2002-12-24 15:10:06

by Byron Albert

Subject: KERNEL: assertion tcp.c in 2.4.20

I have been seeing some odd errors in 2.4.20.
KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
KERNEL: assertion
((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
at af_inet.c(689)
KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
KERNEL: assertion
((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
at af_inet.c(689)
KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
KERNEL: assertion
((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
at af_inet.c(689)

Could some one tell me what that means and if I should be worried.

Also I get alot other TCP: messages Could some one explain to me what
these mean?
TCP: drop open request from 63.65.68.246/33287
TCP: drop open request from 24.184.185.85/3568
TCP: drop open request from 24.184.185.85/3569
TCP: drop open request from 24.184.185.85/3567
TCP: drop open request from 24.184.185.85/3570
TCP: drop open request from 24.184.185.85/3571
TCP: drop open request from 24.184.185.85/3572
TCP: drop open request from 24.184.185.85/3573
TCP: drop open request from 24.184.185.85/3574
TCP: drop open request from 24.184.185.85/3575
NET: 147 messages suppressed.
TCP: Treason uncloaked! Peer 140.209.113.48:1925/80 shrinks window
3097980073:3097986643. Repaired.
TCP: Treason uncloaked! Peer 140.209.113.48:1926/80 shrinks window
3100043056:3100045976. Repaired.
TCP: Treason uncloaked! Peer 63.239.93.2:59895/80 shrinks window
2412715752:2412716256. Repaired.
TCP: Treason uncloaked! Peer 207.191.34.140:38341/80 shrinks window
3633908228:3633911148. Repaired.
TCP: Treason uncloaked! Peer 140.198.144.111:1510/80 shrinks window
185415981:185424093. Repaired.
TCP: Treason uncloaked! Peer 140.198.144.111:1510/80 shrinks window
185415981:185424093. Repaired.
TCP: Treason uncloaked! Peer 140.198.144.111:1546/80 shrinks window
1260894648:1260899637. Repaired.
TCP: Treason uncloaked! Peer 140.198.144.111:1546/80 shrinks window
1260894648:1260899637. Repaired.
TCP: Treason uncloaked! Peer 140.198.144.111:49159/80 shrinks window
1415173927:1415183499. Repaired.
TCP: Treason uncloaked! Peer 140.198.144.111:49159/80 shrinks window
1415173927:1415183499. Repaired.



Thanks
Byron

2002-12-24 15:21:03

by John Bradford

Subject: Re: KERNEL: assertion tcp.c in 2.4.20

> I have been seeing some odd errors in 2.4.20.
> KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
> KERNEL: assertion
> ((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
> at af_inet.c(689)
> KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
> KERNEL: assertion
> ((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
> at af_inet.c(689)
> KERNEL: assertion (newsk->state != TCP_SYN_RECV) failed at tcp.c(2229)
> KERNEL: assertion
> ((1<<sk2->state)&(TCPF_ESTABLISHED|TCPF_CLOSE_WAIT|TCPF_CLOSE)) failed
> at af_inet.c(689)
>
> Could some one tell me what that means and if I should be worried.
>
> Also I get alot other TCP: messages Could some one explain to me what
> these mean?
> TCP: drop open request from 63.65.68.246/33287
> TCP: drop open request from 24.184.185.85/3568
> TCP: drop open request from 24.184.185.85/3569
> TCP: drop open request from 24.184.185.85/3567
> TCP: drop open request from 24.184.185.85/3570
> TCP: drop open request from 24.184.185.85/3571
> TCP: drop open request from 24.184.185.85/3572
> TCP: drop open request from 24.184.185.85/3573
> TCP: drop open request from 24.184.185.85/3574
> TCP: drop open request from 24.184.185.85/3575
> NET: 147 messages suppressed.

Looks like a SYN flood. What is this machine being used for? It
might indicate a SYN flood attack, or trying to serve more connections
than the machine can handle.

John.