From owner-freebsd-bugs@FreeBSD.ORG Fri Jan 16 06:10:01 2009 Return-Path: Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 58317106566B for ; Fri, 16 Jan 2009 06:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [IPv6:2001:4f8:fff6::28]) by mx1.freebsd.org (Postfix) with ESMTP id 333468FC13 for ; Fri, 16 Jan 2009 06:10:01 +0000 (UTC) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.14.3/8.14.3) with ESMTP id n0G6A1LU068702 for ; Fri, 16 Jan 2009 06:10:01 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.14.3/8.14.3/Submit) id n0G6A1d4068701; Fri, 16 Jan 2009 06:10:01 GMT (envelope-from gnats) Resent-Date: Fri, 16 Jan 2009 06:10:01 GMT Resent-Message-Id: <200901160610.n0G6A1d4068701@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Jason Chambers Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B7163106564A for ; Fri, 16 Jan 2009 06:09:24 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (www.freebsd.org [IPv6:2001:4f8:fff6::21]) by mx1.freebsd.org (Postfix) with ESMTP id 8AF378FC17 for ; Fri, 16 Jan 2009 06:09:24 +0000 (UTC) (envelope-from nobody@FreeBSD.org) Received: from www.freebsd.org (localhost [127.0.0.1]) by www.freebsd.org (8.14.3/8.14.3) with ESMTP id n0G69OtU038702 for ; Fri, 16 Jan 2009 06:09:24 GMT (envelope-from nobody@www.freebsd.org) Received: (from nobody@localhost) by www.freebsd.org (8.14.3/8.14.3/Submit) id n0G69O6b038695; Fri, 16 Jan 2009 06:09:24 GMT (envelope-from nobody) Message-Id: <200901160609.n0G69O6b038695@www.freebsd.org> Date: Fri, 16 Jan 2009 06:09:24 GMT From: Jason Chambers To: freebsd-gnats-submit@FreeBSD.org X-Send-Pr-Version: www-3.1 Cc: Subject: kern/130605: Certain hardware produces "Network is unreachable" errors for scanning tools X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 16 Jan 2009 06:10:01 -0000 >Number: 130605 >Category: kern >Synopsis: Certain hardware produces "Network is unreachable" errors for scanning tools >Confidential: no >Severity: serious >Priority: medium >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Jan 16 06:10:00 UTC 2009 >Closed-Date: >Last-Modified: >Originator: Jason Chambers >Release: 7.1 >Organization: UCLA >Environment: FreeBSD box 7.1-RELEASE-p2 FreeBSD 7.1-RELEASE-p2 #3: Thu Jan 15 21:39:37 PST 2009 user@box:/usr/obj/usr/src/sys/UCLA7-64 amd64 >Description: On certain hardware platforms FreeBSD has problems issuing multiple outbound requests as typically seen with network security auditing tools. The current hardware platform in question is a Dell PowerEdge SC1435. I have 4 of these servers and all exhibit the same symptoms. As an example, NMAP or Nessus fails to perform reconnaissance. Nessus does not produce much for errors; numerous "BIOCSRTIMEOUT: Invalid argument" pcap related error lines are found in the nessusd.dump log. The "scan" finishes within 6 seconds with the conclusion that all hosts are dead. The same Nessus build works without incident on other hardware platforms running the same version of FreeBSD. Using TCPDUMP I can see that requests are being sent on the network and the associated replies are being returned. Nmap is unable to scan a system because it immediately goes into a loop of the following: sendto in send_ip_packet: sendto(4, packet, 44, 0, xxx.xxx.xxx.xxx, 16) => Network is unreachable Offending packet: TCP xxx.xxx.xxx.xxx:55555 > xxx.xxx.xxx.xxx:80 S ttl=56 id=xxxx iplen=11264 seq=xxxx win=1024 Sleeping 15 seconds then retrying sendto in send_ip_packet: sendto(4, packet, 44, 0, xxx.xxx.xxx.xxx, 16) => Network is unreachable Offending packet: TCP xxx.xxx.xxx.xxx:55555 > xxx.xxx.xxx.xxx:80 S ttl=56 id=xxxx iplen=11264 seq=xxxx win=1024 Sleeping 60 seconds then retrying The same "Network is unreachable" messages appear if I attempt to ping a host while a Nessus scan is running. I found a PR from a long time ago (2006) that appears relevant but it was abandoned. Making updates to that PR does not kick off an email to the FreeBSD-bugs mailing list so I made the conclusion that it is not working with GNATS correctly and decided to open a new PR. http://www.freebsd.org/cgi/query-pr.cgi?pr=102741&cat= I tried using a different network controller (bge vs em) but this had no effect. I have dedicated one of these systems to troubleshooting this problem if anyone would like to provide pointers towards further debugging. Regards, --Jason >How-To-Repeat: >Fix: >Release-Note: >Audit-Trail: >Unformatted: