Bug#583366: linux-image-2.6.32-5-xen-amd64: Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
Package: linux-2.6
Version: 2.6.32-13
Severity: normal
Hello,
I'm trying to setup a DomU running a router (Vyatta VC6, "live virtualization ready" version), but NATed packets seems to be dropped at Dom0 level (with tcpdump on DomU all look fine) and I obtain a lots of "Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet" in Dom0's syslog.
I also saw than Jeremy Fitzhardinge fix that bug the 19 May, so maybe we should update the kernel package : http://lists.xensource.com/archives/html/xen-devel/2010-05/msg01004.html
Thanks in advance,
Olivier
-- Package-specific info:
** Version:
Linux version 2.6.32-5-xen-amd64 (Debian 2.6.32-13) (maks@debian.org) (gcc version 4.3.4 (Debian 4.3.4-10) ) #1 SMP Mon May 17 20:24:46 UTC 2010
** Command line:
root=/dev/mapper/vg-lenny ro panic=300 rootdelay=5 console=tty0
** Not tainted
** Kernel log:
[ 3033.996890] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3034.915182] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3034.982097] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3035.921117] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3035.988976] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3036.911620] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3036.965206] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3037.862286] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3037.921329] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3038.853287] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3039.858051] __ratelimit: 1 callbacks suppressed
[ 3039.858180] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3039.925937] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3040.859104] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3040.925910] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3041.843634] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3041.907915] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3042.805334] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3042.868228] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3043.782347] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3043.846027] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3044.815064] __ratelimit: 1 callbacks suppressed
[ 3044.815190] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3045.747208] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3045.814434] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3046.753460] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3046.821353] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3047.750426] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3047.822838] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3048.705947] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3048.777645] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3049.668215] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3050.635898] __ratelimit: 1 callbacks suppressed
[ 3050.636028] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3050.708396] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3051.637855] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3051.713380] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3052.627120] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3052.703139] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3053.590658] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3053.663966] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3054.567439] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3054.639730] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3055.606359] __ratelimit: 1 callbacks suppressed
[ 3055.606486] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3056.523326] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 3056.598740] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 6354.543715] eth2: port 2(vif2.2) entering disabled state
[ 6354.555072] eth2: port 2(vif2.2) entering disabled state
[ 6354.847032] eth1: port 2(vif2.1) entering disabled state
[ 6354.877167] eth1: port 2(vif2.1) entering disabled state
[ 6355.402668] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6355.406210] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6355.406280] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6355.409074] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6355.409147] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6531.937937] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6531.938015] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6355.427301] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6355.684651] eth0: port 2(vif2.0) entering disabled state
[ 6355.696342] eth0: port 2(vif2.0) entering disabled state
[ 6417.389309] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.075994] device vif3.1 entered promiscuous mode
[ 6466.078011] eth1: port 2(vif3.1) entering forwarding state
[ 6466.078551] device vif3.0 entered promiscuous mode
[ 6466.084952] eth0: port 2(vif3.0) entering forwarding state
[ 6466.090462] device vif3.2 entered promiscuous mode
[ 6466.092915] eth2: port 2(vif3.2) entering forwarding state
[ 6581.116765] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.119425] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.121518] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.121592] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.129462] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.129540] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.131659] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.131731] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6466.131802] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 6404.892252] blkback: ring-ref 8, event-channel 15, protocol 2 (x86_32-abi)
[ 6476.146493] vif3.0: no IPv6 routers present
[ 6476.554198] vif3.1: no IPv6 routers present
[ 6476.878212] vif3.2: no IPv6 routers present
[ 6440.956678] Attempting to checksum a non-TCP/UDP packet, dropping a protocol 1 packet
[ 7004.279376] eth2: port 2(vif3.2) entering disabled state
[ 7004.291048] eth2: port 2(vif3.2) entering disabled state
[ 7004.453872] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7004.453954] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7004.454036] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7004.456867] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7004.456942] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7004.580816] eth1: port 2(vif3.1) entering disabled state
[ 7004.600692] eth1: port 2(vif3.1) entering disabled state
[ 7199.993957] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7199.994030] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7199.996696] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7005.390941] eth0: port 2(vif3.0) entering disabled state
[ 7005.402868] eth0: port 2(vif3.0) entering disabled state
[ 7200.814019] physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore.
[ 7014.755849] kjournald starting. Commit interval 5 seconds
[ 7014.929453] EXT3 FS on dm-2, internal journal
[ 7014.929564] EXT3-fs: mounted filesystem with ordered data mode.
** Model information
sys_vendor: System manufacturer
product_name: System Product Name
product_version: System Version
chassis_vendor: Chassis Manufacture
chassis_version: Chassis Version
bios_vendor: American Megatrends Inc.
bios_version: 0601
board_vendor: ASUSTeK Computer INC.
board_name: P7H55-M PRO
board_version: Rev 1.xx
** Loaded modules:
Module Size Used by
nf_conntrack_ipv4 9833 0
nf_defrag_ipv4 1139 1 nf_conntrack_ipv4
xt_state 1303 0
nf_conntrack 46567 2 nf_conntrack_ipv4,xt_state
xt_physdev 1508 0
iptable_filter 2258 0
ip_tables 13899 1 iptable_filter
x_tables 12845 3 xt_state,xt_physdev,ip_tables
bridge 39614 0
stp 1440 1 bridge
xen_evtchn 4259 1
xenfs 9568 1
snd_pcm 60535 0
snd_timer 15582 1 snd_pcm
snd 46446 2 snd_pcm,snd_timer
soundcore 4598 1 snd
snd_page_alloc 6249 1 snd_pcm
i2c_i801 7830 0
evdev 7352 0
i2c_core 15712 1 i2c_i801
tpm_tis 7336 0
tpm 9917 1 tpm_tis
tpm_bios 4521 1 tpm
pcspkr 1699 0
asus_atk0110 7686 0
button 4650 0
processor 36077 0
acpi_processor 5087 1 processor,[permanent]
ext3 106550 4
jbd 37101 1 ext3
mbcache 5050 1 ext3
dm_mirror 10923 0
dm_region_hash 6696 1 dm_mirror
dm_log 7381 2 dm_mirror,dm_region_hash
dm_snapshot 18529 0
dm_mod 53770 22 dm_mirror,dm_log,dm_snapshot
raid10 17697 1
raid1 18191 1
md_mod 73664 4 raid10,raid1
sd_mod 29777 12
crc_t10dif 1276 1 sd_mod
ahci 32358 8
ehci_hcd 31071 0
libata 133536 1 ahci
scsi_mod 122133 2 sd_mod,libata
r8169 28893 0
mii 3210 1 r8169
usbcore 121991 2 ehci_hcd
nls_base 6377 1 usbcore
thermal 11674 0
fan 3346 0
thermal_sys 11942 3 processor,thermal,fan
** Network interface configuration:
# Used by ifup(8) and ifdown(8). See the interfaces(5) manpage or
# /usr/share/doc/ifupdown/examples for more information.
auto lo
iface lo inet loopback
auto eth0
iface eth0 inet static
address 192.168.0.254
netmask 255.255.255.0
network 192.168.0.0
broadcast 192.168.0.255
gateway 192.168.0.1
post-up /usr/sbin/ethtool -K $IFACE tx off rx off
auto eth1
iface eth1 inet static
address 192.168.1.254
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
post-up /usr/sbin/ethtool -K $IFACE tx off rx off
auto eth2
iface eth2 inet static
address 192.168.2.254
netmask 255.255.255.0
network 192.168.2.0
broadcast 192.168.2.255
post-up /usr/sbin/ethtool -K $IFACE tx off rx off
** Network status:
*** IP interfaces and addresses:
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: peth0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether e0:cb:4e:e9:3e:e1 brd ff:ff:ff:ff:ff:ff
inet6 fe80::e2cb:4eff:fee9:3ee1/64 scope link
valid_lft forever preferred_lft forever
3: peth1: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 1000
link/ether 00:24:01:2e:1d:63 brd ff:ff:ff:ff:ff:ff
inet6 fe80::224:1ff:fe2e:1d63/64 scope link
valid_lft forever preferred_lft forever
4: peth2: <NO-CARRIER,BROADCAST,MULTICAST,PROMISC,UP> mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
link/ether 00:24:01:2e:1e:42 brd ff:ff:ff:ff:ff:ff
5: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether e0:cb:4e:e9:3e:e1 brd ff:ff:ff:ff:ff:ff
inet 192.168.0.254/24 brd 192.168.0.255 scope global eth0
inet6 fe80::e2cb:4eff:fee9:3ee1/64 scope link
valid_lft forever preferred_lft forever
6: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether 00:24:01:2e:1d:63 brd ff:ff:ff:ff:ff:ff
inet 192.168.1.254/24 brd 192.168.1.255 scope global eth1
inet6 fe80::224:1ff:fe2e:1d63/64 scope link
valid_lft forever preferred_lft forever
7: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN
link/ether 00:24:01:2e:1e:42 brd ff:ff:ff:ff:ff:ff
inet 192.168.2.254/24 brd 192.168.2.255 scope global eth2
inet6 fe80::224:1ff:fe2e:1e42/64 scope link
valid_lft forever preferred_lft forever
*** Device statistics:
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 6619 60 0 0 0 0 0 0 6619 60 0 0 0 0 0 0
peth0:78412283 65423 0 0 0 0 0 0 2210894 26815 0 0 0 0 0 0
peth1: 80185 513 0 0 0 0 0 0 51495 632 0 0 0 0 0 0
peth2: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
eth0:77024123 60071 0 0 0 0 0 2057 1920821 24883 0 0 0 0 0 0
eth1: 54070 269 0 0 0 0 0 269 468 6 0 0 0 0 0 0
eth2: 39080 125 0 0 0 0 0 125 468 6 0 0 0 0 0 0
*** Protocol statistics:
Ip:
59827 total packets received
0 forwarded
0 incoming packets discarded
58609 incoming packets delivered
24885 requests sent out
16 fragments dropped after timeout
16 reassemblies required
16 packet reassembles failed
Icmp:
6 ICMP messages received
0 input ICMP message failed.
Histogramme d'entrée ICMP
destination unreachable: 6
7 ICMP messages sent
0 ICMP messages failed
Histogramme de sortie ICMP
destination unreachable: 7
IcmpMsg:
InType3: 6
OutType3: 7
Tcp:
8 active connections openings
1 passive connection openings
0 failed connection attempts
1 connection resets received
1 connections established
57917 segments received
24762 segments send out
0 segments retransmited
0 bad segments received.
423 resets sent
Udp:
93 packets received
7 packets to unknown port received.
0 packet receive errors
116 packets sent
UdpLite:
TcpExt:
4 TCP sockets finished time wait in fast timer
87 delayed acks sent
52 packets directly queued to recvmsg prequeue.
14480 bytes directly in process context from backlog
75923 bytes directly received in process context from prequeue
49829 packet headers predicted
58 packets header predicted and directly queued to user
49 acknowledgments not containing data payload received
4344 predicted acknowledgments
1 connections reset due to early user close
IpExt:
InMcastPkts: 62
InBcastPkts: 524
InOctets: 77088675
OutOctets: 1577238
InMcastOctets: 1984
InBcastOctets: 91428
*** Device features:
eth0: 0x1800
eth1: 0x1800
eth2: 0x1800
lo: 0x13865
peth0: 0x180
peth1: 0x180
peth2: 0x180
** PCI devices:
not available
** USB devices:
not available
-- System Information:
Debian Release: 5.0.4
APT prefers stable
APT policy: (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.32-5-xen-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to fr_FR.UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages linux-image-2.6.32-5-xen-amd64 depends on:
ii debconf [debconf-2.0] 1.5.24 Debian configuration management sy
ii initramfs-tools 0.92o tools for generating an initramfs
ii linux-base 2.6.32-13 Linux image base package
ii module-init-tools 3.4-1 tools for managing Linux kernel mo
Versions of packages linux-image-2.6.32-5-xen-amd64 recommends:
ii firmware-linux-f 2.6.34-1~experimental.1 Binary firmware for various driver
Versions of packages linux-image-2.6.32-5-xen-amd64 suggests:
ii grub 0.97-47lenny2 GRand Unified Bootloader (Legacy v
pn linux-doc-2.6.32 <none> (no description available)
Versions of packages linux-image-2.6.32-5-xen-amd64 is related to:
pn firmware-bnx2 <none> (no description available)
pn firmware-bnx2x <none> (no description available)
pn firmware-ipw2x00 <none> (no description available)
pn firmware-ivtv <none> (no description available)
pn firmware-iwlwifi <none> (no description available)
ii firmware-linux 0.24~bpo50+1 Binary firmware for various driver
ii firmware-linux-no 0.24~bpo50+1 Binary firmware for various driver
pn firmware-qlogic <none> (no description available)
pn firmware-ralink <none> (no description available)
ii xen-hypervisor-4. 4.0.0-1~experimental.1 The Xen Hypervisor on AMD64
-- debconf information:
linux-image-2.6.32-5-xen-amd64/prerm/would-invalidate-boot-loader-2.6.32-5-xen-amd64: true
shared/kernel-image/really-run-bootloader: true
linux-image-2.6.32-5-xen-amd64/postinst/bootloader-test-error-2.6.32-5-xen-amd64:
linux-image-2.6.32-5-xen-amd64/prerm/removing-running-kernel-2.6.32-5-xen-amd64: true
linux-image-2.6.32-5-xen-amd64/postinst/depmod-error-initrd-2.6.32-5-xen-amd64: false
linux-image-2.6.32-5-xen-amd64/postinst/missing-firmware-2.6.32-5-xen-amd64:
linux-image-2.6.32-5-xen-amd64/postinst/bootloader-error-2.6.32-5-xen-amd64:
Reply to: