[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

losing the console on 2.8 (i386)



I sent a post earlier concerning this:

	I have a P3 system with 256MB ram. It has three NICs (all Intel)  in
it. One is built into the motherboard, and the other two are on a single
PCI card. It is functioning as a firewall (ipf + bridge). There are no
ips assigned to the cards. I am using ipf 3.4.16. What happens is, I
lose all console access. None of the virtual terminals work, nor does
the serial terminal. The machine will continue to filter for two or
three days after that, and then will stop creating new states. Icmp
still goes through, but I think that's because I have no stateful rules
on pinging. At this point, I have to reboot the machine.
	I tried different nkmemcluster (several people suggested that I
increase the kernel memory) settings: 8192, 16384, 32768, and even
65536. Same results every time. I kept nmbclusters at 8192. I tried
different sizes (starting from the default and going up) in
/usr/src/sys/netinet/ip_state.h. The last size I tried was (I first
believed that I was running out of free state table entries): 

#define IPSTATE_SIZE    143501
#define IPSTATE_MAX     100447  /* Maximum number of states held */ 
	I seemed to lose the console faster with higher nkmemcluster settings.
	This machine is not on a kvm. This has happened both with a keyboard
and monitor and without.

	I figured it was hardware, but then I switched it out with an another
machine ... similar, if not the same hardware. This time, I stuck with
the version of ipf that comes with the system. Same thing happens. This
machine is not running raid frame, but is running the same kernel
source, I believe. The exact same thing happened. It was running fine
till today - I was untarring some source code, and suddenly, I lost the
console. Also, disk activity stopped. The firewall is still working, but
will require a reboot for me to get the console back. I would post a
dmesg, but I can't get into the console. The keyboard is completely
unresponsive.
	Does anyone have any suggestions? I don't want to have to go to some
other firewall+os combination (I had to kind of fight to get OpenBSD in
here) unless I have to. I did search through the mailing list archives,
but most problems like this seemed related to using a KVM. I can provide
more information if you need.

Thanks,

Nicholas

dmesg from the first machine taken right after a crash:

OpenBSD 2.8-stable (conf) #9: Fri Mar 30 18:05:31 EST 2001
    nbasila_(_at_)_prometheus:/sys/arch/i386/conf
cpu0: Intel Pentium III (Coppermine) ("GenuineIntel" 686-class) 797 MHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SYS,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,
SIMD
real mem  = 266711040 (260460K)
avail mem = 243367936 (237664K)
using 3281 buffers containing 13438976 bytes (13124K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 02/10/00, BIOS32 rev. 0 @
0xfda74
apm0 at bios0: Power Management spec V1.2
apm0: AC on, battery charge unknown
pcibios0 at bios0: rev. 2.1 found at 0xf0000[0x10000]
pcibios0: PCI IRQ Routing Table rev. 1.0 found at 0xf31d0, size 192
bytes (10 entr
ies)
pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82371FB (Triton)
PCI-ISA" rev 0
x00)
pcibios0: PCI bus #2 is the last bus
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 "Intel 82810E" rev 0x03: rng active,
7Kb/sec
"Intel 82810E Graphics" rev 0x03 at pci0 dev 1 function 0 not configured
ppb0 at pci0 dev 30 function 0 "Intel 82801AA Hub-to-PCI" rev 0x02
pci1 at ppb0 bus 1
fxp0 at pci1 dev 1 function 0 "Intel 82557" rev 0x08: irq 9, address
00:03:47:06:f
9:05
inphy0 at fxp0 phy 1: i82555 10/100 media interface, rev. 4
"Ensoniq AudioPCI97" rev 0x06 at pci1 dev 7 function 0 not configured
ppb1 at pci1 dev 9 function 0 "DEC DECchip 21152 PCI-PCI" rev 0x03
pci2 at ppb1 bus 2
fxp1 at pci2 dev 4 function 0 "Intel 82557" rev 0x05: irq 10, address
00:d0:b7:82:
f3:9c
inphy1 at fxp1 phy 1: i82555 10/100 media interface, rev. 0
fxp2 at pci2 dev 5 function 0 "Intel 82557" rev 0x05: irq 11, address
00:d0:b7:82:
f3:9d
inphy2 at fxp2 phy 1: i82555 10/100 media interface, rev. 0
pcib0 at pci0 dev 31 function 0 "Intel 82801AA LPC Interface" rev 0x02
pciide0 at pci0 dev 31 function 1 "Intel 82801AA IDE" rev 0x02: DMA,
channel 0 wir
ed to compatibility, channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <QUANTUM FIREBALLP LM15>
wd0: can use 32-bit, PIO mode 4, DMA mode 2, Ultra-DMA mode 4
wd0: 16-sector PIO, LBA, 14324MB, 16383 cyl, 16 head, 63 sec, 29336832
sectors
pciide0: channel 0 interrupting at irq 14
wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 4 (using DMA data
transfers)
wd1 at pciide0 channel 1 drive 0: <QUANTUM FIREBALLP LM15>
wd1: can use 32-bit, PIO mode 4, DMA mode 2, Ultra-DMA mode 4
wd1: 16-sector PIO, LBA, 14324MB, 16383 cyl, 16 head, 63 sec, 29336832
sectors
pciide0: channel 1 interrupting at irq 15
wd1(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 2 (using DMA data
transfers)
"Intel 82801AA USB" rev 0x02 at pci0 dev 31 function 2 not configured
"Intel 82801AA SMBus" rev 0x02 at pci0 dev 31 function 3 not configured
isa0 at pcib0
isadma0 at isa0
pcppi0 at isa0 port 0x61
sysbeep0 at pcppi0
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
pcvt: got KEYB_R_RESEND
pcvt: no kbd detected
vt0 at isa0 port 0x60/16 irq 1: vga 80 col, color, 8 scr, unknown kbd
pms0 at vt0 irq 12
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec
biomask c040 netmask ce40 ttymask de42
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
Kernelized RAIDframe activated
IP Filter: v3.4.16 initialized.  Default = pass all, Logging = enabled
dkcsum: wd0 matched BIOS disk 80
dkcsum: wd1 matched BIOS disk 81
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
RAIDFRAME: protectedSectors is 64
raid0: Component /dev/wd0d being configured at row: 0 col: 0
         Row: 0 Column: 0 Num Rows: 1 Num Columns: 2
         Version: 2 Serial Number: 0 Mod Counter: 623
         Clean: No Status: 0
/dev/wd0d is not clean!
raid0: Component /dev/wd1d being configured at row: 0 col: 1
         Row: 0 Column: 1 Num Rows: 1 Num Columns: 2
         Version: 2 Serial Number: 0 Mod Counter: 623
         Clean: No Status: 0
/dev/wd1d is not clean!
RAIDFRAME: Configure (RAID Level 1): total number of sectors is 20479456
(9999 MB)
RAIDFRAME(RAID Level 1): Using 6 floating recon bufs with no head sep
limit
raid1: Component /dev/wd0e being configured at row: 0 col: 0
         Row: 0 Column: 0 Num Rows: 1 Num Columns: 2
         Version: 2 Serial Number: 1 Mod Counter: 501
         Clean: No Status: 0
/dev/wd0e is not clean!
raid1: Component /dev/wd1e being configured at row: 0 col: 1
         Row: 0 Column: 1 Num Rows: 1 Num Columns: 2
         Version: 2 Serial Number: 1 Mod Counter: 501
         Clean: No Status: 0
/dev/wd1e is not clean!
RAIDFRAME: Configure (RAID Level 1): total number of sectors is 8087104
(3948 MB)
RAIDFRAME(RAID Level 1): Using 6 floating recon bufs with no head sep
limit
IP Filter: already initialized