Re: what's an evil packet ?

Chris Underhill (cju@bison.ph.bham.ac.uk)
Tue, 8 Jul 1997 21:47:44 +0100 (GMT+0100)


-----BEGIN PGP SIGNED MESSAGE-----

On Tue, 8 Jul 1997, Harald Koenig wrote:

> On Jul 8, Harald Koenig wrote:
>
> > for the last 4 days we're getting the following message
> >
> > RPC: rpc_send sending evil packet:
> > c84adc5e 01000000 00000000 00000000 00000000 00000000 00000000 01000000
> >

Yep - I reported seeing this kind of message a week or two back. Had a
machine which has /home , /usr mounted over NFS lock up because of it.
Keyboard was dead, couldn't log in with ssh or telnet, did respond to
pings. The messages I got consisted of

Jun 29 14:23:25 solar30 kernel: RPC: rpc_doio sending evil packet:
Jun 29 14:23:25 solar30 kernel: 7e3cc852 01000000 00000000 00000000
00000000 00000000 00000000 72032531
Jun 29 14:23:25 solar30 kernel: RPC: rpc_send sending evil packet:
Jun 29 14:23:25 solar30 kernel: 7e3cc852 01000000 00000000 00000000
00000000 00000000 00000000 72032531

repeating every minute, along with "NFS server bison not responding...".

> and it looks like this is triggered by running "rc5v2" clients for the
> RC5 cracking effort (v2.002 binary for P6), as this program reports
> some locking errors from time to time and when killing all rc5v2 clients
> on a machine with NFS problems seems to fix these NFS hangs...

Funnily enough I was running rc5-linux-i486-bovine as well, and logging
its output to a subdirectory of my NFS-mounted home directory. Machine in
question is a cheapo pentium-100 running bog-standard 2.0.30, universal
NFS server 2.2beta25.

So far the problem has not reappeared but your report makes me think
the penguin maybe has some dodgy halibut in its larder :-)

Cheers,

Chris.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2i
Comment: PGP Signed with PineSign 2.0

iQCVAwUBM8KnYmZVEN0KDxVBAQFH0gP/QzF6J1G6fxtfW3RwyNTvu7tsGa4+EVNq
SJoHUybGeDoN2eYmrhx9Byr4ovh5xavBbqtPzJrtzJyZIQpJkEyNGIJEE3StNWaC
2/X+EKYaUVwgRz/RRBVmCXkUfs+/4S6bWZe3wLImS0Rh2UOlEuHf8dRHjfnQeEv5
STzb4Z0iUuQ=
=1kU3
-----END PGP SIGNATURE-----