[Kernel-packages] [Bug 1686099] Re: connection flood to port 445 on mounting cifs volume under kernel
I've got the same flood here, on port 445, across my LAN. If I block that port, I get a flood instead via port 139. There was 1MB/s upload/download between my Windows 10 machine and a Raspberry Pi 3 (4.9.24-v7+). I blocked that and had the same flood between two Raspberry Pi 3s. The same thing happened if I fired up my Lubuntu boxes (I can't remember if it was the 4.4.0-75-generic or the 4.8.0-29-generic, and I can't re- enable Samba right now on the network, as it's "live" and I don't want to disrupt the web service). Have had to temporarily block all 139/445 Samba traffic on all networked machines, just allowing 139 and 445 from my Windows 10 machine, which is tolerable, as I need to be able to access network shared folders. I've attached a screenshot from Wireshark, and I also have the .pcapng capture file if needed. ** Attachment added: "Screenshot of Wireshark live capture" https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1686099/+attachment/4869996/+files/wireshark-screenshot.png -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1686099 Title: connection flood to port 445 on mounting cifs volume under kernel Status in Linux: New Status in linux package in Ubuntu: Confirmed Bug description: This is identical to the bug reported on the Debian kernel list, only I'm running 4.4.0, not 4.[89].0 After about 15 mintues, the cifsd daemon starts flooding echo requests on port 445 to the windows server causing a constant 1MB/s load (around 10,000 packets per second) that eventually leads to system instability that forces a reboot to correct. This is repeatable and as far as I know started about a week ago (possibly with the installation of 4.4.0-75). https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856843 To manage notifications about this bug go to: https://bugs.launchpad.net/linux/+bug/1686099/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1686099] Re: connection flood to port 445 on mounting cifs volume under kernel
The screenshot above is from traffic between the two RPis, which run Raspbian (RPi + Debian). -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1686099 Title: connection flood to port 445 on mounting cifs volume under kernel Status in Linux: New Status in linux package in Ubuntu: Confirmed Bug description: This is identical to the bug reported on the Debian kernel list, only I'm running 4.4.0, not 4.[89].0 After about 15 mintues, the cifsd daemon starts flooding echo requests on port 445 to the windows server causing a constant 1MB/s load (around 10,000 packets per second) that eventually leads to system instability that forces a reboot to correct. This is repeatable and as far as I know started about a week ago (possibly with the installation of 4.4.0-75). https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856843 To manage notifications about this bug go to: https://bugs.launchpad.net/linux/+bug/1686099/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1686099] Re: connection flood to port 445 on mounting cifs volume under kernel
At https://bugzilla.kernel.org/show_bug.cgi?id=194531 Steve French writes: "The fix was merged into mainline kernel last week, and should be backported to at least a few older kernels due to cc:stable." Does that mean it will be fixed for folk reporting issues with Ubuntu 4.4.0-75? ** Bug watch added: Linux Kernel Bug Tracker #194531 http://bugzilla.kernel.org/194531 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1686099 Title: connection flood to port 445 on mounting cifs volume under kernel Status in Linux: Confirmed Status in linux package in Ubuntu: Confirmed Bug description: This is identical to the bug reported on the Debian kernel list, only I'm running 4.4.0, not 4.[89].0 After about 15 mintues, the cifsd daemon starts flooding echo requests on port 445 to the windows server causing a constant 1MB/s load (around 10,000 packets per second) that eventually leads to system instability that forces a reboot to correct. This is repeatable and as far as I know started about a week ago (possibly with the installation of 4.4.0-75). https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856843 To manage notifications about this bug go to: https://bugs.launchpad.net/linux/+bug/1686099/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1686099] Re: connection flood to port 445 on mounting cifs volume under kernel
At GitHub raspberrypi/linux, 6by9 writes: "[The fix] was applied to the 4.4 tree 5 days ago, so should be in 4.4.64 and later. When Ubuntu bump the kernel in their repos is totally up to them." https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux- stable.git/log/?id=refs/tags/v4.4.65 -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1686099 Title: connection flood to port 445 on mounting cifs volume under kernel Status in Linux: Confirmed Status in linux package in Ubuntu: Confirmed Bug description: This is identical to the bug reported on the Debian kernel list, only I'm running 4.4.0, not 4.[89].0 After about 15 mintues, the cifsd daemon starts flooding echo requests on port 445 to the windows server causing a constant 1MB/s load (around 10,000 packets per second) that eventually leads to system instability that forces a reboot to correct. This is repeatable and as far as I know started about a week ago (possibly with the installation of 4.4.0-75). https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856843 To manage notifications about this bug go to: https://bugs.launchpad.net/linux/+bug/1686099/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1686099] Re: connection flood to port 445 on mounting cifs volume under kernel
Hi, it may have been fixed in 16.10 yakkety 4.8.0-58.63, but 16.04.1 xenial (LTS) still has 4.8.0-56 as latest on one of my boxes, as woldemar and Andrij Abyzov report above. -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1686099 Title: connection flood to port 445 on mounting cifs volume under kernel Status in Linux: Fix Released Status in linux package in Ubuntu: Fix Released Status in linux source package in Xenial: Fix Committed Status in linux source package in Yakkety: Fix Released Status in linux source package in Zesty: Fix Committed Bug description: This is identical to the bug reported on the Debian kernel list, only I'm running 4.4.0, not 4.[89].0 After about 15 mintues, the cifsd daemon starts flooding echo requests on port 445 to the windows server causing a constant 1MB/s load (around 10,000 packets per second) that eventually leads to system instability that forces a reboot to correct. This is repeatable and as far as I know started about a week ago (possibly with the installation of 4.4.0-75). https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856843 To manage notifications about this bug go to: https://bugs.launchpad.net/linux/+bug/1686099/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
[Kernel-packages] [Bug 1686099] Re: connection flood to port 445 on mounting cifs volume under kernel
(A couple of other boxes with 16.04 (not 16.04.1) xenial have 4.4.0-81 as latest). -- You received this bug notification because you are a member of Kernel Packages, which is subscribed to linux in Ubuntu. https://bugs.launchpad.net/bugs/1686099 Title: connection flood to port 445 on mounting cifs volume under kernel Status in Linux: Fix Released Status in linux package in Ubuntu: Fix Released Status in linux source package in Xenial: Fix Committed Status in linux source package in Yakkety: Fix Released Status in linux source package in Zesty: Fix Committed Bug description: This is identical to the bug reported on the Debian kernel list, only I'm running 4.4.0, not 4.[89].0 After about 15 mintues, the cifsd daemon starts flooding echo requests on port 445 to the windows server causing a constant 1MB/s load (around 10,000 packets per second) that eventually leads to system instability that forces a reboot to correct. This is repeatable and as far as I know started about a week ago (possibly with the installation of 4.4.0-75). https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856843 To manage notifications about this bug go to: https://bugs.launchpad.net/linux/+bug/1686099/+subscriptions -- Mailing list: https://launchpad.net/~kernel-packages Post to : kernel-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~kernel-packages More help : https://help.launchpad.net/ListHelp
