In my daily security run output I am getting some intermittant failures for my ethernet and not sure if it's a sign of trouble or not. Here's the failures I've had recently extracted from the kernal log message:
fxp0 failed; interface ignored
]: creating IPv4 interface fxp0 failed; interface ignored
fxp0: <Intel 82562EZ (ICH5) Pro/100 VE Ethernet> port 0xa000-0xa03f mem
(rebooted message above)
ce fxp0 failed; interface ignored
fxp0 failed; interface ignored
14:53:08 serv-1 named[473]: creating IPv4 interface fxp0 failed; interface ignored
These are from 5/26 (first) to 6/3 (last)
Any suggestions?? The server itself seems to be running ok.
bsykes
Jun 3 2005, 10:34 AM
I'm assuming that your active IPv4 connection is on something other than fxp0, such as fxp1? Is this a total control server where it's having trouble talking to the TC admin device on fxp0?
No, it's not a total control server. It's an SM Super Server 2.8 I got around Feb 2004.
There's no fxp1.
I'm assuming that fxp0 is the ethernet card for accessing the internet.
dmsg shows:
fxp0: <Intel 82562EZ (ICH5) Pro/100 VE Ethernet> port 0xa000-0xa03f mem
Chris
bsykes
Jun 3 2005, 01:58 PM
Oh! Sorry, actually these look like named errors. If you look in /var/log/messages, does it list named as the culprit?
Yep, got a bunch of them:
Jun 3 12:53:08 serv-1 named[473]: could not listen on UDP socket: permission denied
Jun 3 12:53:08 serv-1 named[473]: creating IPv4 interface fxp0 failed; interface ignored
Jun 3 12:53:08 serv-1 named[473]: could not listen on UDP socket: permission denied
Jun 3 12:53:08 serv-1 named[473]: creating IPv4 interface fxp0 failed; interface ignored
Jun 3 12:53:08 serv-1 named[473]: could not listen on UDP socket: permission denied
Jun 3 12:53:08 serv-1 named[473]: creating IPv4 interface fxp0 failed; interface ignored
Jun 3 12:53:08 serv-1 named[473]: could not listen on UDP socket: permission denied
Jun 3 12:53:08 serv-1 named[473]: creating IPv4 interface fxp0 failed; interface ignored
Jun 3 12:53:08 serv-1 named[473]: could not listen on UDP socket: permission denied
any suggestions??
aledesma
Jun 4 2005, 06:00 PM
Is the ip/port already in use?
CODE
/usr/local/sbin/lsof -nPi4:53
do you have any custom sysctl settings?
CODE
sysctl -a net.inet.ip
...
CODE
serv-1# sysctl -a net.inet.ip
net.inet.ip.portrange.lowfirst: 1023
net.inet.ip.portrange.lowlast: 600
net.inet.ip.portrange.first: 49152
net.inet.ip.portrange.last: 65535
net.inet.ip.portrange.hifirst: 49152
net.inet.ip.portrange.hilast: 65535
net.inet.ip.portrange.reservedhigh: 1023
net.inet.ip.portrange.reservedlow: 0
net.inet.ip.forwarding: 0
net.inet.ip.redirect: 1
net.inet.ip.ttl: 64
net.inet.ip.rtexpire: 10
net.inet.ip.rtminexpire: 10
net.inet.ip.rtmaxcache: 128
net.inet.ip.sourceroute: 0
net.inet.ip.intr_queue_maxlen: 50
net.inet.ip.intr_queue_drops: 403
net.inet.ip.accept_sourceroute: 0
net.inet.ip.fastforwarding: 0
net.inet.ip.keepfaith: 0
net.inet.ip.gifttl: 30
net.inet.ip.subnets_are_local: 0
net.inet.ip.dummynet.hash_size: 64
net.inet.ip.dummynet.curr_time: 43669006
net.inet.ip.dummynet.ready_heap: 0
net.inet.ip.dummynet.extract_heap: 0
net.inet.ip.dummynet.searches: 0
net.inet.ip.dummynet.search_steps: 0
net.inet.ip.dummynet.expire: 1
net.inet.ip.dummynet.max_chain_len: 16
net.inet.ip.dummynet.red_lookup_depth: 256
net.inet.ip.dummynet.red_avg_pkt_size: 512
net.inet.ip.dummynet.red_max_pkt_size: 1500
net.inet.ip.fw.enable: 1
net.inet.ip.fw.autoinc_step: 100
net.inet.ip.fw.one_pass: 1
net.inet.ip.fw.debug: 1
net.inet.ip.fw.verbose: 1
net.inet.ip.fw.verbose_limit: 100
net.inet.ip.fw.dyn_buckets: 256
net.inet.ip.fw.curr_dyn_buckets: 256
net.inet.ip.fw.dyn_count: 0
net.inet.ip.fw.dyn_max: 4096
net.inet.ip.fw.static_count: 3
net.inet.ip.fw.dyn_ack_lifetime: 300
net.inet.ip.fw.dyn_syn_lifetime: 20
net.inet.ip.fw.dyn_fin_lifetime: 1
net.inet.ip.fw.dyn_rst_lifetime: 1
net.inet.ip.fw.dyn_udp_lifetime: 10
net.inet.ip.fw.dyn_short_lifetime: 5
net.inet.ip.fw.dyn_keepalive: 1
net.inet.ip.maxfragpackets: 800
net.inet.ip.maxfragsperpacket: 16
net.inet.ip.sendsourcequench: 0
net.inet.ip.check_interface: 1
CODE
serv-1# /usr/local/sbin/lsof -nPi4:53
lsof: WARNING: access /root/.lsof_serv-1: No such file or directory
lsof: WARNING: created device cache file: /root/.lsof_serv-1
COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME
named 290 bind 20u IPv4 0xc63a3c78 0t0 UDP 69.93.130.218:53
named 290 bind 21u IPv4 0xc63d1e10 0t0 TCP 69.93.130.218:53 (LISTEN)
named 290 bind 22u IPv4 0xc63a3d5c 0t0 UDP 69.56.190.136:53
named 290 bind 23u IPv4 0xc63d1ca8 0t0 TCP 69.56.190.136:53 (LISTEN)
named 290 bind 24u IPv4 0xc63a3e40 0t0 UDP 69.56.190.137:53
named 290 bind 25u IPv4 0xc63d1b40 0t0 TCP 69.56.190.137:53 (LISTEN)
named 290 bind 26u IPv4 0xc63a4000 0t0 UDP 69.56.190.138:53
named 290 bind 27u IPv4 0xc63d19d8 0t0 TCP 69.56.190.138:53 (LISTEN)
named 290 bind 28u IPv4 0xc63a3b94 0t0 UDP 69.56.190.139:53
named 290 bind 29u IPv4 0xc63d1870 0t0 TCP 69.56.190.139:53 (LISTEN)
named 290 bind 30u IPv4 0xc63a3ab0 0t0 UDP 69.56.190.140:53
named 290 bind 31u IPv4 0xc63d1708 0t0 TCP 69.56.190.140:53 (LISTEN)
named 290 bind 32u IPv4 0xc63a39cc 0t0 UDP 69.56.190.141:53
named 290 bind 33u IPv4 0xc63d15a0 0t0 TCP 69.56.190.141:53 (LISTEN)
named 290 bind 34u IPv4 0xc63a38e8 0t0 UDP 69.56.190.142:53
named 290 bind 35u IPv4 0xc63d1438 0t0 TCP 69.56.190.142:53 (LISTEN)
named 290 bind 36u IPv4 0xc63a3804 0t0 UDP 69.56.190.143:53
named 290 bind 37u IPv4 0xc63d12d0 0t0 TCP 69.56.190.143:53 (LISTEN)
named 290 bind 38u IPv4 0xc63a3720 0t0 UDP 69.93.130.219:53
named 290 bind 39u IPv4 0xc63d1168 0t0 TCP 69.93.130.219:53 (LISTEN)
named 290 bind 40u IPv4 0xc63a363c 0t0 UDP 69.93.130.220:53
named 290 bind 41u IPv4 0xc63d1000 0t0 TCP 69.93.130.220:53 (LISTEN)
named 290 bind 42u IPv4 0xc63a3558 0t0 UDP 69.93.130.221:53
named 290 bind 43u IPv4 0xc63d2000 0t0 TCP 69.93.130.221:53 (LISTEN)
named 290 bind 44u IPv4 0xc63a3474 0t0 UDP 69.93.130.222:53
named 290 bind 45u IPv4 0xc63d42d0 0t0 TCP 69.93.130.222:53 (LISTEN)
named 290 bind 46u IPv4 0xc63a3390 0t0 UDP 127.0.0.1:53
named 290 bind 47u IPv4 0xc63d4168 0t0 TCP 127.0.0.1:53 (LISTEN)
That's what I get....
X-Istence
Jun 9 2005, 05:17 PM
QUOTE (nocfed)
Is the ip/port already in use?
CODE
/usr/local/sbin/lsof -nPi4:53
...
Could instead have used:
sockstat -p 53
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.