ipfilter 3.4.28 / Solaris 8 kernel panic

Hello,

We're running ipfilter 3.4.28 on most of our Solaris boxes (around 30
machines in total). Generally it works very well, but we have seen a
couple of kernel panics in ipfilter code, the latest occuring this
morning. The machine is one of our mail servers - it had been up for
around 10 months and is running Solaris 8 Generic_108528-19. It wasn't
under heavy load at the time (~4:25AM).

In looking back at the ipfilter mailing list I see a couple of similar
problems but I couldn't find a resolution. I'd appreciate any thoughts
on this one.

Thanks,

Rich



Here's the stack info from the core:

SolarisCAT(vmcore.0)> panic
panic on cpu 0
panic string: BAD TRAP: type=9 rp=2a102e96a60 addr=b000b000b000b00
mmu_fsr=0
==== panic user thread: 0x300980963c0 pid: 29690 on cpu: 0 ====
cmd: /usr/iplanet/server5/bin/msg/store/bin/popd -d 5

t_stk: 0x2a102e97af0 sp: 0x10422e81 t_stkbase: 0x2a102e92000
t_pri: 59(TS) pctcpu: 0.418252 t_lwp: 0x30076fb60c0 machpcb:
0x2a102e97af0
t_procp: 0x300534a9570 p_as: 0x3001515fd90 hat: 0x3001530f388 cnum:
0x1855
size: 87031808 rss: 46923776
last cpuid: 0 idle: 0 ticks (0 seconds)
start: Wed Dec 17 01:23:54 2003
age: 3645 seconds (1 hours 45 seconds)
stime: 2521354543 (0 seconds later)
syscall: write (0xfe865e30, 0x0, 0x0)
tstate: TS_ONPROC - thread is being run on a processor
tflg: T_PANIC - thread initiated a system panic
tpflg: none set
tsched: TS_LOAD - thread is in memory
TS_DONT_SWAP - thread/LWP should not be swapped
pflag: SLOAD - in core
SULOAD - u-block in core
ASLWP - process uses an aslwp for async signals
- also overloaded to mean it is a MT process

pc: 0x100466a4 unix:panicsys+0x44: call unix:setjmp

unix:panicsys+0x44 (0x10423850, 0x2a102e966f8, 0x10052f60, 0x78002000,
0x0, 0x0)
unix:vpanic+0xcc (0x10052f60, 0x2a102e966f8, 0x20, 0x8, 0xc817c1d6, 0x0)
unix:panic+0x1c (0x10052f60, 0x9, 0x2a102e96a60, 0xb000b000b000b00, 0x0,
0x0)
unix:die+0xa4 (0x9, 0x2a102e96a60, 0xb000b000b000b00, 0x0,
0x2a102e96a60, 0xffff)
unix:trap+0x600 (0xb000b000b000000, 0x0, 0x0, 0x10000, 0x2a102e96a60, 0x0)
unix:sfmmu_tsb_miss+0x66c (0x104288f8, 0x0, 0x300001adf88, 0x0,
0x300001adf88, 0x19)
unix:prom_rtt+0x0 (0xb000b00, 0x30068d98c9c, 0x2a102e96c20,
0xb000b000b000b00, 0x0, 0x0)
<trap>ipf:fr_check+0xb18 (0x30068d98c9c, 0x14, 0x3000819e628, 0x1,
0x2a102e96f40, 0x2a102e97148)
ipf:fr_precheck+0xf74 (0x2a102e97148, 0x3000ad893f8, 0x2a102e96f40, 0x1,
0x0, 0x0)
ipf:fr_qout+0x528 (0x3000ad893f8, 0x300c88120c0, 0x20, 0x8, 0xc817c1d6,
0x0)
unix:putnext+0x1cc (0x3000ad88a78, 0x3000aa96830, 0x0, 0x300c88120c0,
0x0, 0x0)
ip:ip_wput_ire+0x7e0 (0xf0000000, 0x0, 0x3000ad88a78, 0x300c88120c0,
0x300b5ee7420, 0xffff)
ip:ip_wput+0x2b8 (0x0, 0x300a1ae0e68, 0x300b5ee7420, 0x300b4cbb1e8, 0x0,
0x0)
ipf:ipf_ip_qin+0x74 (0x300b5ee7420, 0x300c88120c0, 0x20, 0x111c, 0x5b4,
0x300abe22474)
unix:putnext+0x1cc (0x3000aa8de40, 0x300b45b4d18, 0x300c88120c0,
0x300c88120c0, 0x3000aa8de48, 0x3000aa8de40)
tcp:tcp_wput - frame recycled
tcp:tcp_wrw+0x54 (0x2a102e97730, 0x3008ced4140, 0x300b6886d80, 0x0, 0x1,
0x4000000)
genunix:rwnext+0x23c (0x300b6886de8, 0x300b6886ea8, 0x0, 0x300b6886d80,
0x2a102e97730, 0x10334304)
genunix:strput+0x38c (0x0, 0x2a102e97a00, 0x3009b1d21c0, 0x8, 0x0, 0x0)
genunix:strwrite+0x200 (0x850, 0x2a102e97930, 0x30006b38788, 0x1000000,
0x300b5edf640, 0x2a102e97a00)
sockfs:sock_write - frame recycled
genunix:write+0x204 (0x4a9c40a, 0x12c, 0x3, 0x300b45e7f90, 0x22, 0x12c)
genunix:write32+0x30 (0x22, 0x70da54, 0x12c, 0x2, 0xa21b50, 0x0)
unix:syscall_trap32+0xa8 (0x22, 0x70da54, 0x12c, 0x2, 0xa21b50, 0x0)
-- switch to user thread's user stack --


SolarisCAT(vmcore.0)> modinfo -p ipf
id flags modctl textaddr size cnt name
155 LIN 0x3000b8528b8 0x781e2000 0x29dc1 2 ipf (IP Filter: v3.4.28)
SolarisCAT(vmcore.0)>