Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Firewalls
[Top] [All Lists]

Re: CheckPoint Splat problem

Subject: Re: CheckPoint Splat problem
Date: Mon, 16 Jan 2006 09:59:28 +0100
Hello,

 We had similar problem .... but with bcm5700 1G, cards on double CPU 
servers. Nodes recycled every 24 - 48 h (depending on traffic loads) 
because of kernel panic. 

Oops: 0002
Kernel 2.4.9-42cpsmp
CPU:    0
EIP:    0010:[<f8c84ce3>]    Tainted: PF
EFLAGS: 00010286
EIP is at MM_IndicateTxPackets [bcm5700] 0x33 
eax: f63b4914   ebx: 85760140   ecx: 85762df0   edx: 00000240
esi: 00000000   edi: 85760140   ebp: f63b4914   esp: f4c3bf38
ds: 0018   es: 0018   ss: 0018
Process in.ahttpd (pid: 5232, stackpage=f4c3b000)
Stack: f4c3a000 85762df0 85760140 85760140 ffffffff 00000000 85760000 
f8c8b0b1
       85760140 85760140 00000050 f8c82520 85760140 854464c0 00000000 
04000001
       00000016 80108d2e 00000016 85760000 f4c3bfc4 f4c3bfc4 80317ac0 
00000016
Call Trace: [<f8c8b0b1>] LM_ServiceInterrupts [bcm5700] 0xd1 
[<f8c82520>] bcm5700_intr_on [bcm5700] 0x1490 
[<80108d2e>] handle_IRQ_event [kernel] 0x5e 
[<80108f34>] do_IRQ [kernel] 0xa4 
[<8021e16c>] call_do_IRQ [kernel] 0x5 
Code: f0 ff 4e 70 0f 94 c0 84 c0 74 2b 8b 0c 24 8b 41 34 9c 5b fa 

It was very closely tight with SMP kernel and bcm module. We got following 
info from checkpoint support:

Date: Tuesday, March 30, 2004, 5:41:54 PM
Subject: SPLAT core dumps

  Bcm5700 has known stability issue with SPLAT which is under
investigation right now.

So we replaced NICs with Intel's ones and it works now very well.

K.




<adrian.coelho@wipro.com> 
13.01.2006 06:59

To
<firewalls@securityfocus.com>
cc

Subject
CheckPoint Splat problem






Hi All,
 
I m facing a very strange problem.......I m having a checkpoint r55w 
management server installed on a windows 2000/IBM x346 server. The 
enforcement module is installed on splat r55w and is running on a ibmx346 
in a HA-load sharing mode(Unicast). there is a primary server sharing 30% 
and secondary server sharing 70% of the load.
my problem is that the secondary server reboots abruptly with the 
following errors.....
 
chkpt2 kernel: Uhhuh. NMI received for unknown reason 35.
chkpt2 kernel: Dazed and confused, but trying to continue
chkpt2 kernel: Do you have a strange power saving mode enabled?
chkpt2 kernel: NETDEV WATCHDOG: eth2: transmit timed out
chkpt2 kernel: NETDEV WATCHDOG: eth3: transmit timed out
chkpt2 kernel: bcm5700: eth2 NIC Link is Up, 100 Mbps full duplex
chkpt2 kernel: bcm5700: eth3 NIC Link is Up, 100 Mbps full duplex
chkpt2 syslogd 1.4.1: restart.
 
The server restarts and during this there is no failover of "sessions" 
from one server to another causing a downtime of say 4-5 min.......I have 
changed the hardware for this machine including NIC cards). Also, checked 
that there is no power saving mode available for the server..
 
Can anybody help me in this....?
 
Rgds,
Adrian

The information contained in this electronic message and any attachments 
to this message are intended for the exclusive use of the addressee(s) and 
may contain proprietary, confidential or privileged information. If you 
are not the intended recipient, you should not disseminate, distribute or 
copy this e-mail. Please notify the sender immediately and destroy all 
copies of this message and any attachments. 

WARNING: Computer viruses can be transmitted via email. The recipient 
should check this email and any attachments for the presence of viruses. 
The company accepts no liability for any damage caused by any virus 
transmitted by this email.

www.wipro.com

<Prev in Thread] Current Thread [Next in Thread>