475e9c defee000 00000000 c0359b4d 00000000 00000000 c0475e9c Call Trace: [<c0345127>] ip_nat_in+0x29/0x88 [<c0359b4d>] br_nf_pre_routing_finish+0x0/0x2c0 [<c0359b4d>] br_nf_pre_routing_finish+0x0/0x2c0 [<c030d562>] nf_iterate+0x3f/0x6d [<c0359b4d>] br_nf_pre_routing_finish+0x0/0x2c0 [<c030d5d7>] nf_hook_slow+0x47/0xba [<c0359b4d>] br_nf_pre_routing_finish+0x0/0x2c0 [<c035685b>] br_handle_frame_finish+0x0/0xca [<c035a446>] br_nf_pre_routing+0x35d/0x37a [<c035685b>] br_handle_f...

...] __qdisc_run+0xbe/0x280 [<c04dd4b9>] dev_queue_xmit+0x379/0x380 [<c05bbe44>] br_dev_queue_push_xmit+0xa4/0x140 [<c05c2402>] br_nf_post_routing+0x102/0x1d0 [<c05c22b0>] br_nf_dev_queue_xmit+0x0/0x50 [<c05bbda0>] br_dev_queue_push_xmit+0x0/0x140 [<c04f0eab>] nf_iterate+0x6b/0xa0 [<c05bbda0>] br_dev_queue_push_xmit+0x0/0x140 [<c05bbda0>] br_dev_queue_push_xmit+0x0/0x140 [<c04f0f4e>] nf_hook_slow+0x6e/0x120 [<c05bbda0>] br_dev_queue_push_xmit+0x0/0x140 [<c05bbf40>] br_forward_finish+0x60/0x70 [<c05bbda0>] br_dev_queue_pu...

...uct net_device *indev, struct net_device *outdev, int (*okfn)(struct sk_buff *), int thresh); --- linux-2.6.11-rc3/net/core/netfilter.c.old 2005-02-12 13:48:06.000000000 +0100 +++ linux-2.6.11-rc3/net/core/netfilter.c 2005-02-12 16:16:03.000000000 +0100 @@ -349,6 +349,8 @@ static unsigned int nf_iterate(struct li int (*okfn)(struct sk_buff *), int hook_thresh) { + unsigned int verdict; + /* * The caller must not block between calls to this * function because of risk of continuing from deleted element. @@ -361,28 +363,18 @@ static unsigned int nf_iterate(struct li...

On Fri, 07 Jan 2005 17:05:59 +0000 David Woodhouse <dwmw2@infradead.org> wrote: > On Sat, 2004-12-18 at 08:50 +0100, Andi Kleen wrote: > > It's not really an oops, just a warning that stack space got quiet > > tight. > > > > The problem seems to be that the br netfilter code is nesting far too > > deeply and recursing several times. Looks like a design

...a91f2f0a c034727a 00000000 c044fe30 f7287800 00000000 c035d274 c044fdfc Call Trace: [<c03470c7>] ip_nat_fn+0x7b/0x1e4 [<c034727a>] ip_nat_in+0x4a/0xc1 [<c035d274>] br_nf_pre_routing_finish+0x0/0x34e [<c035d274>] br_nf_pre_routing_finish+0x0/0x34e [<c0302017>] nf_iterate+0x6f/0x87 [<c035d274>] br_nf_pre_routing_finish+0x0/0x34e [<c035d274>] br_nf_pre_routing_finish+0x0/0x34e [<c030209a>] nf_hook_slow+0x6b/0x102 [<c035d274>] br_nf_pre_routing_finish+0x0/0x34e [<c035958e>] br_handle_frame_finish+0x0/0x109 [<c035db86>] br_n...

...f4a34>] ? br_handle_frame_finish+0x144/0x2a0 [bridge] [<ffffffffa04fa938>] ? br_nf_pre_routing_finish+0x238/0x350 [bridge] [<ffffffffa04faedb>] ? br_nf_pre_routing+0x48b/0x7b0 [bridge] [<ffffffff8143ba57>] ? __kfree_skb+0x47/0xa0 [<ffffffff814734f9>] ? nf_iterate+0x69/0xb0 [<ffffffffa04f48f0>] ? br_handle_frame_finish+0x0/0x2a0 [bridge] [<ffffffff814736b6>] ? nf_hook_slow+0x76/0x120 [<ffffffffa04f48f0>] ? br_handle_frame_finish+0x0/0x2a0 [bridge] [<ffffffffa04f4d1c>] ? br_handle_frame+0x18c/0x250 [bridge]...

...idge] [<c9168a30>] br_handle_frame_finish+0x0/0x130 [bridge] [<c0145899>] kmem_cache_alloc+0x69/0x70 [<c916d132>] br_nf_pre_routing+0x1b2/0x480 [bridge] [<c9168990>] br_pass_frame_up_finish+0x0/0x20 [bridge] [<c029631e>] nf_hook_slow+0x6e/0x100 [<c0296018>] nf_iterate+0x78/0x90 [<c9168a30>] br_handle_frame_finish+0x0/0x130 [bridge] [<c9168a30>] br_handle_frame_finish+0x0/0x130 [bridge] [<c029631e>] nf_hook_slow+0x6e/0x100 [<c9168a30>] br_handle_frame_finish+0x0/0x130 [bridge] [<c9168d59>] br_handle_frame+0x1f9/0x270 [bridge]...

...ffff880010ba3918] ipt_snat_target at ffffffffa02a611f #10 [ffff880010ba3928] ipt_do_table at ffffffffa029e16a #11 [ffff880010ba3ab8] nf_nat_rule_find at ffffffffa02a61d4 #12 [ffff880010ba3ad8] nf_nat_fn at ffffffffa02a6469 #13 [ffff880010ba3b28] nf_nat_out at ffffffffa02a6638 #14 [ffff880010ba3b48] nf_iterate at ffffffff812fd45c #15 [ffff880010ba3b98] nf_hook_slow at ffffffff812fd514 #16 [ffff880010ba3c08] ip_output at ffffffff8130b6f3 #17 [ffff880010ba3c38] ip_forward_finish at ffffffff81306cde #18 [ffff880010ba3c58] ip_forward at ffffffff81306ede #19 [ffff880010ba3c98] ip_rcv_finish at ffffffff8130...

...446] [<ffffffffa0395200>] ? br_nf_pre_routing_finish_bridge+0x60/0xd0 [bridge] [ 5445.372671] [<ffffffffa0396808>] br_nf_pre_routing_finish+0x328/0x360 [bridge] [ 5445.385984] [<ffffffffa0396b96>] br_nf_pre_routing+0x356/0x370 [bridge] [ 5445.393255] [<ffffffff815165d5>] nf_iterate+0x85/0xc0 [ 5445.400827] [<ffffffffa038ffd0>] ? br_handle_local_finish+0x50/0x50 [bridge] [ 5445.408643] [<ffffffff81516686>] nf_hook_slow+0x76/0x130 [ 5445.416438] [<ffffffffa038ffd0>] ? br_hanlde_local_finish+0x50/0x50 [bridge] [ 5445.424202] [<ffffffffa0390424>] br...

...ata will rise a "BUG_ON" in the kernel. - the skb_buff is not always possible to modify. (vnet_forward.c and etherip.c) The code now work''s.. I think with no or less time-penalty. Info for kernel-option CONFIG_BRIDGE_NETFILTER : There is a race-condition in the code (nf_iterate), which will kill the kernel. With hyperthreading and vnet over 2 Server a scp will kill it in less 1 (one) second. Blocking hyperthreading the same will work less then 30 seconds. Dropping the bridge- netfilter code, no error''s in 3 hours.... Signed-off-by: Robert Valentan <R.Vale...

...pid: 0, threadinfo ffffffff80364000, task ffffffff802bd6a0) Stack: ffffffff8803b560 0000000000000000 0000000000000000 ffff88003fa00000 000000010e01bed0 ffffffff80315620 ffffffff88020814 0000000000000000 ffff88003fa00000 ffffffff8801ebc0 Call Trace: <IRQ> <ffffffff8023ccd7>{nf_iterate+63} <ffffffff880339be>{:ip_conntrack:tcp_pkt_to_tuple+0} <ffffffff8024218b>{ip_local_deliver_finish+0} <ffffffff8023cdfd> {nf_hook_slow+90} <ffffffff8024218b>{ip_local_deliver_finish+0} <ffffffff802423ce> {ip_local_deliver+103} <ffffff...

...465/0x4b0 [<c02618c6>] ip6_rcv_finish+0x16/0x30 [<ce81a056>] nf_ct_frag6_output+0x86/0xb0 [nf_conntrack_ipv6] [<c02618b0>] ip6_rcv_finish+0x0/0x30 [<ce81911b>] ipv6_defrag+0x3b/0x50 [nf_conntrack_ipv6] [<c02618b0>] ip6_rcv_finish+0x0/0x30 [<c022c618>] nf_iterate+0x38/0x70 [<c02618b0>] ip6_rcv_finish+0x0/0x30 [<c022c75d>] nf_hook_slow+0x4d/0xc0 [<c02618b0>] ip6_rcv_finish+0x0/0x30 [<c0261ac0>] ipv6_rcv+0x1e0/0x250 [<c02618b0>] ip6_rcv_finish+0x0/0x30 [<c0217068>] netif_receive_skb+0x1a8/0x200 [<c021868...

...gt;edx; c030ef00 <state+37e0/a020> >>ebp; c72dcba0 <_end+6fc6428/8528888> >>esp; c02cbd74 <init_task_union+1d74/2000> Trace; c01f79f1 <ipt_do_table+241/38c> Trace; c01cfc5c <ip_forward_finish+0/54> Trace; c01f9841 <ipt_hook+21/28> Trace; c01c8228 <nf_iterate+30/84> Trace; c01cfc5c <ip_forward_finish+0/54> Trace; c01cfc5c <ip_forward_finish+0/54> Trace; c01c84dd <nf_hook_slow+b5/144> Trace; c01cfc5c <ip_forward_finish+0/54> Trace; c01cfc06 <ip_forward+196/1ec> Trace; c01cfc5c <ip_forward_finish+0/54> Trace; c01c...

...#5 [ffff88002c303a28] get_unique_tuple at ffffffffa1491beb [nf_nat] #6 [ffff88002c303a58] nf_nat_setup_info at ffffffffa1491de9 [nf_nat] #7 [ffff88002c303b38] alloc_null_binding at ffffffffa149e162 [iptable_nat] #8 [ffff88002c303b78] nf_nat_fn at ffffffffa149e519 [iptable_nat] #9 [ffff88002c303bb8] nf_iterate at ffffffff81318d18 #10 [ffff88002c303bf8] nf_hook_slow at ffffffff81318db2 #11 [ffff88002c303c58] ip_local_deliver at ffffffff813214a1 #12 [ffff88002c303c78] ip_rcv_finish at ffffffff81320a59 #13 [ffff88002c303cb8] netif_receive_skb at ffffffff812f5f89 #14 [ffff88002c303d28] ixgbe_clean_rx_irq...

...10542399.791847] [<ffffffffa1491de9>] nf_nat_setup_info+0x99/0x350 [nf_nat] [10542399.798697] [<ffffffffa149e162>] alloc_null_binding+0x52/0x90 [iptable_nat] [10542399.805977] [<ffffffffa149e519>] nf_nat_fn+0x1e9/0x280 [iptable_nat] [10542399.812654] [<ffffffff81318d18>] nf_iterate+0x68/0xa0 [10542399.818031] [<ffffffff81318db2>] nf_hook_slow+0x62/0xf0 [10542399.823582] [<ffffffff813214a1>] ip_local_deliver+0x51/0x80 [10542399.829477] [<ffffffff81320a59>] ip_rcv_finish+0x1b9/0x440 [10542399.835288] [<ffffffff812f5f89>] netif_receive_skb+0x599/0x...

...ff8828fa7a>] :bridge:br_handle_frame_finish+0xc4/0xf6 <Aug/28 12:21 pm> [<ffffffff88292e57>] :bridge:br_nf_pre_routing_finish_ipv6+0xd f/0xe3 <Aug/28 12:21 pm> [<ffffffff882935e6>] :bridge:br_nf_pre_routing+0x39b/0x667 <Aug/28 12:21 pm> [<ffffffff803ad73c>] nf_iterate+0x52/0x79 <Aug/28 12:21 pm> [<ffffffff8828f9b6>] :bridge:br_handle_frame_finish+0x0/0xf6 <Aug/28 12:21 pm> [<ffffffff803ad7d6>] nf_hook_slow+0x73/0xea <Aug/28 12:21 pm> [<ffffffff8828f9b6>] :bridge:br_handle_frame_finish+0x0/0xf6 <Aug/28 12:21 pm> [&lt...

...8 12:19:26 server kernel: [br_forward_finish+61/65] br_forward_finish+0x3d/0x41 Dec 8 12:19:26 server kernel: [br_nf_forward_finish+199/204] br_nf_forward_finish+0xc7/0xcc Dec 8 12:19:26 server kernel: [br_nf_forward_arp+274/285] br_nf_forward_arp+0x112/0x11d Dec 8 12:19:26 server kernel: [nf_iterate+63/109] nf_iterate+0x3f/0x6d Dec 8 12:19:26 server kernel: [br_forward_finish+0/65] br_forward_finish+0x0/0x41 Dec 8 12:19:26 server kernel: [nf_hook_slow+71/193] nf_hook_slow+0x47/0xc1 Dec 8 12:19:26 server kernel: [br_forward_finish+0/65] br_forward_finish+0x0/0x41 Dec 8 12:19:26 server...

https://bugzilla.netfilter.org/show_bug.cgi?id=852 Summary: IPv6 TEE target sends packets to original IP address on wrong network device Product: netfilter/iptables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: enhancement Priority: P5 Component: unknown

https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=22 laforge@netfilter.org changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bowles@ambisys.com Component|unknown |ip_tables (kernel) OS/Version|other

...b60 0000000080397db8 0000000000000001 ffff88000290d840 ffff88000a93d380 ffffffff8014bd98 0000000000000000 ffff88000c02ef30 ffffffff8013000e ffffffff80355f6c Call Trace:<ffffffff8014bd98>{mempool_alloc+152} <ffffffff8013000e>{proc_opensys+30} <ffffffff80355f6c>{nf_iterate+92} <ffffffff80397a50>{br_nf_pre_routing_finish+0} <ffffffff80356b4d>{nf_hook_slow+125} <ffffffff80397a50>{br_nf_pre_routing_finish+0} <ffffffff803984d1>{br_nf_pre_routing+1793} <ffffffff8014bceb>{mempool_free+171} <ffffffff80355f6c>{nf_it...