Date: Mon, 25 Apr 2005 07:54:55 -0500 From: "Fafa Diliha Romanova" <fteg@london.com> To: questions@freebsd.org Subject: It keeps CRrrASHING!! Message-ID: <20050425125455.DB0344BEB1@ws1-1.us4.outblaze.com>
next in thread | raw e-mail | index | archive | help
Hey!
I am running FreeBSD 5.4-STABLE on a Pentium 120.
Since three days ago, it has been crashing regularly, leaving me with
no choice but to shut it off and back on. I have absolutely no idea what
might be wrong. The server has a lot of free HD space. It ain't
experiencing no overload that I'm aware of. Everything should be smooth.
Maybe it's the network interface. Or the fact that I just replaced
IPFW with PF. Because this only seems to happen when I surf the net and
download stuff from the workstation behind it.=20
# dmesg
Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
The Regents of the University of California. All rights reserved.
FreeBSD 5.4-STABLE #1: Wed Apr 13 18:30:43 CEST 2005
johann@ninja.ashagill.com:/usr/obj/usr/src/sys/NINJA
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Pentium/P54C (119.75-MHz 586-class CPU)
Origin =3D "GenuineIntel" Id =3D 0x52c Stepping =3D 12
Features=3D0x1bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8>
real memory =3D 100663296 (96 MB)
avail memory =3D 93040640 (88 MB)
Intel Pentium detected, installing workaround for F00F bug
npx0: <math processor> on motherboard
npx0: INT 16 interface
cpu0 on motherboard
pcib0: <Host to PCI bridge> pcibus 0 on motherboard
pci0: <PCI bus> on pcib0
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
pci0: <display, VGA> at device 8.0 (no driver attached)
lnc0: <PCNet/PCI Ethernet adapter> port 0xff80-0xff9f irq 10 at device 11.0=
on p
ci0
lnc0: Attaching PCNet/PCI Ethernet adapter
lnc0: Ethernet address: 00:00:4b:30:1e:94
lnc0: if_start running deferred for Giant
lnc0: PCnet-PCI
pci0: <multimedia, audio> at device 17.0 (no driver attached)
pci0: <display, VGA> at device 19.0 (no driver attached)
orm0: <ISA Option ROMs> at iomem 0xed000-0xedfff,0xc0000-0xc7fff on isa0
ata0 at port 0x3f6,0x1f0-0x1f7 irq 14 on isa0
ata1 at port 0x376,0x170-0x177 irq 15 on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x64,0x60 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
fdc0: <Enhanced floppy controller> at port 0x3f0-0x3f5 irq 6 drq 2 on isa0
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=3D0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ep0: <3Com 3C509B-Combo EtherLink III (PnP)> at port 0x210-0x21f irq 3 on i=
sa0
ep0: Ethernet address: 00:a0:24:1b:2b:a6
unknown: <PNP0303> can't assign resources (port)
psmcpnp0: irq resource info is missing; assuming irq 12
unknown: <PNP0700> can't assign resources (port)
unknown: <PNP0501> can't assign resources (port)
unknown: <PNP0680> can't assign resources (port)
unknown: <PNP0680> can't assign resources (port)
Timecounter "TSC" frequency 119753102 Hz quality 800
Timecounters tick every 10.000 msec
ad0: 38166MB <WDC WD400AB-00BVA0/21.01H21> [77545/16/63] at ata0-master PIO4
Mounting root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
pflog0: promiscuous mode enabled
pflog0: promiscuous mode disabled
lnc0: promiscuous mode enabled
# grep "Apr 25" /var/log/messages
Apr 25 14:16:57 ninja kernel: lnc0: Start of packet found before end of pre=
vious in transmit ring -- Resetting
Apr 25 14:19:39 ninja kernel: lnc0: Start of packet found before end of pre=
vious in transmit ring -- Resetting
Apr 25 14:22:14 ninja kernel: lnc0: Start of packet found before end of pre=
vious in transmit ring -- Resetting
Apr 25 14:28:20 ninja sshd[878]: error: PAM: authentication error for johan=
n from urban.terrabionic.lan
Apr 25 14:44:26 ninja syslogd: kernel boot file is /boot/kernel/kernel
Apr 25 14:44:26 ninja kernel: Copyright (c) 1992-2005 The FreeBSD Project.
Apr 25 14:44:26 ninja kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1=
989, 1991, 1992, 1993, 1994
Apr 25 14:44:26 ninja kernel: The Regents of the University of California. =
All rights reserved.
Apr 25 14:44:26 ninja kernel: FreeBSD 5.4-STABLE #1: Wed Apr 13 18:30:43 CE=
ST 2005
Apr 25 14:44:26 ninja kernel: johann@ninja.ashagill.com:/usr/obj/usr/src/sy=
s/NINJA
Apr 25 14:44:26 ninja kernel: Timecounter "i8254" frequency 1193182 Hz qual=
ity 0
Apr 25 14:44:26 ninja kernel: CPU: Pentium/P54C (119.75-MHz 586-class CPU)
Apr 25 14:44:26 ninja kernel: Origin =3D "GenuineIntel" Id =3D 0x52c Step=
ping =3D 12
Apr 25 14:44:26 ninja kernel: Features=3D0x1bf<FPU,VME,DE,PSE,TSC,MSR,MCE,C=
X8>
Apr 25 14:44:26 ninja kernel: real memory =3D 100663296 (96 MB)
Apr 25 14:44:26 ninja kernel: avail memory =3D 93040640 (88 MB)
Apr 25 14:44:26 ninja kernel: Intel Pentium detected, installing workaround=
for F00F bug
Apr 25 14:44:26 ninja kernel: npx0: <math processor> on motherboard
Apr 25 14:44:26 ninja kernel: npx0: INT 16 interface
Apr 25 14:44:26 ninja kernel: cpu0 on motherboard
Apr 25 14:44:26 ninja kernel: pcib0: <Host to PCI bridge> pcibus 0 on mothe=
rboard
Apr 25 14:44:26 ninja kernel: pci0: <PCI bus> on pcib0
Apr 25 14:44:26 ninja kernel: isab0: <PCI-ISA bridge> at device 7.0 on pci0
Apr 25 14:44:26 ninja kernel: isa0: <ISA bus> on isab0
Apr 25 14:44:26 ninja kernel: pci0: <display, VGA> at device 8.0 (no driver=
attached)
Apr 25 14:44:26 ninja kernel: lnc0: <PCNet/PCI Ethernet adapter> port 0xff8=
0-0xff9f irq 10 at device 11.0 on pci0
Apr 25 14:44:26 ninja kernel: lnc0: Attaching PCNet/PCI Ethernet adapter
Apr 25 14:44:26 ninja kernel: lnc0: Ethernet address: 00:00:4b:30:1e:94
Apr 25 14:44:26 ninja kernel: lnc0: if_start running deferred for Giant
Apr 25 14:44:26 ninja kernel: lnc0: PCnet-PCI
Apr 25 14:44:26 ninja kernel: pci0: <multimedia, audio> at device 17.0 (no =
driver attached)
Apr 25 14:44:26 ninja kernel: pci0: <display, VGA> at device 19.0 (no drive=
r attached)
Apr 25 14:44:26 ninja kernel: orm0: <ISA Option ROMs> at iomem 0xed000-0xed=
fff,0xc0000-0xc7fff on isa0
Apr 25 14:44:26 ninja kernel: ata0 at port 0x3f6,0x1f0-0x1f7 irq 14 on isa0
Apr 25 14:44:26 ninja kernel: ata1 at port 0x376,0x170-0x177 irq 15 on isa0
Apr 25 14:44:26 ninja kernel: atkbdc0: <Keyboard controller (i8042)> at por=
t 0x64,0x60 on isa0
Apr 25 14:44:26 ninja kernel: atkbd0: <AT Keyboard> irq 1 on atkbdc0
Apr 25 14:44:26 ninja kernel: kbd0 at atkbd0
Apr 25 14:44:26 ninja kernel: fdc0: <Enhanced floppy controller> at port 0x=
3f0-0x3f5 irq 6 drq 2 on isa0
Apr 25 14:44:26 ninja kernel: fd0: <1440-KB 3.5" drive> on fdc0 drive 0
Apr 25 14:44:26 ninja kernel: sc0: <System console> at flags 0x100 on isa0
Apr 25 14:44:26 ninja kernel: sc0: VGA <16 virtual consoles, flags=3D0x300>
Apr 25 14:44:26 ninja kernel: sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on =
isa0
Apr 25 14:44:26 ninja kernel: sio0: type 16550A
Apr 25 14:44:26 ninja kernel: sio1: configured irq 3 not in bitmap of probe=
d irqs 0
Apr 25 14:44:26 ninja kernel: sio1: port may not be enabled
Apr 25 14:44:26 ninja kernel: vga0: <Generic ISA VGA> at port 0x3c0-0x3df i=
omem 0xa0000-0xbffff on isa0
Apr 25 14:44:26 ninja kernel: ep0: <3Com 3C509B-Combo EtherLink III (PnP)> =
at port 0x210-0x21f irq 3 on isa0
Apr 25 14:44:26 ninja kernel: ep0: Ethernet address: 00:a0:24:1b:2b:a6
Apr 25 14:44:26 ninja kernel: unknown: <PNP0303> can't assign resources (po=
rt)
Apr 25 14:44:26 ninja kernel: psmcpnp0: irq resource info is missing; assum=
ing irq 12
Apr 25 14:44:26 ninja kernel: unknown: <PNP0700> can't assign resources (po=
rt)
Apr 25 14:44:26 ninja kernel: unknown: <PNP0501> can't assign resources (po=
rt)
Apr 25 14:44:26 ninja kernel: unknown: <PNP0680> can't assign resources (po=
rt)
Apr 25 14:44:26 ninja kernel: unknown: <PNP0680> can't assign resources (po=
rt)
Apr 25 14:44:26 ninja kernel: Timecounter "TSC" frequency 119753102 Hz qual=
ity 800
Apr 25 14:44:26 ninja kernel: Timecounters tick every 10.000 msec
Apr 25 14:44:26 ninja kernel: ad0: 38166MB <WDC WD400AB-00BVA0/21.01H21> [7=
7545/16/63] at ata0-master PIO4
Apr 25 14:44:26 ninja kernel: Mounting root from ufs:/dev/ad0s1a
Apr 25 14:44:26 ninja kernel: WARNING: / was not properly dismounted
Apr 25 14:44:26 ninja kernel: WARNING: /tmp was not properly dismounted
Apr 25 14:44:26 ninja kernel: WARNING: /usr was not properly dismounted
Apr 25 14:44:26 ninja kernel: WARNING: /var was not properly dismounted
Apr 25 14:44:27 ninja named[285]: starting BIND 9.3.0 -u bind -t /var/named
Apr 25 14:44:29 ninja named[285]: command channel listening on 127.0.0.1#953
Apr 25 14:44:29 ninja named[285]: command channel listening on ::1#953
Apr 25 14:44:35 ninja kernel: pflog0: promiscuous mode enabled
Apr 25 14:44:35 ninja kernel: pflog0: promiscuous mode disabled
Apr 25 14:45:05 ninja postfix/postfix-script: fatal: the Postfix mail syste=
m is already running
Apr 25 14:45:09 ninja kernel: lnc0: promiscuous mode enabled
Apr 25 14:45:09 ninja snort: Initializing daemon mode
Apr 25 14:45:09 ninja snort: PID path stat checked out ok, PID path set to =
/var/run/
Apr 25 14:45:10 ninja snort: Writing PID "598" to file "/var/run//snort_lnc=
0.pid"
Apr 25 14:45:10 ninja snort: Parsing Rules file /usr/local/etc/snort.conf
Apr 25 14:45:10 ninja snort: ,-----------[Flow Config]----------------------
Apr 25 14:45:10 ninja snort: | Stats Interval: 0
Apr 25 14:45:10 ninja snort: | Hash Method: 2
Apr 25 14:45:10 ninja snort: | Memcap: 10485760
Apr 25 14:45:10 ninja snort: | Rows : 4099
Apr 25 14:45:10 ninja snort: | Overhead Bytes: 16400(%0.16)
Apr 25 14:45:10 ninja snort: `----------------------------------------------
Apr 25 14:45:10 ninja snort: HttpInspect Config:
Apr 25 14:45:10 ninja snort: GLOBAL CONFIG
Apr 25 14:45:10 ninja snort: Max Pipeline Requests: 0
Apr 25 14:45:10 ninja snort: Inspection Type: STATELESS
Apr 25 14:45:10 ninja snort: Detect Proxy Usage: NO
Apr 25 14:45:10 ninja snort: IIS Unicode Map Filename: /usr/local/etc=
/unicode.map
Apr 25 14:45:10 ninja snort: IIS Unicode Map Codepage: 1252
Apr 25 14:45:10 ninja snort: DEFAULT SERVER CONFIG:
Apr 25 14:45:10 ninja snort: Ports: 80 8080 8180
Apr 25 14:45:10 ninja snort: Flow Depth: 300
Apr 25 14:45:10 ninja snort: Max Chunk Length: 500000
Apr 25 14:45:10 ninja snort: Inspect Pipeline Requests: YES
Apr 25 14:45:10 ninja snort: URI Discovery Strict Mode: NO
Apr 25 14:45:10 ninja snort: Allow Proxy Usage: NO
Apr 25 14:45:10 ninja snort: Disable Alerting: NO
Apr 25 14:45:10 ninja snort: Oversize Dir Length: 500
Apr 25 14:45:10 ninja snort: Only inspect URI: NO
Apr 25 14:45:10 ninja snort: Ascii: YES alert: NO
Apr 25 14:45:10 ninja snort: Double Decoding: YES alert: YES
Apr 25 14:45:10 ninja snort: %U Encoding: YES alert: YES
Apr 25 14:45:10 ninja snort: Bare Byte: YES alert: YES
Apr 25 14:45:10 ninja snort: Base36: OFF
Apr 25 14:45:10 ninja snort: UTF 8: OFF
Apr 25 14:45:10 ninja snort: IIS Unicode: YES alert: YES
Apr 25 14:45:10 ninja snort: Multiple Slash: YES alert: NO
Apr 25 14:45:10 ninja snort: IIS Backslash: YES alert: NO
Apr 25 14:45:10 ninja snort: Directory Traversal: YES alert: NO
Apr 25 14:45:10 ninja snort: Web Root Traversal: YES alert: YES
Apr 25 14:45:10 ninja snort: Apache WhiteSpace: YES alert: NO
Apr 25 14:45:10 ninja snort: IIS Delimiter: YES alert: NO
Apr 25 14:45:10 ninja snort: IIS Unicode Map: GLOBAL IIS UNICODE MAP =
CONFIG
Apr 25 14:45:10 ninja snort: Non-RFC Compliant Characters: NONE
Apr 25 14:45:10 ninja snort: rpc_decode arguments:
Apr 25 14:45:10 ninja snort: Ports to decode RPC on: 111 32771
Apr 25 14:45:10 ninja snort: alert_fragments: INACTIVE
Apr 25 14:45:10 ninja snort: alert_large_fragments: ACTIVE
Apr 25 14:45:10 ninja snort: alert_incomplete: ACTIVE
Apr 25 14:45:10 ninja snort: alert_multiple_requests: ACTIVE
Apr 25 14:45:11 ninja snort: telnet_decode arguments:
Apr 25 14:45:11 ninja snort: Ports to decode telnet on: 21 23 25 119
Apr 25 14:45:11 ninja snort: Portscan Detection Config:
Apr 25 14:45:11 ninja snort: Detect Protocols: TCP UDP ICMP IP
Apr 25 14:45:11 ninja snort: Detect Scan Type: portscan portsweep deco=
y_portscan distributed_portscan
Apr 25 14:45:11 ninja snort: Sensitivity Level: Low
Apr 25 14:45:11 ninja snort: Memcap (in bytes): 10000000
Apr 25 14:45:11 ninja snort: Number of Nodes: 36900
Apr 25 14:45:11 ninja snort:
Apr 25 14:45:18 ninja init: kernel security level changed from 0 to 1
Apr 25 14:45:28 ninja snort: Warning: flowbits key 'realplayer.playlist' is=
checked but not ever set.
Apr 25 14:45:28 ninja snort: Warning: flowbits key 'smb.tree.create.llsrpc'=
is set but not ever checked.
Apr 25 14:45:28 ninja snort: Warning: flowbits key 'ms_sql_seen_dns' is che=
cked but not ever set.
Apr 25 14:45:28 ninja snort:
Apr 25 14:45:28 ninja snort: +-----------------------[thresholding-config]-=
---------------------------------
Apr 25 14:45:28 ninja snort: | memory-cap : 1048576 bytes
Apr 25 14:45:28 ninja snort: +-----------------------[thresholding-global]-=
---------------------------------
Apr 25 14:45:28 ninja snort: | none
Apr 25 14:45:28 ninja snort: +-----------------------[thresholding-local]--=
---------------------------------
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D3152 type=3DT=
hreshold tracking=3Dsrc count=3D5 seconds=3D2
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D2923 type=3DT=
hreshold tracking=3Ddst count=3D10 seconds=3D60
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D2924 type=3DT=
hreshold tracking=3Ddst count=3D10 seconds=3D60
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D2495 type=3DB=
oth tracking=3Ddst count=3D20 seconds=3D60
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D3273 type=3DT=
hreshold tracking=3Dsrc count=3D5 seconds=3D2
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D2523 type=3DB=
oth tracking=3Ddst count=3D10 seconds=3D10
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D2496 type=3DB=
oth tracking=3Ddst count=3D20 seconds=3D60
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D2494 type=3DB=
oth tracking=3Ddst count=3D20 seconds=3D60
Apr 25 14:45:28 ninja snort: | gen-id=3D1 sig-id=3D2275 type=3DT=
hreshold tracking=3Ddst count=3D5 seconds=3D60
Apr 25 14:45:28 ninja snort: +-----------------------[suppression]---------=
---------------------------------
Apr 25 14:45:28 ninja snort: | none
Apr 25 14:45:28 ninja snort: +---------------------------------------------=
---------------------------------
Apr 25 14:45:28 ninja snort: Rule application order: ->activation->dynamic-=
>alert->pass->log
Apr 25 14:45:28 ninja snort: Log directory =3D /var/log/snort
Apr 25 14:45:36 ninja snort: Snort initialization completed successfully (p=
id=3D598)
Apr 25 14:46:19 ninja fsck: /dev/ad0s1e: 9 files, 6 used, 506481 free (41 f=
rags, 63305 blocks, 0.0% fragmentation)
I hope someone can tell me what's wrong!
Thanks!
--=20
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050425125455.DB0344BEB1>