[rc5] Re: what's an evil packet ?

Harald Koenig koenig at tat.physik.uni-tuebingen.de
Tue Jul 8 22:53:02 EDT 1997


On Jul 8, Harald Koenig wrote:

> for the last 4 days we're getting the following message
> 
> 	RPC: rpc_send sending evil packet:
> 	     c84adc5e 01000000 00000000 00000000 00000000 00000000 00000000 01000000
> 
> exactly every minute for just one dual-PPro200 box running Linux 2.0.30-SMP. 
> when this happens, the NFS traffic to one SGI IRIX 5.3 box ("ceres") is dead,
> while networking (ping, telnet etc.) to ceres is still OK and NFS to other
> SGI boxes doesn't have a problem.

I just realized that two more PCs (single-PPro, Linux-2.0.30) suffer the same problem,
and every machine mention different numbers:

	alamak.tat.physik.uni-tuebingen.de:
		c84adc5e 01000000 00000000 00000000 00000000 00000000 00000000 01000000

	taygeta.tat.physik.uni-tuebingen.de:
		e647d254 01000000 00000000 00000000 00000000 00000000 00000000 16000002

	mirach.tat.physik.uni-tuebingen.de:
		9558e752 01000000 00000000 00000000 00000000 00000000 00000000 01000000


and it looks like this is triggered by running "rc5v2" clients for the 
RC5 cracking effort (v2.002 binary for P6), as this program reports
some locking errors from time to time and when killing all rc5v2 clients
on a machine with NFS problems seems to fix these NFS hangs...

any idea what's wrong with rc5v2 and or Linux ?


Harald
--
All SCSI disks will from now on                     ___       _____
be required to send an email notice                0--,|    /OOOOOOO\
24 hours prior to complete hardware failure!      <_/  /  /OOOOOOOOOOO\
                                                    \  \/OOOOOOOOOOOOOOO\
                                                      \ OOOOOOOOOOOOOOOOO|//
Harald Koenig,                                         \/\/\/\/\/\/\/\/\/
Inst.f.Theoret.Astrophysik                              //  /     \\  \
koenig at tat.physik.uni-tuebingen.de                     ^^^^^       ^^^^^
----
To unsubscribe, send email to majordomo at llamas.net with 'unsubscribe rc5' in the body.



More information about the rc5 mailing list