Jump to content

Hardware locks up when trying to C2EXFIL or grab it via SCP


RonH
Go to solution Solved by RonH,

Recommended Posts

Good Day All.

Been Working with a New Packet Squirrel Mark II I am having trouble with the unit and not sure it is an HW issue or a SW Issue, seeking some advice.

I have been doing some tcpdumps to the USB Drive formatted as NTFS.

When trying to C2EXFIL them the unit is able to perform uploads of small files, but fails when I try to EXFIL larger (17M).

I get this in DMESG

[ 301.294714] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),global_oom,task_memcg=/,task=C2EXFIL,pid=4660,uid=0

[ 301.315442] Out of memory: Killed process 4660 (C2EXFIL) total-vm:35412kB, anon-rss:24276kB, file-rss:4kB, shmem-rss:0kB, UID:0 pgtables:56kB oom_score_adj:0

Any pointers to determine if this is just a bad board I just received or something else. Thanks in advance

The C2EXFIL is run from root shell, passing the full path

ALSO, if I attempt to SCP them off the unit, it is successful for smaller files, but when trying to grab larger 15M then the network card stops responding and the session dies about halfway through.

 

Any Guidance is greatly appreciated.

Link to comment
Share on other sites

When trying to SCP from a machine on the Network Side of the Squirrel on the same LAN, the System load gets in the 7's and then finally the Transfer speed drops to below 2KB/s and the connection times out.  At which point the SCP client is disconnected and the load begins to drop 

Here are the network stats right after the failure.

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX:  bytes packets errors dropped  missed   mcast
        636190    7343      0       0       0       0
    TX:  bytes packets errors dropped carrier collsns
        636190    7343      0       0       0       0
2: sw0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000
    link/ether 00:13:37:a9:fa:6a brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
       5762245   22356      0       4       0       0
    TX:  bytes packets errors dropped carrier collsns
      25579858   36960      0       0       0       0
3: eth0@sw0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP mode DEFAULT group default qlen 1000
    link/ether 02:13:37:a9:fa:6a brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
        490633    1081      0      45       0      90
    TX:  bytes packets errors dropped carrier collsns
        936696    5691      0       0       0       0
4: eth1@sw0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master br-lan state UP mode DEFAULT group default qlen 1000
    link/ether 00:13:37:a9:fa:6a brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
       4837696   20738      0      90       0    4023
    TX:  bytes packets errors dropped carrier collsns
      24493382   31251      0       0       0       0
5: br-lan: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
    link/ether 02:13:37:a9:fa:6a brd ff:ff:ff:ff:ff:ff
    RX:  bytes packets errors dropped  missed   mcast
       4554960   20036      0       0       0    3978
    TX:  bytes packets errors dropped carrier collsns
      23245860   16353      0       0       0       0
 

Link to comment
Share on other sites

  • Solution

After testing a second Squirrel with the same USB Drive, ending in the same results. I swapped out for another USB drive and the Issue went away.

I was reluctant to believe that a USB drive could manifest in this manner, but.....

Thanks to all on Discord who assisted with ideas and test on their own gear, the help was greatly appreciated.

 

 

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...