Hi,
I use:
ipset v2.2.9a
iptables 1.3.6
on kernel 2.6.19.7 (from kernel.org) on FC6.
All has been compiled as said (http://ipset.netfilter.org/install.html )
This behaviour seems to happen where there are lots of bindings.
I've got some questions :
1/ How to find optimal parameters for hashsize,probes , and resize ?
(where we've got lot of bindings ..)
I've got such errors in my /var/log/messages (but applying the command is ok !)
Mar 26 17:22:27 iriafwa01 kernel: BUG: sleeping function called from invalid
context at mm/slab.c:3007
Mar 26 17:22:27 iriafwa01 kernel: in_atomic():1, irqs_disabled():0
Mar 26 17:22:27 iriafwa01 kernel: [<c0158f10>] kmem_cache_alloc+0x1b/0x55
Mar 26 17:22:27 iriafwa01 kernel: [<f897c7c7>] ip_set_hash_add+0xf3/0x14a
[ip_set]
Mar 26 17:22:27 iriafwa01 kernel: [<f897d678>] ip_set_sockfn_get+0x9a8/0xab5
[ip_set]
Mar 26 17:22:27 iriafwa01 kernel: [<c02f9bc4>] _read_unlock_irq+0x5/0x7
Mar 26 17:22:27 iriafwa01 kernel: [<c01150e1>] __wake_up+0x32/0x43
Mar 26 17:22:27 iriafwa01 kernel: [<c02b2264>] nf_sockopt+0x64/0xe2
Mar 26 17:22:27 iriafwa01 kernel: [<c02b2302>] nf_getsockopt+0x20/0x25
Mar 26 17:22:27 iriafwa01 kernel: [<c02bcb49>] ip_getsockopt+0x549/0x583
Mar 26 17:22:27 iriafwa01 kernel: [<c0141595>]
do_generic_mapping_read+0x414/0x45b
Mar 26 17:22:27 iriafwa01 kernel: [<c014328d>]
generic_file_aio_read+0x17f/0x1ca
Mar 26 17:22:27 iriafwa01 kernel: [<c0140a60>] file_read_actor+0x0/0xdb
Mar 26 17:22:27 iriafwa01 kernel: [<c01cfd40>] vsnprintf+0x450/0x48c
Mar 26 17:22:27 iriafwa01 kernel: [<c017fd54>] inotify_d_instantiate+0x44/0x72
Mar 26 17:22:27 iriafwa01 kernel: [<c016a4eb>] d_rehash+0x26/0x32
Mar 26 17:22:27 iriafwa01 kernel: [<c0292a0d>] sock_attach_fd+0x72/0xd5
Mar 26 17:22:27 iriafwa01 kernel: [<c0294226>] sock_common_getsockopt+0x1d/0x22
Mar 26 17:22:27 iriafwa01 kernel: [<c02927ee>] sys_getsockopt+0x7d/0x9c
Mar 26 17:22:27 iriafwa01 kernel: [<c029401a>] sys_socketcall+0x22a/0x261
Mar 26 17:22:27 iriafwa01 kernel: [<c0102b05>] sysenter_past_esp+0x56/0x79
Mar 26 17:22:27 iriafwa01 kernel: [<c02f007b>] xfrm_add_pol_expire+0x26/0x14e
Mar 26 17:22:27 iriafwa01 kernel: =======================
ipset -R < ipsets where ipsets is :
# Generated by ipset 2.2.9a on Mon Mar 26 17:41:02 2007
-N ADM_SET1 iphash --hashsize 1024 --probes 4 --resize 25
-A ADM_SET1 192.168.50.66
-A ADM_SET1 192.168.50.67
-A ADM_SET1 192.168.50.10
-A ADM_SET1 192.168.50.1
-A ADM_SET1 192.168.50.64
-A ADM_SET1 192.168.50.11
-A ADM_SET1 192.168.50.70
-A ADM_SET1 192.168.50.34
-A ADM_SET1 192.168.50.68
-A ADM_SET1 192.168.50.97
-A ADM_SET1 192.168.50.65
-A ADM_SET1 192.168.50.12
-A ADM_SET1 192.168.50.71
-A ADM_SET1 192.168.50.98
-A ADM_SET1 192.168.50.69
-A ADM_SET1 192.168.50.3
-A ADM_SET1 192.168.50.33
-N ADM_SET2 iphash --hashsize 1024 --probes 4 --resize 25
-A ADM_SET2 192.168.51.26
-A ADM_SET2 192.168.50.45
-B ADM_SET1 192.168.50.98 -b ADM_SET2
-B ADM_SET1 192.168.50.34 -b ADM_SET2
-B ADM_SET1 192.168.50.1 -b ADM_SET2
-B ADM_SET1 192.168.50.64 -b ADM_SET2
-B ADM_SET1 192.168.50.71 -b ADM_SET2
-B ADM_SET1 192.168.50.97 -b ADM_SET2
-B ADM_SET1 192.168.50.3 -b ADM_SET2
-B ADM_SET1 192.168.50.65 -b ADM_SET2
-B ADM_SET1 192.168.50.11 -b ADM_SET2
-B ADM_SET1 192.168.50.69 -b ADM_SET2
-B ADM_SET1 192.168.50.67 -b ADM_SET2
-B ADM_SET1 192.168.50.66 -b ADM_SET2
-B ADM_SET1 192.168.50.33 -b ADM_SET2
-B ADM_SET1 192.168.50.70 -b ADM_SET2
-B ADM_SET1 192.168.50.12 -b ADM_SET2
-B ADM_SET1 192.168.50.68 -b ADM_SET2
-B ADM_SET1 192.168.50.10 -b ADM_SET2
COMMIT
# Completed on Mon Mar 26 17:41:02 2007
|