Re: KERNEL: assertion tcp.c in 2.4.20

From: John Bradford (john@grabjohn.com)
Date: Tue Dec 24 2002 - 10:41:00 EST


> I have been seeing some odd errors in 2.4.20.
> KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
> KERNEL: assertion
> ((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
> at af_inet.c(689)
> KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
> KERNEL: assertion
> ((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
> at af_inet.c(689)
> KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
> KERNEL: assertion
> ((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
> at af_inet.c(689)
>
> Could some one tell me what that means and if I should be worried.
>
> Also I get alot other TCP: messages Could some one explain to me what
> these mean?
> TCP: drop open request from 63.65.68.246/33287
> TCP: drop open request from 24.184.185.85/3568
> TCP: drop open request from 24.184.185.85/3569
> TCP: drop open request from 24.184.185.85/3567
> TCP: drop open request from 24.184.185.85/3570
> TCP: drop open request from 24.184.185.85/3571
> TCP: drop open request from 24.184.185.85/3572
> TCP: drop open request from 24.184.185.85/3573
> TCP: drop open request from 24.184.185.85/3574
> TCP: drop open request from 24.184.185.85/3575
> NET: 147 messages suppressed.

Looks like a SYN flood. What is this machine being used for? It
might indicate a SYN flood attack, or trying to serve more connections
than the machine can handle.

John.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Tue Dec 31 2002 - 22:00:07 EST