Re: kernel: svc: bad direction / kernel: svc: short len 4, dropping request

[Neil Brown]

On Friday October 5, [e-mail] wrote:
> Hi,
> 
> I'm running Linux kernel 2.4.7, and I'm seeing the following in my syslog:
> 
> Oct  5 09:13:44 camelot kernel: svc: short len 4, dropping request
> Oct  5 09:13:45 camelot kernel: svc: short len 4, dropping request
> Oct  5 09:13:46 camelot kernel: svc: bad direction 525795537, dropping request
> Oct  5 09:13:46 camelot kernel: svc: short len 4, dropping request
> Oct  5 09:13:47 camelot kernel: svc: short len 4, dropping request
> Oct  5 09:13:48 camelot kernel: svc: bad direction 525861077, dropping request
> Oct  5 09:13:48 camelot kernel: svc: bad direction 525927291, dropping request
> Oct  5 09:13:48 camelot kernel: svc: bad direction 525992033, dropping request
> Oct  5 09:13:48 camelot kernel: svc: bad direction 526057939, dropping request
> Oct  5 09:13:48 camelot kernel: svc: bad direction 526123899, dropping request
> Oct  5 09:13:48 camelot kernel: svc: short len 4, dropping request
> Oct  5 09:13:49 camelot kernel: svc: short len 4, dropping request
> Oct  5 09:13:49 camelot kernel: svc: bad direction 526189001, dropping request
> Oct  5 09:13:50 camelot kernel: svc: short len 4, dropping request
> Oct  5 09:13:50 camelot kernel: svc: bad direction 526254179, dropping request
> 
> several (3 to 5) messages per second.
> 
> I have tracked down these messages to coming out of:
> 
>         /usr/src/linux/net/sunrpc/svc.c
> 
> but I do not understand what's triggering them, or what to do about
> them.

Looks like garbage packets are being delivered to either your NFS
server port (port 2049) or your lockd server port (run rpcinfo -p to
find the number).

I would run tcpdump on the interface watching for packets to those
ports from unexpected sources.

NeilBrown

> 
> any suggestions, pointers, hints appreciated.
> 
> thank you, and regards,
> 
> -Greg
> 
> ----------------------------------
> E-Mail: Gregory Hosler <[e-mail]>
> Date: 05-Oct-01
> Time: 11:23:35
> 
>    You can release software that's good, software that's inexpensive, or
>    software that's available on time.  You can usually release software
>    that has 2 of these 3 attributes -- but not all 3.
> 
> ----------------------------------
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
> the body of a message to [e-mail]
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/