2.0.30 is the only stable combination that I have had on this production
server. It has been stable, uptimes of 45 days are not uncommon, but when
it goes down, it really goes down!
- liem
On Fri, 13 Mar 1998, Chris Evans wrote:
> Date: Fri, 13 Mar 1998 14:25:22 +0000 (GMT)
> From: Chris Evans <chris@ferret.lmh.ox.ac.uk>
> To: Liem Bahneman <roland@cobaltgroup.com>
> Cc: linux-kernel@vger.rutgers.edu
> Subject: Re: SYN flood = VFS: No free inodes - contact Linus?
>
>
> On Thu, 12 Mar 1998, Liem Bahneman wrote:
>
> > We've got a beefy server here that's crashed twice today. I dont know what
> > the cause of the crash, but syslog reported "VFS: No free inodes - contact
> > Linus" then a mix of SYN cookie warnings and inode warnings.
>
> Hmmm, 2.0.30? Isn't there a known inode leak in 2.0.30? Have you tried
> 2.0.32 or 2.0.33?
>
> > Specs:
> > ALR revolution 6x6 (6x ppro200)
> > 2.0.30
> > tulip.c 0.77 (only one stable with smp, locked in at 100bT/FD)
> > DPT 3334UW controller
> > BusLogic BT-950
>
> Nice kit!!
>
> >
> > syn/rst cookies on
>
> I think RST cookies have been declared potentially buggy?
>
> > always defrag
> > filehandles patch
>
> Hmmm, by "filehandles patch" do you mean 1,024 fd's per process? Certain
> patches implementing this were _horribly_ broken. I would check this.
>
> > ip_fragment.c patch (alan cox's and mount's)
> >
> >
> > It looks like the VFS error came first, then the spew of SYN warnings and
> > more VFS errors. Is this a problem with the filesyste? syn/rst cookies?
>
> Possibly the VFS message killed the machine's userland processes, but left
> the networking alive. The listen queues for the servers would then fill up
> and cause the SYN warnings you see.
>
> Of course the message (no free inodes) could be genuine, so remember you
> can bump up the amount of system inodes and files by echo'ing things into
> /proc/sys/kernel/*
>
> > This system hosts ~3500 web sites and has _800_ ip aliases, so its a
> > regular target of attacks (any one of 800 ips), but this is the most nasty
> > crash it has experienced. This specific crash has happened twice in a
> > month.
>
> What a site! Out of interest what's the longest it's been up? And under
> what sort of traffic load/load avg?!!
>
> Chris
>
>
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to majordomo@vger.rutgers.edu
>
============================================================================
Liem Bahneman roland@cobaltgroup.com
Senior Systems Administrator http://www.cobaltgroup.com/~roland
The Cobalt Group (206) 269-6363 x300
Seattle, Washington F(206) 269-6350
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu