[Oisf-users] Packets stucked in Nfqueue when running inline

[Eric Leblond]

Hi,

On Thu, 2011-08-18 at 12:22 -0500, Fernando Ortiz wrote:
> All right. Now it is compiled and running. 
> 
> 
> Got several of these messages
> 
> 
> [19643] 18/8/2011 -- 12:07:11 - (tmqh-packetpool.c:165) <Info>
> (TmqhOutputPacketpool) -- Packet 0x4baa760 has been outed without
> verdict, dropping it
> [19643] 18/8/2011 -- 12:07:11 - (source-nfq.c:929) <Warning>
> (NFQSetVerdictRescue) -- [ERRCODE: UNKNOWN_ERROR(77)] - trying to
> issue verdict on 55786
> [19631] 18/8/2011 -- 12:07:11 - (source-nfq.c:698) <Warning>
> (NFQRecvPkt) -- [ERRCODE: UNKNOWN_ERROR(76)] - nfq_handle_packet error
> -1

Ouah sexy ! nfq_handle_packet is returning in error but the callback
function has not crashed (no message from her).

Could you try with the atached patch ? It could help to see what's going
on.

BR

> [19643] 18/8/2011 -- 12:07:12 - (tmqh-packetpool.c:165) <Info>
> (TmqhOutputPacketpool) -- Packet 0x52b0700 has been outed without
> verdict, dropping it
> [19643] 18/8/2011 -- 12:07:12 - (source-nfq.c:929) <Warning>
> (NFQSetVerdictRescue) -- [ERRCODE: UNKNOWN_ERROR(77)] - trying to
> issue verdict on 56096
> [19631] 18/8/2011 -- 12:07:12 - (source-nfq.c:698) <Warning>
> (NFQRecvPkt) -- [ERRCODE: UNKNOWN_ERROR(76)] - nfq_handle_packet error
> -1
> [19643] 18/8/2011 -- 12:07:12 - (tmqh-packetpool.c:165) <Info>
> (TmqhOutputPacketpool) -- Packet 0x53f6d00 has been outed without
> verdict, dropping it
> [19643] 18/8/2011 -- 12:07:12 - (source-nfq.c:929) <Warning>
> (NFQSetVerdictRescue) -- [ERRCODE: UNKNOWN_ERROR(77)] - trying to
> issue verdict on 56149
> [19631] 18/8/2011 -- 12:07:12 - (source-nfq.c:698) <Warning>
> (NFQRecvPkt) -- [ERRCODE: UNKNOWN_ERROR(76)] - nfq_handle_packet error
> -1
> [19643] 18/8/2011 -- 12:07:12 - (tmqh-packetpool.c:165) <Info>
> (TmqhOutputPacketpool) -- Packet 0x56a6880 has been outed without
> verdict, dropping it
> [19643] 18/8/2011 -- 12:07:12 - (source-nfq.c:929) <Warning>
> (NFQSetVerdictRescue) -- [ERRCODE: UNKNOWN_ERROR(77)] - trying to
> issue verdict on 56265
> [19630] 18/8/2011 -- 12:07:12 - (source-nfq.c:698) <Warning>
> (NFQRecvPkt) -- [ERRCODE: UNKNOWN_ERROR(76)] - nfq_handle_packet error
> -1
> [19643] 18/8/2011 -- 12:07:12 - (tmqh-packetpool.c:165) <Info>
> (TmqhOutputPacketpool) -- Packet 0x577b420 has been outed without
> verdict, dropping it
> [19643] 18/8/2011 -- 12:07:12 - (source-nfq.c:929) <Warning>
> (NFQSetVerdictRescue) -- [ERRCODE: UNKNOWN_ERROR(77)] - trying to
> issue verdict on 56304
> [19631] 18/8/2011 -- 12:07:12 - (source-nfq.c:698) <Warning>
> (NFQRecvPkt) -- [ERRCODE: UNKNOWN_ERROR(76)] - nfq_handle_packet error
> -1
> [19643] 18/8/2011 -- 12:07:14 - (tmqh-packetpool.c:165) <Info>
> (TmqhOutputPacketpool) -- Packet 0x542b440 has been outed without
> verdict, dropping it
> [19643] 18/8/2011 -- 12:07:14 - (source-nfq.c:929) <Warning>
> (NFQSetVerdictRescue) -- [ERRCODE: UNKNOWN_ERROR(77)] - trying to
> issue verdict on 61156
> [19630] 18/8/2011 -- 12:07:14 - (source-nfq.c:698) <Warning>
> (NFQRecvPkt) -- [ERRCODE: UNKNOWN_ERROR(76)] - nfq_handle_packet error
> -1
> 
> 
> 
> 
> Then it crashed.
> 
> 
> 

-- 
Eric Leblond 
Blog: http://home.regit.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-nfq-add-error-dump.patch
Type: text/x-patch
Size: 1342 bytes
Desc: not available
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20110818/6f0fca21/attachment-0002.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20110818/6f0fca21/attachment.sig>