betolj / ndpi-netfilter

GNU General Public License v2.0
126 stars 69 forks source link

Kernel Panic when you have high traffic volume. #67

Closed elciobortolin closed 6 years ago

elciobortolin commented 6 years ago

I'm using the latest version of ndpi-netfilter. I found a problem that occurs when there is high traffic on 50 or 100 Mbps links. Between two or three hours kernel panic occurs if you use rules with ndpi-netfilter. The same does not occur on low speed links. Is there any problem reported on this?

elico commented 6 years ago

@elciobortolin Have you tried: https://github.com/vel21ripn/nDPI ?

rightkick commented 6 years ago

Seems to be a known issue for some time. It depends also how iptables are constructed on how frequently the issue occurs.

On Mar 1, 2018 13:43, "elciobortolin" notifications@github.com wrote:

I'm using the latest version of ndpi-netfilter. I found a problem that occurs when there is high traffic on 50 or 100 Mbps links. Between two or three hours kernel panic occurs if you use rules with ndpi-netfilter. The same does not occur on low speed links. Is there any problem reported on this?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/betolj/ndpi-netfilter/issues/67, or mute the thread https://github.com/notifications/unsubscribe-auth/AOedfGe_QbU146ZlzvZ0NhrKKcAk1KO1ks5tZ97NgaJpZM4SYLQr .

elciobortolin commented 6 years ago

This problem occurs every 2 hours on average. It happens with simple rules like: iptables -A FORWARD -m ndpi --facebook -j DROP

OR any other protocol used.

----- Mensagem original -----

De: "Alex" notifications@github.com Para: "betolj/ndpi-netfilter" ndpi-netfilter@noreply.github.com Cc: "elciobortolin" ebortolin@nwise.com.br, "Mention" mention@noreply.github.com Enviadas: Terça-feira, 6 de Março de 2018 3:33:43 Assunto: Re: [betolj/ndpi-netfilter] Kernel Panic when you have high traffic volume. (#67)

Seems to be a known issue for some time. It depends also how iptables are constructed on how frequently the issue occurs.

On Mar 1, 2018 13:43, "elciobortolin" notifications@github.com wrote:

I'm using the latest version of ndpi-netfilter. I found a problem that occurs when there is high traffic on 50 or 100 Mbps links. Between two or three hours kernel panic occurs if you use rules with ndpi-netfilter. The same does not occur on low speed links. Is there any problem reported on this?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/betolj/ndpi-netfilter/issues/67, or mute the thread https://github.com/notifications/unsubscribe-auth/AOedfGe_QbU146ZlzvZ0NhrKKcAk1KO1ks5tZ97NgaJpZM4SYLQr ..

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .

rightkick commented 6 years ago

You may change to:

iptables -A FORWARD -i -m ndpi --facebook -j DROP

where In_Interface is the interface where requested user traffic comes in then check if it crashes.

On Tue, Mar 6, 2018 at 1:23 PM, elciobortolin notifications@github.com wrote:

This problem occurs every 2 hours on average. It happens with simple rules like: iptables -A FORWARD -m ndpi --facebook -j DROP

OR any other protocol used.

----- Mensagem original -----

De: "Alex" notifications@github.com Para: "betolj/ndpi-netfilter" ndpi-netfilter@noreply.github.com Cc: "elciobortolin" ebortolin@nwise.com.br, "Mention" < mention@noreply.github.com> Enviadas: Terça-feira, 6 de Março de 2018 3:33:43 Assunto: Re: [betolj/ndpi-netfilter] Kernel Panic when you have high traffic volume. (#67)

Seems to be a known issue for some time. It depends also how iptables are constructed on how frequently the issue occurs.

On Mar 1, 2018 13:43, "elciobortolin" notifications@github.com wrote:

I'm using the latest version of ndpi-netfilter. I found a problem that occurs when there is high traffic on 50 or 100 Mbps links. Between two or three hours kernel panic occurs if you use rules with ndpi-netfilter. The same does not occur on low speed links. Is there any problem reported on this?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/betolj/ndpi-netfilter/issues/67, or mute the thread https://github.com/notifications/unsubscribe-auth/AOedfGe_ QbU146ZlzvZ0NhrKKcAk1KO1ks5tZ97NgaJpZM4SYLQr ..

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/betolj/ndpi-netfilter/issues/67#issuecomment-370750355, or mute the thread https://github.com/notifications/unsubscribe-auth/AOedfGayHWa6hjKOiH1hY1re4CBiNcIkks5tbnGogaJpZM4SYLQr .

elciobortolin commented 6 years ago

I will try to set the interface in the rule.

De: "Alex" notifications@github.com Para: "betolj/ndpi-netfilter" ndpi-netfilter@noreply.github.com Cc: "elciobortolin" ebortolin@nwise.com.br, "Mention" mention@noreply.github.com Enviadas: Terça-feira, 6 de Março de 2018 8:26:06 Assunto: Re: [betolj/ndpi-netfilter] Kernel Panic when you have high traffic volume. (#67)

You may change to:

iptables -A FORWARD -i -m ndpi --facebook -j DROP

where In_Interface is the interface where requested user traffic comes in then check if it crashes.

On Tue, Mar 6, 2018 at 1:23 PM, elciobortolin notifications@github.com wrote:

This problem occurs every 2 hours on average. It happens with simple rules like: iptables -A FORWARD -m ndpi --facebook -j DROP

OR any other protocol used.

----- Mensagem original -----

De: "Alex" notifications@github.com Para: "betolj/ndpi-netfilter" ndpi-netfilter@noreply.github.com Cc: "elciobortolin" ebortolin@nwise.com.br, "Mention" < mention@noreply.github.com> Enviadas: Terça-feira, 6 de Março de 2018 3:33:43 Assunto: Re: [betolj/ndpi-netfilter] Kernel Panic when you have high traffic volume. (#67)

Seems to be a known issue for some time. It depends also how iptables are constructed on how frequently the issue occurs.

On Mar 1, 2018 13:43, "elciobortolin" notifications@github.com wrote:

I'm using the latest version of ndpi-netfilter. I found a problem that occurs when there is high traffic on 50 or 100 Mbps links. Between two or three hours kernel panic occurs if you use rules with ndpi-netfilter. The same does not occur on low speed links. Is there any problem reported on this?

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/betolj/ndpi-netfilter/issues/67, or mute the thread <https://github.com/notifications/unsubscribe-auth/AOedfGe_ QbU146ZlzvZ0NhrKKcAk1KO1ks5tZ97NgaJpZM4SYLQr> ..

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/betolj/ndpi-netfilter/issues/67#issuecomment-370750355, or mute the thread https://github.com/notifications/unsubscribe-auth/AOedfGayHWa6hjKOiH1hY1re4CBiNcIkks5tbnGogaJpZM4SYLQr .

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .