It keeps CRrrASHING!!

Mon Apr 25 05:52:57 PDT 2005

Hey!

I am running FreeBSD 5.4-STABLE on a Pentium 120.

Since three days ago, it has been crashing regularly, leaving me with
no choice but to shut it off and back on. I have absolutely no idea what
might be wrong. The server has a lot of free HD space. It ain't
experiencing no overload that I'm aware of. Everything should be smooth.

Maybe it's the network interface. Or the fact that I just replaced
IPFW with PF. Because this only seems to happen when I surf the net and
download stuff from the workstation behind it. 

# dmesg

Copyright (c) 1992-2005 The FreeBSD Project.
Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
        The Regents of the University of California. All rights reserved.
FreeBSD 5.4-STABLE #1: Wed Apr 13 18:30:43 CEST 2005
    johann at ninja.ashagill.com:/usr/obj/usr/src/sys/NINJA
Timecounter "i8254" frequency 1193182 Hz quality 0
CPU: Pentium/P54C (119.75-MHz 586-class CPU)
  Origin = "GenuineIntel"  Id = 0x52c  Stepping = 12
  Features=0x1bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8>
real memory  = 100663296 (96 MB)
avail memory = 93040640 (88 MB)
Intel Pentium detected, installing workaround for F00F bug
npx0: <math processor> on motherboard
npx0: INT 16 interface
cpu0 on motherboard
pcib0: <Host to PCI bridge> pcibus 0 on motherboard
pci0: <PCI bus> on pcib0
isab0: <PCI-ISA bridge> at device 7.0 on pci0
isa0: <ISA bus> on isab0
pci0: <display, VGA> at device 8.0 (no driver attached)
lnc0: <PCNet/PCI Ethernet adapter> port 0xff80-0xff9f irq 10 at device 11.0 on p
ci0
lnc0: Attaching PCNet/PCI Ethernet adapter
lnc0: Ethernet address: 00:00:4b:30:1e:94
lnc0: if_start running deferred for Giant
lnc0: PCnet-PCI
pci0: <multimedia, audio> at device 17.0 (no driver attached)
pci0: <display, VGA> at device 19.0 (no driver attached)
orm0: <ISA Option ROMs> at iomem 0xed000-0xedfff,0xc0000-0xc7fff on isa0
ata0 at port 0x3f6,0x1f0-0x1f7 irq 14 on isa0
ata1 at port 0x376,0x170-0x177 irq 15 on isa0
atkbdc0: <Keyboard controller (i8042)> at port 0x64,0x60 on isa0
atkbd0: <AT Keyboard> irq 1 on atkbdc0
kbd0 at atkbd0
fdc0: <Enhanced floppy controller> at port 0x3f0-0x3f5 irq 6 drq 2 on isa0
fd0: <1440-KB 3.5" drive> on fdc0 drive 0
sc0: <System console> at flags 0x100 on isa0
sc0: VGA <16 virtual consoles, flags=0x300>
sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
sio0: type 16550A
sio1: configured irq 3 not in bitmap of probed irqs 0
sio1: port may not be enabled
vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
ep0: <3Com 3C509B-Combo EtherLink III (PnP)> at port 0x210-0x21f irq 3 on isa0
ep0: Ethernet address: 00:a0:24:1b:2b:a6
unknown: <PNP0303> can't assign resources (port)
psmcpnp0: irq resource info is missing; assuming irq 12
unknown: <PNP0700> can't assign resources (port)
unknown: <PNP0501> can't assign resources (port)
unknown: <PNP0680> can't assign resources (port)
unknown: <PNP0680> can't assign resources (port)
Timecounter "TSC" frequency 119753102 Hz quality 800
Timecounters tick every 10.000 msec
ad0: 38166MB <WDC WD400AB-00BVA0/21.01H21> [77545/16/63] at ata0-master PIO4
Mounting root from ufs:/dev/ad0s1a
WARNING: / was not properly dismounted
WARNING: /tmp was not properly dismounted
WARNING: /usr was not properly dismounted
WARNING: /var was not properly dismounted
pflog0: promiscuous mode enabled
pflog0: promiscuous mode disabled
lnc0: promiscuous mode enabled

# grep "Apr 25" /var/log/messages

Apr 25 14:16:57 ninja kernel: lnc0: Start of packet found before end of previous in transmit ring -- Resetting
Apr 25 14:19:39 ninja kernel: lnc0: Start of packet found before end of previous in transmit ring -- Resetting
Apr 25 14:22:14 ninja kernel: lnc0: Start of packet found before end of previous in transmit ring -- Resetting
Apr 25 14:28:20 ninja sshd[878]: error: PAM: authentication error for johann from urban.terrabionic.lan
Apr 25 14:44:26 ninja syslogd: kernel boot file is /boot/kernel/kernel
Apr 25 14:44:26 ninja kernel: Copyright (c) 1992-2005 The FreeBSD Project.
Apr 25 14:44:26 ninja kernel: Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
Apr 25 14:44:26 ninja kernel: The Regents of the University of California. All rights reserved.
Apr 25 14:44:26 ninja kernel: FreeBSD 5.4-STABLE #1: Wed Apr 13 18:30:43 CEST 2005
Apr 25 14:44:26 ninja kernel: johann at ninja.ashagill.com:/usr/obj/usr/src/sys/NINJA
Apr 25 14:44:26 ninja kernel: Timecounter "i8254" frequency 1193182 Hz quality 0
Apr 25 14:44:26 ninja kernel: CPU: Pentium/P54C (119.75-MHz 586-class CPU)
Apr 25 14:44:26 ninja kernel: Origin = "GenuineIntel"  Id = 0x52c  Stepping = 12
Apr 25 14:44:26 ninja kernel: Features=0x1bf<FPU,VME,DE,PSE,TSC,MSR,MCE,CX8>
Apr 25 14:44:26 ninja kernel: real memory  = 100663296 (96 MB)
Apr 25 14:44:26 ninja kernel: avail memory = 93040640 (88 MB)
Apr 25 14:44:26 ninja kernel: Intel Pentium detected, installing workaround for F00F bug
Apr 25 14:44:26 ninja kernel: npx0: <math processor> on motherboard
Apr 25 14:44:26 ninja kernel: npx0: INT 16 interface
Apr 25 14:44:26 ninja kernel: cpu0 on motherboard
Apr 25 14:44:26 ninja kernel: pcib0: <Host to PCI bridge> pcibus 0 on motherboard
Apr 25 14:44:26 ninja kernel: pci0: <PCI bus> on pcib0
Apr 25 14:44:26 ninja kernel: isab0: <PCI-ISA bridge> at device 7.0 on pci0
Apr 25 14:44:26 ninja kernel: isa0: <ISA bus> on isab0
Apr 25 14:44:26 ninja kernel: pci0: <display, VGA> at device 8.0 (no driver attached)
Apr 25 14:44:26 ninja kernel: lnc0: <PCNet/PCI Ethernet adapter> port 0xff80-0xff9f irq 10 at device 11.0 on pci0
Apr 25 14:44:26 ninja kernel: lnc0: Attaching PCNet/PCI Ethernet adapter
Apr 25 14:44:26 ninja kernel: lnc0: Ethernet address: 00:00:4b:30:1e:94
Apr 25 14:44:26 ninja kernel: lnc0: if_start running deferred for Giant
Apr 25 14:44:26 ninja kernel: lnc0: PCnet-PCI
Apr 25 14:44:26 ninja kernel: pci0: <multimedia, audio> at device 17.0 (no driver attached)
Apr 25 14:44:26 ninja kernel: pci0: <display, VGA> at device 19.0 (no driver attached)
Apr 25 14:44:26 ninja kernel: orm0: <ISA Option ROMs> at iomem 0xed000-0xedfff,0xc0000-0xc7fff on isa0
Apr 25 14:44:26 ninja kernel: ata0 at port 0x3f6,0x1f0-0x1f7 irq 14 on isa0
Apr 25 14:44:26 ninja kernel: ata1 at port 0x376,0x170-0x177 irq 15 on isa0
Apr 25 14:44:26 ninja kernel: atkbdc0: <Keyboard controller (i8042)> at port 0x64,0x60 on isa0
Apr 25 14:44:26 ninja kernel: atkbd0: <AT Keyboard> irq 1 on atkbdc0
Apr 25 14:44:26 ninja kernel: kbd0 at atkbd0
Apr 25 14:44:26 ninja kernel: fdc0: <Enhanced floppy controller> at port 0x3f0-0x3f5 irq 6 drq 2 on isa0
Apr 25 14:44:26 ninja kernel: fd0: <1440-KB 3.5" drive> on fdc0 drive 0
Apr 25 14:44:26 ninja kernel: sc0: <System console> at flags 0x100 on isa0
Apr 25 14:44:26 ninja kernel: sc0: VGA <16 virtual consoles, flags=0x300>
Apr 25 14:44:26 ninja kernel: sio0 at port 0x3f8-0x3ff irq 4 flags 0x10 on isa0
Apr 25 14:44:26 ninja kernel: sio0: type 16550A
Apr 25 14:44:26 ninja kernel: sio1: configured irq 3 not in bitmap of probed irqs 0
Apr 25 14:44:26 ninja kernel: sio1: port may not be enabled
Apr 25 14:44:26 ninja kernel: vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0
Apr 25 14:44:26 ninja kernel: ep0: <3Com 3C509B-Combo EtherLink III (PnP)> at port 0x210-0x21f irq 3 on isa0
Apr 25 14:44:26 ninja kernel: ep0: Ethernet address: 00:a0:24:1b:2b:a6
Apr 25 14:44:26 ninja kernel: unknown: <PNP0303> can't assign resources (port)
Apr 25 14:44:26 ninja kernel: psmcpnp0: irq resource info is missing; assuming irq 12
Apr 25 14:44:26 ninja kernel: unknown: <PNP0700> can't assign resources (port)
Apr 25 14:44:26 ninja kernel: unknown: <PNP0501> can't assign resources (port)
Apr 25 14:44:26 ninja kernel: unknown: <PNP0680> can't assign resources (port)
Apr 25 14:44:26 ninja kernel: unknown: <PNP0680> can't assign resources (port)
Apr 25 14:44:26 ninja kernel: Timecounter "TSC" frequency 119753102 Hz quality 800
Apr 25 14:44:26 ninja kernel: Timecounters tick every 10.000 msec
Apr 25 14:44:26 ninja kernel: ad0: 38166MB <WDC WD400AB-00BVA0/21.01H21> [77545/16/63] at ata0-master PIO4
Apr 25 14:44:26 ninja kernel: Mounting root from ufs:/dev/ad0s1a
Apr 25 14:44:26 ninja kernel: WARNING: / was not properly dismounted
Apr 25 14:44:26 ninja kernel: WARNING: /tmp was not properly dismounted
Apr 25 14:44:26 ninja kernel: WARNING: /usr was not properly dismounted
Apr 25 14:44:26 ninja kernel: WARNING: /var was not properly dismounted
Apr 25 14:44:27 ninja named[285]: starting BIND 9.3.0 -u bind -t /var/named
Apr 25 14:44:29 ninja named[285]: command channel listening on 127.0.0.1#953
Apr 25 14:44:29 ninja named[285]: command channel listening on ::1#953
Apr 25 14:44:35 ninja kernel: pflog0: promiscuous mode enabled
Apr 25 14:44:35 ninja kernel: pflog0: promiscuous mode disabled
Apr 25 14:45:05 ninja postfix/postfix-script: fatal: the Postfix mail system is already running
Apr 25 14:45:09 ninja kernel: lnc0: promiscuous mode enabled
Apr 25 14:45:09 ninja snort: Initializing daemon mode
Apr 25 14:45:09 ninja snort: PID path stat checked out ok, PID path set to /var/run/
Apr 25 14:45:10 ninja snort: Writing PID "598" to file "/var/run//snort_lnc0.pid"
Apr 25 14:45:10 ninja snort: Parsing Rules file /usr/local/etc/snort.conf
Apr 25 14:45:10 ninja snort: ,-----------[Flow Config]----------------------
Apr 25 14:45:10 ninja snort: | Stats Interval:  0
Apr 25 14:45:10 ninja snort: | Hash Method:     2
Apr 25 14:45:10 ninja snort: | Memcap:          10485760
Apr 25 14:45:10 ninja snort: | Rows  :          4099
Apr 25 14:45:10 ninja snort: | Overhead Bytes:  16400(%0.16)
Apr 25 14:45:10 ninja snort: `----------------------------------------------
Apr 25 14:45:10 ninja snort: HttpInspect Config:
Apr 25 14:45:10 ninja snort:     GLOBAL CONFIG
Apr 25 14:45:10 ninja snort:       Max Pipeline Requests:    0
Apr 25 14:45:10 ninja snort:       Inspection Type:          STATELESS
Apr 25 14:45:10 ninja snort:       Detect Proxy Usage:       NO
Apr 25 14:45:10 ninja snort:       IIS Unicode Map Filename: /usr/local/etc/unicode.map
Apr 25 14:45:10 ninja snort:       IIS Unicode Map Codepage: 1252
Apr 25 14:45:10 ninja snort:     DEFAULT SERVER CONFIG:
Apr 25 14:45:10 ninja snort:       Ports: 80 8080 8180
Apr 25 14:45:10 ninja snort:       Flow Depth: 300
Apr 25 14:45:10 ninja snort:       Max Chunk Length: 500000
Apr 25 14:45:10 ninja snort:       Inspect Pipeline Requests: YES
Apr 25 14:45:10 ninja snort:       URI Discovery Strict Mode: NO
Apr 25 14:45:10 ninja snort:       Allow Proxy Usage: NO
Apr 25 14:45:10 ninja snort:       Disable Alerting: NO
Apr 25 14:45:10 ninja snort:       Oversize Dir Length: 500
Apr 25 14:45:10 ninja snort:       Only inspect URI: NO
Apr 25 14:45:10 ninja snort:       Ascii: YES alert: NO
Apr 25 14:45:10 ninja snort:       Double Decoding: YES alert: YES
Apr 25 14:45:10 ninja snort:       %U Encoding: YES alert: YES
Apr 25 14:45:10 ninja snort:       Bare Byte: YES alert: YES
Apr 25 14:45:10 ninja snort:       Base36: OFF
Apr 25 14:45:10 ninja snort:       UTF 8: OFF
Apr 25 14:45:10 ninja snort:       IIS Unicode: YES alert: YES
Apr 25 14:45:10 ninja snort:       Multiple Slash: YES alert: NO
Apr 25 14:45:10 ninja snort:       IIS Backslash: YES alert: NO
Apr 25 14:45:10 ninja snort:       Directory Traversal: YES alert: NO
Apr 25 14:45:10 ninja snort:       Web Root Traversal: YES alert: YES
Apr 25 14:45:10 ninja snort:       Apache WhiteSpace: YES alert: NO
Apr 25 14:45:10 ninja snort:       IIS Delimiter: YES alert: NO
Apr 25 14:45:10 ninja snort:       IIS Unicode Map: GLOBAL IIS UNICODE MAP CONFIG
Apr 25 14:45:10 ninja snort:       Non-RFC Compliant Characters: NONE
Apr 25 14:45:10 ninja snort: rpc_decode arguments:
Apr 25 14:45:10 ninja snort:     Ports to decode RPC on: 111 32771
Apr 25 14:45:10 ninja snort:     alert_fragments: INACTIVE
Apr 25 14:45:10 ninja snort:     alert_large_fragments: ACTIVE
Apr 25 14:45:10 ninja snort:     alert_incomplete: ACTIVE
Apr 25 14:45:10 ninja snort:     alert_multiple_requests: ACTIVE
Apr 25 14:45:11 ninja snort: telnet_decode arguments:
Apr 25 14:45:11 ninja snort:     Ports to decode telnet on: 21 23 25 119
Apr 25 14:45:11 ninja snort: Portscan Detection Config:
Apr 25 14:45:11 ninja snort:     Detect Protocols:  TCP UDP ICMP IP
Apr 25 14:45:11 ninja snort:     Detect Scan Type:  portscan portsweep decoy_portscan distributed_portscan
Apr 25 14:45:11 ninja snort:     Sensitivity Level: Low
Apr 25 14:45:11 ninja snort:     Memcap (in bytes): 10000000
Apr 25 14:45:11 ninja snort:     Number of Nodes:   36900
Apr 25 14:45:11 ninja snort:
Apr 25 14:45:18 ninja init: kernel security level changed from 0 to 1
Apr 25 14:45:28 ninja snort: Warning: flowbits key 'realplayer.playlist' is checked but not ever set.
Apr 25 14:45:28 ninja snort: Warning: flowbits key 'smb.tree.create.llsrpc' is set but not ever checked.
Apr 25 14:45:28 ninja snort: Warning: flowbits key 'ms_sql_seen_dns' is checked but not ever set.
Apr 25 14:45:28 ninja snort:
Apr 25 14:45:28 ninja snort: +-----------------------[thresholding-config]----------------------------------
Apr 25 14:45:28 ninja snort: | memory-cap : 1048576 bytes
Apr 25 14:45:28 ninja snort: +-----------------------[thresholding-global]----------------------------------
Apr 25 14:45:28 ninja snort: | none
Apr 25 14:45:28 ninja snort: +-----------------------[thresholding-local]-----------------------------------
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=3152       type=Threshold tracking=src count=5   seconds=2
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=2923       type=Threshold tracking=dst count=10  seconds=60
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=2924       type=Threshold tracking=dst count=10  seconds=60
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=2495       type=Both      tracking=dst count=20  seconds=60
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=3273       type=Threshold tracking=src count=5   seconds=2
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=2523       type=Both      tracking=dst count=10  seconds=10
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=2496       type=Both      tracking=dst count=20  seconds=60
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=2494       type=Both      tracking=dst count=20  seconds=60
Apr 25 14:45:28 ninja snort: | gen-id=1      sig-id=2275       type=Threshold tracking=dst count=5   seconds=60
Apr 25 14:45:28 ninja snort: +-----------------------[suppression]------------------------------------------
Apr 25 14:45:28 ninja snort: | none
Apr 25 14:45:28 ninja snort: +------------------------------------------------------------------------------
Apr 25 14:45:28 ninja snort: Rule application order: ->activation->dynamic->alert->pass->log
Apr 25 14:45:28 ninja snort: Log directory = /var/log/snort
Apr 25 14:45:36 ninja snort: Snort initialization completed successfully (pid=598)
Apr 25 14:46:19 ninja fsck: /dev/ad0s1e: 9 files, 6 used, 506481 free (41 frags, 63305 blocks, 0.0% fragmentation)

I hope someone can tell me what's wrong!
Thanks!

-- 
___________________________________________________________
Sign-up for Ads Free at Mail.com
http://promo.mail.com/adsfreejump.htm