FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Debian > Debian Kernel

 
 
LinkBack Thread Tools
 
Old 11-22-2009, 07:45 AM
Alex Samad
 
Default Bug#557448: linux-image-2.6.31-1-amd64: net.ipv4.conf.all.secure_redirects not working

Package: linux-2.6
Version: 2.6.31-2
Severity: normal

Hi

I have a local lan network
192.168.11.0/24 dgw - 192.168.11.1

I also have a wireless network
192.168.10.0/24 dgw - 192.168.10.1

the router at 192.168.10.1 is a linux server with the address 192.168.11.10 as well.

I have placed a ip route add/replace 192.168.10.0/24 via 192.168.11.10 on 192.168.11.1 this send the appropiate icmp redirects for 192.168.10.0/24 via 192.168.11.10

what seems to be failing is this scenario.

laptop connected to 192.168.11.0/24 (ip via dhcp) with
net.ipv4.conf.all.accept_redirects = 0
net.ipv4.conf.all.secure_redirects = 1

All the other interface redirects set to 1

with another linux machine (alex-mini) on the wireless (192.168.10.0/24 - ip via dhcp), I try and ssh to laptop - which fails.

When I look at the tcpdump on laptop I see the packets coming in but laptop is trying to send the packets via 192.168.11.1, it doesn't seem to acknowledge the icmp redirects even though I have secure_redirects set to 1 and 192.168.11.1 is the default gateway..

when I set net.ipv4.conf.all.accept_redirects to 1 everything works fine, the icmp redirect is accepted....

this seems to be contry to the documenation in sysctl.conf , which says these flags are OR

Alex


-- Package-specific info:
** Version:
Linux version 2.6.31-1-amd64 (Debian 2.6.31-2) (ben@decadent.org.uk) (gcc version 4.3.4 (Debian 4.3.4-6) ) #1 SMP Mon Nov 16 04:44:38 UTC 2009

** Command line:
BOOT_IMAGE=/vmlinuz-2.6.31-1-amd64 root=UUID=f0b97f9e-1483-4764-bd56-d321a42de30b ro quiet

** Tainted: P (1)
* Proprietary module has been loaded.

** Kernel log:
[ 18.656321] sysctl net.netfilter.nf_conntrack_acct=1 to enable it.
[ 18.921469] ip6_tables: (C) 2000-2006 Netfilter Core Team
[ 19.430416] r8169: eth1: link up
[ 19.430422] r8169: eth1: link up
[ 19.678609] r8169: eth0: link up
[ 19.678618] r8169: eth0: link up
[ 19.681986] ADDRCONF(NETDEV_UP): eth2: link is not ready
[ 19.684488] ADDRCONF(NETDEV_UP): eth3: link is not ready
[ 19.717614] Bridge firewalling registered
[ 19.721071] device eth0 entered promiscuous mode
[ 19.723618] device eth2 entered promiscuous mode
[ 19.726307] device eth3 entered promiscuous mode
[ 19.727732] br0: port 1(eth0) entering learning state
[ 34.724008] br0: port 1(eth0) entering forwarding state
[ 35.705179] powernow-k8: Found 1 AMD Phenom(tm) II X4 945 Processor processors (4 cpu cores) (version 2.20.00)
[ 35.705215] powernow-k8: 0 : pstate 0 (3000 MHz)
[ 35.705217] powernow-k8: 1 : pstate 1 (2300 MHz)
[ 35.705218] powernow-k8: 2 : pstate 2 (1800 MHz)
[ 35.705219] powernow-k8: 3 : pstate 3 (800 MHz)
[ 53.660882] lp0: using parport0 (interrupt-driven).
[ 53.668471] ppdev: user-space parallel port driver
[ 73.743443] warning: `jsvc' uses 32-bit capabilities (legacy support in use)
[ 74.405449] RPC: Registered udp transport module.
[ 74.405457] RPC: Registered tcp transport module.
[ 74.606950] Installing knfsd (copyright (C) 1996 okir@monad.swb.de).
[ 74.833354] svc: failed to register lockdv1 RPC service (errno 97).
[ 74.835947] NFSD: Using /var/lib/nfs/v4recovery as the NFSv4 state recovery directory
[ 74.886996] NFSD: starting 90-second grace period
[ 77.630445] nvidia: module license 'NVIDIA' taints kernel.
[ 77.630454] Disabling lock debugging due to kernel taint
[ 77.892039] nvidia 0000:01:00.0: PCI INT A -> GSI 18 (level, low) -> IRQ 18
[ 77.892089] nvidia 0000:01:00.0: setting latency timer to 64
[ 77.893150] NVRM: loading NVIDIA UNIX x86_64 Kernel Module 190.42 Tue Oct 20 20:25:42 PDT 2009
[ 86.076377] xfce4-settings-[5207]: segfault at 1 ip 0000000000406acb sp 00007fff7784be70 error 4 in xfce4-settings-helper[400000+a000]
[ 86.135653] xfce4-settings-[5209]: segfault at 1 ip 0000000000406acb sp 00007fff10e88800 error 4 in xfce4-settings-helper[400000+a000]
[ 258.680468] Intel AES-NI instructions are not detected.
[ 258.724491] padlock: VIA PadLock not detected.
[ 258.772524] padlock: VIA PadLock Hash Engine not detected.
[ 259.071662] EXT4-fs (dm-27): barriers enabled
[ 259.086847] kjournald2 starting: pid 6326, dev dm-27:8, commit interval 5 seconds
[ 259.114048] EXT4-fs (dm-27): internal journal on dm-27:8
[ 259.114052] EXT4-fs (dm-27): delayed allocation enabled
[ 259.114054] EXT4-fs: file extents enabled
[ 259.172902] EXT4-fs: mballoc enabled
[ 259.172919] EXT4-fs (dm-27): mounted filesystem with ordered data mode
[ 259.298416] EXT4-fs (dm-26): barriers enabled
[ 259.303782] kjournald2 starting: pid 6333, dev dm-26:8, commit interval 5 seconds
[ 259.312974] EXT4-fs (dm-26): internal journal on dm-26:8
[ 259.312985] EXT4-fs (dm-26): delayed allocation enabled
[ 259.312993] EXT4-fs: file extents enabled
[ 259.336332] EXT4-fs: mballoc enabled
[ 259.336344] EXT4-fs (dm-26): mounted filesystem with ordered data mode
[ 6603.814713] vboxdrv: Trying to deactivate the NMI watchdog permanently...
[ 6603.814722] vboxdrv: Warning: 2.6.31+ kernel detected. Most likely the hwardware performance
[ 6603.814727] vboxdrv: counter framework which can generate NMIs is active. You have to prevent
[ 6603.814731] vboxdrv: the usage of hardware performance counters by
[ 6603.814734] vboxdrv: echo 2 > /proc/sys/kernel/perf_counter_paranoid
[ 6603.814744] vboxdrv: Found 4 processor cores.
[ 6603.814836] VBoxDrv: dbg - g_abExecMemory=ffffffffa0f42160
[ 6603.814948] vboxdrv: fAsync=0 offMin=0xb7c offMax=0x9436
[ 6603.815039] vboxdrv: TSC mode is 'synchronous', kernel timer mode is 'normal'.
[ 6603.815045] vboxdrv: Successfully loaded version 3.0.12 (interface 0x00110000).
[ 6604.030243] VBoxNetFlt: dbg - g_abExecMemory=ffffffffa10e16e0
[ 6604.036266] VBoxNetAdp: dbg - g_abExecMemory=ffffffffa10fae80
[26866.545521] spamd[4782]: segfault at 809b000 ip 00007fe11b58b780 sp 00007fff79b77f18 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[28461.575915] TCP: Peer 93.96.43.222:27593/42461 unexpectedly shrunk window 555465051:555465593 (repaired)
[28463.757563] TCP: Peer 93.96.43.222:27593/42461 unexpectedly shrunk window 555465051:555465593 (repaired)
[31996.227981] spamd[4785]: segfault at 4893000 ip 00007fe11b58b7b2 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[44473.252188] spamd[7557]: segfault at 5436000 ip 00007fe11b58b780 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[44876.199062] spamd[16562]: segfault at 39ad000 ip 00007fe11b58b780 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[45077.282664] spamd[17667]: segfault at 3ad5000 ip 00007fe11b58b790 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[47366.112543] TCP: Peer 222.171.71.101:64633/42451 unexpectedly shrunk window 4191760050:4191763095 (repaired)
[47420.148016] TCP: Peer 222.171.71.101:64633/42451 unexpectedly shrunk window 4191778583:4191781399 (repaired)
[47710.944128] spamd[19172]: segfault at 400d000 ip 00007fe11b58b7b2 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[48632.477733] spamd[20032] general protection ip:7fe11892c6a2 sp:7fff79b77e80 error:0 in libdb-4.7.so[7fe1188d7000+16b000]
[50432.126865] spamd[24876]: segfault at 428b000 ip 00007fe11b58b790 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[54975.332950] spamd[27945]: segfault at 54cb000 ip 00007fe11b58b798 sp 00007fff79b77f18 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[56482.105545] spamd[10897]: segfault at 3e16000 ip 00007fe11b58b780 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[56915.671551] spamd[15322]: segfault at 3bb4000 ip 00007fe11b58b790 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[57888.543090] spamd[16337]: segfault at 3c71000 ip 00007fe11b58b7c0 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[65106.901176] spamd[18441]: segfault at 4c74000 ip 00007fe11b58b7b2 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[69746.719609] spamd[23957]: segfault at 3b5f000 ip 00007fe11b58b7c8 sp 00007fff79b77f18 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[72930.970054] spamd[3661]: segfault at 5079000 ip 00007fe11b58b7c0 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[86034.838479] nvidia 0000:01:00.0: setting latency timer to 64
[86034.839279] NVRM: loading NVIDIA UNIX x86_64 Kernel Module 190.42 Tue Oct 20 20:25:42 PDT 2009
[86225.992029] spamd[14576]: segfault at 7490000 ip 00007fe11b58b7c0 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[88213.217976] nvidia 0000:01:00.0: setting latency timer to 64
[88213.218327] NVRM: loading NVIDIA UNIX x86_64 Kernel Module 190.42 Tue Oct 20 20:25:42 PDT 2009
[89637.712786] usb 1-3: reset high speed USB device using ehci_hcd and address 2
[89782.746146] spamd[15508]: segfault at 4560000 ip 00007fe11b58b790 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[91799.154832] spamd[31318]: segfault at 3964000 ip 00007fe11b58b788 sp 00007fff79b77f18 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[118713.680283] spamd[4312]: segfault at 7cea000 ip 00007fe11b58b7b8 sp 00007fff79b77f18 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[160466.556762] spamd[7117]: segfault at 393f000 ip 00007fe11b58b790 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[166907.375715] spamd[7676]: segfault at 4781000 ip 00007fe11b58b7b2 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[171788.554715] spamd[15547]: segfault at 4777000 ip 00007fe11b58b7c8 sp 00007fff79b77f18 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[178113.471364] spamd[1847]: segfault at 502a000 ip 00007fe11b58b7c0 sp 00007fff79b77dd8 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[201203.232326] spamd[17188]: segfault at 4bbc000 ip 00007fe11b58b93d sp 00007fff79b77f08 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]
[246142.384066] usb 1-3: reset high speed USB device using ehci_hcd and address 2
[248635.003191] spamd[5604]: segfault at 47 ip 00007fe11bfc28de sp 00007fff79b789c0 error 4 in libperl.so.5.10.1[7fe11bf04000+165000]
[294319.517625] spamd[15960]: segfault at 810a000 ip 00007fe11b58b97b sp 00007fff79b77f08 error 4 in libc-2.10.1.so[7fe11b50f000+14a000]

** Model information
sys_vendor: Gigabyte Technology Co., Ltd.
product_name: GA-MA790FXT-UD5P
product_version:
chassis_vendor: Gigabyte Technology Co., Ltd.
chassis_version:
bios_vendor: Award Software International, Inc.
bios_version: F5
board_vendor: Gigabyte Technology Co., Ltd.
board_name: GA-MA790FXT-UD5P
board_version: x.x

** Loaded modules:
Module Size Used by
nvidia 9618424 52
vboxnetadp 94764 0
vboxnetflt 102236 1
vboxdrv 1708428 3 vboxnetflt
sha256_generic 9808 0
cryptd 8712 0
aes_x86_64 9232 2
aes_generic 28128 1 aes_x86_64
cbc 4224 1
nfsd 293200 17
lockd 76804 1 nfsd
nfs_acl 3536 1 nfsd
auth_rpcgss 44912 1 nfsd
sunrpc 219672 8 nfsd,lockd,nfs_acl,auth_rpcgss
exportfs 4960 1 nfsd
ppdev 7720 0
lp 11492 0
powernow_k8 14436 0
cpufreq_powersave 1952 0
cpufreq_conservative 8624 0
cpufreq_stats 5092 0
cpufreq_userspace 3908 0
binfmt_misc 9884 1
bridge 56176 0
stp 3060 1 bridge
ip6table_mangle 4640 1
ip6t_frag 2304 3
ip6t_LOG 5956 3
ip6t_REJECT 4288 3
nf_conntrack_ipv6 15704 47
ip6table_filter 4192 1
ip6_tables 20272 4 ip6table_mangle,ip6t_frag,ip6t_LOG,ip6table_filter
iptable_mangle 4464 1
iptable_nat 6944 1
nf_nat 21620 1 iptable_nat
xt_pkttype 2048 1
ipt_ULOG 10232 4
ipt_REJECT 3440 4
xt_limit 3412 27
xt_tcpudp 3616 126
nf_conntrack_ipv4 16824 74 iptable_nat,nf_nat
nf_defrag_ipv4 2496 1 nf_conntrack_ipv4
xt_state 2640 118
nf_conntrack 78320 5 nf_conntrack_ipv6,iptable_nat,nf_nat,nf_conntrack_ ipv4,xt_state
iptable_filter 4128 1
ip_tables 18640 3 iptable_mangle,iptable_nat,iptable_filter
x_tables 25512 12 ip6t_frag,ip6t_LOG,ip6t_REJECT,ip6_tables,iptable_ nat,xt_pkttype,ipt_ULOG,ipt_REJECT,xt_limit,xt_tcp udp,xt_state,ip_tables
ext4 322888 12
jbd2 89152 1 ext4
crc16 2384 1 ext4
ext2 68912 2
firewire_sbp2 16976 0
loop 17372 0
dm_crypt 14536 1
uvcvideo 61180 1
snd_hda_codec_realtek 271908 1
videodev 39120 2 uvcvideo
v4l1_compat 14420 2 uvcvideo,videodev
v4l2_compat_ioctl32 10064 1 videodev
snd_usb_audio 96368 0
snd_hda_intel 29128 3
snd_hda_codec 83920 2 snd_hda_codec_realtek,snd_hda_intel
snd_usb_lib 18960 1 snd_usb_audio
joydev 11872 0
snd_seq_midi 7536 0
snd_pcm 89240 4 snd_usb_audio,snd_hda_intel,snd_hda_codec
snd_seq_midi_event 8752 1 snd_seq_midi
amd64_edac_mod 23488 0
i2c_piix4 11264 0
serio_raw 6564 0
pcspkr 3280 0
snd_seq 58416 2 snd_seq_midi,snd_seq_midi_event
snd_rawmidi 25424 2 snd_usb_lib,snd_seq_midi
evdev 11504 9
snd_hwdep 9288 2 snd_usb_audio,snd_hda_codec
edac_core 50444 1 amd64_edac_mod
processor 43100 1 powernow_k8
wmi 8144 0
snd_timer 23888 3 snd_pcm,snd_seq
parport_pc 28824 1
i2c_core 26736 3 nvidia,videodev,i2c_piix4
snd_seq_device 8324 3 snd_seq_midi,snd_seq,snd_rawmidi
parport 41200 3 ppdev,lp,parport_pc
snd 71576 14 snd_hda_codec_realtek,snd_usb_audio,snd_hda_intel, snd_hda_codec,snd_pcm,snd_seq,snd_rawmidi,snd_hwde p,snd_timer,snd_seq_device
button 7072 0
soundcore 8816 1 snd
snd_page_alloc 10720 2 snd_hda_intel,snd_pcm
ext3 133280 13
jbd 53448 1 ext3
mbcache 9524 3 ext4,ext2,ext3
dm_mod 78120 83 dm_crypt
raid456 52624 1
raid6_pq 81440 1 raid456
async_xor 4272 1 raid456
async_memcpy 2576 1 raid456
async_tx 4336 3 raid456,async_xor,async_memcpy
xor 5904 2 raid456,async_xor
raid1 23248 3
md_mod 94580 6 raid456,raid1
hid_logitech 8864 0
ff_memless 5896 1 hid_logitech
sg 25656 0
sr_mod 17412 0
cdrom 36200 1 sr_mod
usbhid 41120 2 hid_logitech
ata_generic 6132 0
ide_pci_generic 5156 0
hid 43744 2 hid_logitech,usbhid
sd_mod 37544 27
crc_t10dif 2208 1 sd_mod
sata_mv 32388 2
pata_jmicron 4240 0
ohci_hcd 24620 0
firewire_ohci 24580 0
firewire_core 54280 2 firewire_sbp2,firewire_ohci
crc_itu_t 2432 1 firewire_core
atiixp 4564 0
e1000 122052 0
ide_core 117472 2 ide_pci_generic,atiixp
r8169 36260 0
mii 6144 1 r8169
ahci 40464 23
libata 190940 4 ata_generic,sata_mv,pata_jmicron,ahci
ehci_hcd 37392 0
scsi_mod 172992 5 firewire_sbp2,sg,sr_mod,sd_mod,libata
thermal 17376 0
fan 5768 0
thermal_sys 17936 3 processor,thermal,fan
fuse 67952 7

** Network interface configuration:
# The loopback network interface
auto lo
iface lo inet loopback
up /sbin/ip addr add 10.160.16.25/32 dev lo || true



# network setup
# eth0 bottom native (lan)
# eth1 top native - wireless
# eth2 - addon
# eth3 - addon


# br0 - eth0 eth2 eth3
auto br0
allow-hotplug br0
iface br0 inet static
bridge_ports eth0 eth2 eth3
address 192.168.11.10
network 192.168.11.0
netmask 255.255.255.0
gateway 192.168.11.1
broadcast 192.168.11.255
pre-up ifconfig eth0 up
pre-up ifconfig eth2 up
pre-up ifconfig eth3 up
post-up /sbin/ip -6 addr add dev br0 2002:3cf1:f856:11::10/64 || true
post-up /sbin/ip -6 addr add dev br0 fe80:11::10/64 || true
post-up /sbin/ip -6 route add dev br0 2002:3cf1:f856:11::/64 || true
post-up sysctl -w net.ipv6.conf.br0.autoconf=0 || true
post-up /sbin/ip -6 r a default via fe80:11::1 dev br0 advmss 1440 || true

auto eth1
allow-hotplug eth1
iface eth1 inet static
address 192.168.10.1
network 192.168.10.0
netmask 255.255.255.0
broadcast 192.168.10.255
post-up /sbin/ip addr add dev eth1 192.168.0.2/24 || true
post-up /sbin/ip -6 addr add dev eth1 fe80:10::1/64 || true
post-up /sbin/ip -6 addr add dev eth1 2002:3cf1:f856:10::1/64 || true
post-up /sbin/ip -6 addr add dev eth1 2002:3cf1:f856:10::10/64 || true
post-up /sbin/ip -6 route add dev eth1 2002:3cf1:f856:10::/64 || true



** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet 10.160.16.25/32 scope global lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:24:1d:79:1e:a3 brd ff:ff:ff:ff:ff:ff
inet6 fe80::224:1dff:fe79:1ea3/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:24:1d:78:fa:d2 brd ff:ff:ff:ff:ff:ff
inet 192.168.10.1/24 brd 192.168.10.255 scope global eth1
inet 192.168.0.2/24 scope global eth1
inet6 2002:3cf1:f856:10::10/64 scope global
valid_lft forever preferred_lft forever
inet6 2002:3cf1:f856:10::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80:10::1/64 scope link
valid_lft forever preferred_lft forever
inet6 fe80::224:1dff:fe78:fad2/64 scope link
valid_lft forever preferred_lft forever
4: eth2: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
link/ether 00:02:a5:4d:31:34 brd ff:ff:ff:ff:ff:ff
5: eth3: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
link/ether 00:02:a5:4d:31:35 brd ff:ff:ff:ff:ff:ff
6: br0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether 00:02:a5:4d:31:34 brd ff:ff:ff:ff:ff:ff
inet 192.168.11.10/24 brd 192.168.11.255 scope global br0
inet6 2002:3cf1:f856:11::10/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80:11::10/64 scope link
valid_lft forever preferred_lft forever
inet6 fe80::202:a5ff:fe4d:3134/64 scope link
valid_lft forever preferred_lft forever
7: vboxnet0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000
link/ether 0a:00:27:00:00:00 brd ff:ff:ff:ff:ff:ff

*** Device statistics:
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo:1015163265 3912110 0 0 0 0 0 0 1015163265 3912110 0 0 0 0 0 0
eth0:16685477525 103824149 0 0 0 0 0 0 307107112614 222529820 0 0 0 0 0 0
eth1:90333262 1024294 0 0 0 0 0 0 695205635 1485319 0 0 0 0 0 0
eth2: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
eth3: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
br0:15235993642 103793809 0 0 0 0 0 205307 306772870114 217599007 0 0 0 0 0 0
vboxnet0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0

*** Protocol statistics:
Ip:
39701407 total packets received
117991 forwarded
0 incoming packets discarded
39576807 incoming packets delivered
39403782 requests sent out
6 outgoing packets dropped
32 dropped because of missing route
85300 reassemblies required
3740 packets reassembled ok
22849397 fragments received ok
137447614 fragments created
Icmp:
169354 ICMP messages received
92 input ICMP message failed.
ICMP input histogram:
destination unreachable: 63359
timeout in transit: 652
source quenches: 103
echo requests: 6831
echo replies: 98409
132756 ICMP messages sent
0 ICMP messages failed
ICMP output histogram:
destination unreachable: 7509
echo request: 118416
echo replies: 6831
IcmpMsg:
InType0: 98409
InType3: 63359
InType4: 103
InType8: 6831
InType11: 652
OutType0: 6831
OutType3: 7509
OutType8: 118416
Tcp:
191776 active connections openings
195099 passive connection openings
24493 failed connection attempts
50698 connection resets received
53 connections established
80579667 segments received
19858029 segments send out
495800 segments retransmited
0 bad segments received.
115658 resets sent
Udp:
26941970 packets received
2996 packets to unknown port received.
795 packet receive errors
26043168 packets sent
RcvbufErrors: 795
UdpLite:
TcpExt:
47059 invalid SYN cookies received
3736 resets received for embryonic SYN_RECV sockets
7 packets pruned from receive queue because of socket buffer overrun
101 ICMP packets dropped because they were out-of-window
145352 TCP sockets finished time wait in fast timer
249 time wait sockets recycled by time stamp
1853 packets rejects in established connections because of timestamp
216192 delayed acks sent
144 delayed acks further delayed because of locked socket
Quick ack mode was activated 246704 times
434069 packets directly queued to recvmsg prequeue.
1343873 bytes directly in process context from backlog
61366549 bytes directly received in process context from prequeue
4767102 packet headers predicted
268779 packets header predicted and directly queued to user
5511019 acknowledgments not containing data payload received
68244459 predicted acknowledgments
224 times recovered from packet loss due to fast retransmit
73222 times recovered from packet loss by selective acknowledgements
Detected reordering 55 times using FACK
Detected reordering 153 times using SACK
Detected reordering 107 times using time stamp
168 congestion windows fully recovered without slow start
312 congestion windows partially recovered using Hoe heuristic
2451 congestion windows recovered without slow start by DSACK
29551 congestion windows recovered without slow start after partial ack
243483 TCP data loss events
TCPLostRetransmit: 4136
176 timeouts after reno fast retransmit
30813 timeouts after SACK recovery
10693 timeouts in loss state
115414 fast retransmits
3780 forward retransmits
70669 retransmits in slow start
125515 other TCP timeouts
68 classic Reno fast retransmits failed
9686 SACK retransmits failed
704 packets collapsed in receive queue due to low socket buffer
34162 DSACKs sent for old packets
48 DSACKs sent for out of order packets
27300 DSACKs received
514 DSACKs for out of order packets received
16660 connections reset due to unexpected data
34736 connections reset due to early user close
4397 connections aborted due to timeout
TCPSACKDiscard: 32
TCPDSACKIgnoredOld: 15692
TCPDSACKIgnoredNoUndo: 9571
TCPSpuriousRTOs: 2392
TCPSackShifted: 948138
TCPSackMerged: 413258
TCPSackShiftFallback: 243506
IpExt:
InNoRoutes: 11
InMcastPkts: 494
OutMcastPkts: 498
InBcastPkts: 15507
OutBcastPkts: 7536
InOctets: 2085206650
OutOctets: 1510134990
InMcastOctets: 87731
OutMcastOctets: 87891
InBcastOctets: 1541494
OutBcastOctets: 831894

*** Device features:
br0: 0x11829
eth0: 0x180
eth1: 0x180
eth2: 0x10ba9
eth3: 0x10ba9
lo: 0x13865
vboxnet0: 0x0

** PCI devices:
00:00.0 Host bridge [0600]: ATI Technologies Inc RD790 Northbridge only dual slot PCI-e_GFX and HT3 K8 part [1002:5956]
Subsystem: ATI Technologies Inc RD790 Northbridge only dual slot PCI-e_GFX and HT3 K8 part [1002:5956]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort+ >SERR- <PERR- INTx-
Latency: 32
Region 3: Memory at <ignored> (64-bit, non-prefetchable)
Capabilities: <access denied>

00:02.0 PCI bridge [0604]: ATI Technologies Inc RD790 PCI to PCI bridge (external gfx0 port A) [1002:5978] (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Bus: primary=00, secondary=01, subordinate=01, sec-latency=0
I/O behind bridge: 0000a000-0000afff
Memory behind bridge: fa000000-fcffffff
Prefetchable memory behind bridge: 00000000d0000000-00000000dfffffff
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
BridgeCtl: Parity- SERR- NoISA- VGA+ MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport-driver

00:07.0 PCI bridge [0604]: ATI Technologies Inc RD790 PCI to PCI bridge (PCI express gpp port D) [1002:597d] (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Bus: primary=00, secondary=02, subordinate=02, sec-latency=0
I/O behind bridge: 0000e000-0000efff
Memory behind bridge: fd400000-fd4fffff
Prefetchable memory behind bridge: 00000000fdf00000-00000000fdffffff
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport-driver

00:09.0 PCI bridge [0604]: ATI Technologies Inc RD790 PCI to PCI bridge (PCI express gpp port E) [1002:597e] (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Bus: primary=00, secondary=03, subordinate=03, sec-latency=0
I/O behind bridge: 0000d000-0000dfff
Memory behind bridge: fde00000-fdefffff
Prefetchable memory behind bridge: 00000000fdd00000-00000000fddfffff
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport-driver

00:0a.0 PCI bridge [0604]: ATI Technologies Inc RD790 PCI to PCI bridge (PCI express gpp port F) [1002:597f] (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Bus: primary=00, secondary=04, subordinate=04, sec-latency=0
I/O behind bridge: 0000c000-0000cfff
Memory behind bridge: fdc00000-fdcfffff
Prefetchable memory behind bridge: 00000000fdb00000-00000000fdbfffff
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport-driver

00:0b.0 PCI bridge [0604]: ATI Technologies Inc RD790 PCI to PCI bridge (external gfx1 port A) [1002:5980] (prog-if 00 [Normal decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Bus: primary=00, secondary=05, subordinate=05, sec-latency=0
I/O behind bridge: 0000b000-0000bfff
Memory behind bridge: fd800000-fdafffff
Prefetchable memory behind bridge: 00000000fd700000-00000000fd7fffff
Secondary status: 66MHz- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- <SERR- <PERR-
BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-
Capabilities: <access denied>
Kernel driver in use: pcieport-driver

00:11.0 SATA controller [0106]: ATI Technologies Inc SB700/SB800 SATA Controller [AHCI mode] [1002:4391] (prog-if 01 [AHCI 1.0])
Subsystem: Giga-byte Technology Device [1458:b002]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 31
Region 0: I/O ports at ff00 [size=8]
Region 1: I/O ports at fe00 [size=4]
Region 2: I/O ports at fd00 [size=8]
Region 3: I/O ports at fc00 [size=4]
Region 4: I/O ports at fb00 [size=16]
Region 5: Memory at fe02f000 (32-bit, non-prefetchable) [size=1K]
Capabilities: <access denied>
Kernel driver in use: ahci

00:12.0 USB Controller [0c03]: ATI Technologies Inc SB700/SB800 USB OHCI0 Controller [1002:4397] (prog-if 10 [OHCI])
Subsystem: Giga-byte Technology Device [1458:5004]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 16
Region 0: Memory at fe02e000 (32-bit, non-prefetchable) [size=4K]
Kernel driver in use: ohci_hcd

00:12.1 USB Controller [0c03]: ATI Technologies Inc SB700 USB OHCI1 Controller [1002:4398] (prog-if 10 [OHCI])
Subsystem: Giga-byte Technology Device [1458:5004]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 16
Region 0: Memory at fe02d000 (32-bit, non-prefetchable) [size=4K]
Kernel driver in use: ohci_hcd

00:12.2 USB Controller [0c03]: ATI Technologies Inc SB700/SB800 USB EHCI Controller [1002:4396] (prog-if 20 [EHCI])
Subsystem: Giga-byte Technology Device [1458:5004]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin B routed to IRQ 17
Region 0: Memory at fe02c000 (32-bit, non-prefetchable) [size=256]
Capabilities: <access denied>
Kernel driver in use: ehci_hcd

00:13.0 USB Controller [0c03]: ATI Technologies Inc SB700/SB800 USB OHCI0 Controller [1002:4397] (prog-if 10 [OHCI])
Subsystem: Giga-byte Technology Device [1458:5004]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 18
Region 0: Memory at fe02b000 (32-bit, non-prefetchable) [size=4K]
Kernel driver in use: ohci_hcd

00:13.1 USB Controller [0c03]: ATI Technologies Inc SB700 USB OHCI1 Controller [1002:4398] (prog-if 10 [OHCI])
Subsystem: Giga-byte Technology Device [1458:5004]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 18
Region 0: Memory at fe02a000 (32-bit, non-prefetchable) [size=4K]
Kernel driver in use: ohci_hcd

00:13.2 USB Controller [0c03]: ATI Technologies Inc SB700/SB800 USB EHCI Controller [1002:4396] (prog-if 20 [EHCI])
Subsystem: Giga-byte Technology Device [1458:5004]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV+ VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin B routed to IRQ 19
Region 0: Memory at fe029000 (32-bit, non-prefetchable) [size=256]
Capabilities: <access denied>
Kernel driver in use: ehci_hcd

00:14.0 SMBus [0c05]: ATI Technologies Inc SBx00 SMBus Controller [1002:4385] (rev 3c)
Subsystem: Giga-byte Technology Device [1458:4385]
Control: I/O+ Mem+ BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Capabilities: <access denied>

00:14.1 IDE interface [0101]: ATI Technologies Inc SB700/SB800 IDE Controller [1002:439c] (prog-if 8a [Master SecP PriP])
Subsystem: Giga-byte Technology Device [1458:5002]
Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 16
Region 0: I/O ports at 01f0 [size=8]
Region 1: I/O ports at 03f4 [size=1]
Region 2: I/O ports at 0170 [size=8]
Region 3: I/O ports at 0374 [size=1]
Region 4: I/O ports at fa00 [size=16]
Capabilities: <access denied>
Kernel driver in use: ATIIXP_IDE

00:14.2 Audio device [0403]: ATI Technologies Inc SBx00 Azalia (Intel HDA) [1002:4383]
Subsystem: Giga-byte Technology Device [1458:a102]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=slow >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin ? routed to IRQ 16
Region 0: Memory at fe024000 (64-bit, non-prefetchable) [size=16K]
Capabilities: <access denied>
Kernel driver in use: HDA Intel

00:14.3 ISA bridge [0601]: ATI Technologies Inc SB700/SB800 LPC host controller [1002:439d]
Subsystem: ATI Technologies Inc SB700/SB800 LPC host controller [1002:439d]
Control: I/O+ Mem+ BusMaster+ SpecCycle+ MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0

00:14.4 PCI bridge [0604]: ATI Technologies Inc SBx00 PCI to PCI Bridge [1002:4384] (prog-if 01 [Subtractive decode])
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop+ ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64
Bus: primary=00, secondary=06, subordinate=06, sec-latency=64
I/O behind bridge: 00009000-00009fff
Memory behind bridge: fd600000-fd6fffff
Prefetchable memory behind bridge: fd500000-fd5fffff
Secondary status: 66MHz- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort+ <SERR- <PERR-
BridgeCtl: Parity- SERR- NoISA- VGA- MAbort- >Reset- FastB2B-
PriDiscTmr- SecDiscTmr- DiscTmrStat- DiscTmrSERREn-

00:14.5 USB Controller [0c03]: ATI Technologies Inc SB700/SB800 USB OHCI2 Controller [1002:4399] (prog-if 10 [OHCI])
Subsystem: Giga-byte Technology Device [1458:5004]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz+ UDF- FastB2B+ ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32, Cache Line Size: 64 bytes
Interrupt: pin C routed to IRQ 18
Region 0: Memory at fe028000 (32-bit, non-prefetchable) [size=4K]
Kernel driver in use: ohci_hcd

00:18.0 Host bridge [0600]: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] HyperTransport Configuration [1022:1200]
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Capabilities: <access denied>

00:18.1 Host bridge [0600]: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Address Map [1022:1201]
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-

00:18.2 Host bridge [0600]: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] DRAM Controller [1022:1202]
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-

00:18.3 Host bridge [0600]: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Miscellaneous Control [1022:1203]
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Capabilities: <access denied>

00:18.4 Host bridge [0600]: Advanced Micro Devices [AMD] K10 [Opteron, Athlon64, Sempron] Link Control [1022:1204]
Control: I/O- Mem- BusMaster- SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap- 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-

01:00.0 VGA compatible controller [0300]: nVidia Corporation G71GL [Quadro FX 3500] [10de:029d] (rev a1) (prog-if 00 [VGA controller])
Subsystem: nVidia Corporation Device [10de:032b]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin A routed to IRQ 18
Region 0: Memory at fa000000 (32-bit, non-prefetchable) [size=16M]
Region 1: Memory at d0000000 (64-bit, prefetchable) [size=256M]
Region 3: Memory at fb000000 (64-bit, non-prefetchable) [size=16M]
Region 5: I/O ports at af00 [size=128]
[virtual] Expansion ROM at fc000000 [disabled] [size=128K]
Capabilities: <access denied>
Kernel driver in use: nvidia

02:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller [10ec:8168] (rev 02)
Subsystem: Giga-byte Technology GA-EP45-DS5 Motherboard [1458:e000]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 30
Region 0: I/O ports at ee00 [size=256]
Region 2: Memory at fdfff000 (64-bit, prefetchable) [size=4K]
Region 4: Memory at fdfe0000 (64-bit, prefetchable) [size=64K]
[virtual] Expansion ROM at fdf00000 [disabled] [size=64K]
Capabilities: <access denied>
Kernel driver in use: r8169

03:00.0 Ethernet controller [0200]: Realtek Semiconductor Co., Ltd. RTL8111/8168B PCI Express Gigabit Ethernet controller [10ec:8168] (rev 02)
Subsystem: Giga-byte Technology GA-EP45-DS5 Motherboard [1458:e000]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 32
Region 0: I/O ports at de00 [size=256]
Region 2: Memory at fddff000 (64-bit, prefetchable) [size=4K]
Region 4: Memory at fdde0000 (64-bit, prefetchable) [size=64K]
[virtual] Expansion ROM at fdd00000 [disabled] [size=64K]
Capabilities: <access denied>
Kernel driver in use: r8169

04:00.0 SATA controller [0106]: JMicron Technology Corp. JMB362/JMB363 AHCI Controller [197b:2363] (rev 02) (prog-if 01 [AHCI 1.0])
Subsystem: Giga-byte Technology GA-EP45-DS5 Motherboard [1458:b000]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 18
Region 5: Memory at fdcfe000 (32-bit, non-prefetchable) [size=8K]
Capabilities: <access denied>
Kernel driver in use: ahci

04:00.1 IDE interface [0101]: JMicron Technology Corp. JMB362/JMB363 AHCI Controller [197b:2363] (rev 02) (prog-if 85 [Master SecO PriO])
Subsystem: Giga-byte Technology GA-EP45-DS5 Motherboard [1458:b000]
Control: I/O+ Mem- BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0
Interrupt: pin B routed to IRQ 19
Region 0: I/O ports at cf00 [size=8]
Region 1: I/O ports at ce00 [size=4]
Region 2: I/O ports at cd00 [size=8]
Region 3: I/O ports at cc00 [size=4]
Region 4: I/O ports at cb00 [size=16]
Capabilities: <access denied>
Kernel driver in use: pata_jmicron

05:00.0 RAID bus controller [0104]: Adaptec Serial ATA II RAID 1430SA [9005:0243] (rev 02)
Subsystem: Adaptec Serial ATA II RAID 1430SA [9005:0243]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 0, Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 19
Region 0: Memory at fd800000 (64-bit, non-prefetchable) [size=1M]
Region 2: I/O ports at be00 [size=256]
Region 3: Memory at fd900000 (64-bit, non-prefetchable) [size=1M]
Capabilities: <access denied>
Kernel driver in use: sata_mv

06:06.0 Ethernet controller [0200]: Intel Corporation 82546EB Gigabit Ethernet Controller (Copper) [8086:1010] (rev 01)
Subsystem: Compaq Computer Corporation NC7170 Gigabit Server Adapter [0e11:00db]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64 (63750ns min), Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 20
Region 0: Memory at fd6c0000 (64-bit, non-prefetchable) [size=128K]
Region 2: Memory at fd640000 (64-bit, non-prefetchable) [size=256K]
Region 4: I/O ports at 9f00 [size=64]
[virtual] Expansion ROM at fd500000 [disabled] [size=256K]
Capabilities: <access denied>
Kernel driver in use: e1000

06:06.1 Ethernet controller [0200]: Intel Corporation 82546EB Gigabit Ethernet Controller (Copper) [8086:1010] (rev 01)
Subsystem: Compaq Computer Corporation NC7170 Gigabit Server Adapter [0e11:00db]
Control: I/O+ Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz+ UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 64 (63750ns min), Cache Line Size: 64 bytes
Interrupt: pin B routed to IRQ 21
Region 0: Memory at fd6a0000 (64-bit, non-prefetchable) [size=128K]
Region 4: I/O ports at 9e00 [size=64]
Capabilities: <access denied>
Kernel driver in use: e1000

06:0e.0 FireWire (IEEE 1394) [0c00]: Texas Instruments TSB43AB23 IEEE-1394a-2000 Controller (PHY/Link) [104c:8024] (prog-if 10 [OHCI])
Subsystem: Giga-byte Technology GA-EP45-DS5 Motherboard [1458:1000]
Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx-
Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=medium >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx-
Latency: 32 (500ns min, 1000ns max), Cache Line Size: 64 bytes
Interrupt: pin A routed to IRQ 22
Region 0: Memory at fd6ff000 (32-bit, non-prefetchable) [size=2K]
Region 1: Memory at fd6f8000 (32-bit, non-prefetchable) [size=16K]
Capabilities: <access denied>
Kernel driver in use: firewire_ohci


** USB devices:
Bus 004 Device 002: ID 046d:c517 Logitech, Inc. LX710 Cordless Desktop Laser
Bus 004 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 003 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 007 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 005 Device 002: ID 051d:0002 American Power Conversion Uninterruptible Power Supply
Bus 005 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 006 Device 001: ID 1d6b:0001 Linux Foundation 1.1 root hub
Bus 002 Device 003: ID 046d:0990 Logitech, Inc. QuickCam Pro 9000
Bus 002 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub
Bus 001 Device 002: ID 05e3:0608 Genesys Logic, Inc. USB-2.0 4-Port HUB
Bus 001 Device 001: ID 1d6b:0002 Linux Foundation 2.0 root hub


-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (500, 'testing'), (500, 'stable'), (100, 'unstable'), (50, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.31-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.UTF8, LC_CTYPE=en_AU.UTF8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages linux-image-2.6.31-1-amd64 depends on:
ii debconf [debconf-2.0] 1.5.28 Debian configuration management sy
ii initramfs-tools [linux-initra 0.93.4 tools for generating an initramfs
ii module-init-tools 3.11-1 tools for managing Linux kernel mo

Versions of packages linux-image-2.6.31-1-amd64 recommends:
pn firmware-linux-free <none> (no description available)

Versions of packages linux-image-2.6.31-1-amd64 suggests:
pn grub | lilo <none> (no description available)
pn linux-doc-2.6.31 <none> (no description available)

Versions of packages linux-image-2.6.31-1-amd64 is related to:
pn firmware-bnx2 <none> (no description available)
pn firmware-bnx2x <none> (no description available)
pn firmware-ipw2x00 <none> (no description available)
pn firmware-ivtv <none> (no description available)
pn firmware-iwlwifi <none> (no description available)
pn firmware-linux <none> (no description available)
pn firmware-linux-nonfree <none> (no description available)
pn firmware-qlogic <none> (no description available)
pn firmware-ralink <none> (no description available)

-- debconf information:
linux-image-2.6.31-1-amd64/postinst/missing-firmware-2.6.31-1-amd64:
linux-image-2.6.31-1-amd64/postinst/bootloader-error-2.6.31-1-amd64:
linux-image-2.6.31-1-amd64/prerm/removing-running-kernel-2.6.31-1-amd64: true
shared/kernel-image/really-run-bootloader: true
linux-image-2.6.31-1-amd64/prerm/would-invalidate-boot-loader-2.6.31-1-amd64: true
linux-image-2.6.31-1-amd64/postinst/depmod-error-initrd-2.6.31-1-amd64: false
linux-image-2.6.31-1-amd64/postinst/bootloader-test-error-2.6.31-1-amd64:



--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 
Old 02-02-2010, 08:50 PM
maximilian attems
 
Default Bug#557448: linux-image-2.6.31-1-amd64: net.ipv4.conf.all.secure_redirects not working

tags 557448 moreinfo
stop


On Sun, 22 Nov 2009, Alex Samad wrote:

> Hi
>
> I have a local lan network
> 192.168.11.0/24 dgw - 192.168.11.1
>
> I also have a wireless network
> 192.168.10.0/24 dgw - 192.168.10.1
>
> the router at 192.168.10.1 is a linux server with the address 192.168.11.10 as well.
>
> I have placed a ip route add/replace 192.168.10.0/24 via 192.168.11.10 on 192.168.11.1 this send the appropiate icmp redirects for 192.168.10.0/24 via 192.168.11.10
>
> what seems to be failing is this scenario.
>
> laptop connected to 192.168.11.0/24 (ip via dhcp) with
> net.ipv4.conf.all.accept_redirects = 0
> net.ipv4.conf.all.secure_redirects = 1
>
> All the other interface redirects set to 1
>
> with another linux machine (alex-mini) on the wireless (192.168.10.0/24 - ip via dhcp), I try and ssh to laptop - which fails.
>
> When I look at the tcpdump on laptop I see the packets coming in but laptop is trying to send the packets via 192.168.11.1, it doesn't seem to acknowledge the icmp redirects even though I have secure_redirects set to 1 and 192.168.11.1 is the default gateway..
>
> when I set net.ipv4.conf.all.accept_redirects to 1 everything works fine, the icmp redirect is accepted....
>
> this seems to be contry to the documenation in sysctl.conf , which says these flags are OR
>
> Alex

17:41 <bwh> Documentation/networking/ip-sysctl.txt says "secure_redirects -
BOOLEAN Accept ICMP redirect messages only for gateways, listed in
default gateway list."
17:42 <bwh> So my guess is that in #557448 the submitter has not listed both
gateways in DHCP

can you verify please aboves?



--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 
Old 02-02-2010, 09:49 PM
"Alex Samad"
 
Default Bug#557448: linux-image-2.6.31-1-amd64: net.ipv4.conf.all.secure_redirects not working

I have a chat on the linux-kernel ml and basically you have to set both of
the redirects.

So you can close the bug.

Thanks

-----Original Message-----
From: maximilian attems [mailto:max@stro.at]
Sent: Wednesday, 3 February 2010 8:50 AM
To: Alex Samad; 557448@bugs.debian.org
Subject: Re: Bug#557448: linux-image-2.6.31-1-amd64:
net.ipv4.conf.all.secure_redirects not working

tags 557448 moreinfo
stop


On Sun, 22 Nov 2009, Alex Samad wrote:

> Hi
>
> I have a local lan network
> 192.168.11.0/24 dgw - 192.168.11.1
>
> I also have a wireless network
> 192.168.10.0/24 dgw - 192.168.10.1
>
> the router at 192.168.10.1 is a linux server with the address
192.168.11.10 as well.
>
> I have placed a ip route add/replace 192.168.10.0/24 via 192.168.11.10 on
192.168.11.1 this send the appropiate icmp redirects for 192.168.10.0/24 via
192.168.11.10
>
> what seems to be failing is this scenario.
>
> laptop connected to 192.168.11.0/24 (ip via dhcp) with
> net.ipv4.conf.all.accept_redirects = 0
> net.ipv4.conf.all.secure_redirects = 1
>
> All the other interface redirects set to 1
>
> with another linux machine (alex-mini) on the wireless (192.168.10.0/24 -
ip via dhcp), I try and ssh to laptop - which fails.
>
> When I look at the tcpdump on laptop I see the packets coming in but
laptop is trying to send the packets via 192.168.11.1, it doesn't seem to
acknowledge the icmp redirects even though I have secure_redirects set to 1
and 192.168.11.1 is the default gateway..
>
> when I set net.ipv4.conf.all.accept_redirects to 1 everything works fine,
the icmp redirect is accepted....
>
> this seems to be contry to the documenation in sysctl.conf , which says
these flags are OR
>
> Alex

17:41 <bwh> Documentation/networking/ip-sysctl.txt says "secure_redirects -
BOOLEAN Accept ICMP redirect messages only for gateways, listed
in
default gateway list."
17:42 <bwh> So my guess is that in #557448 the submitter has not listed both

gateways in DHCP

can you verify please aboves?






--
To UNSUBSCRIBE, email to debian-kernel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 

Thread Tools




All times are GMT. The time now is 08:33 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org