The netconsole kernel module allows logging kernel messages over the network to a remote syslog server. A bug in the IPv6 configuration handling within the netpoll subsystem could cause incorrect addressing or kernel warnings when using IPv6 targets. The Bug When configuring netconsole with an IPv6 target address, the netpoll subsystem didn’t properly validate or…
Local port forwarding on the same host requires understanding how netfilter processes packets based on their origin. The critical distinction: traffic from external sources hits the PREROUTING chain, but packets originating locally traverse the OUTPUT chain instead. Miss either one, and your forwarding won’t work. The core problem When you forward UDP port 500 to…
Intercepting traffic before normal routing decisions requires understanding packet flow through iptables chains. If you need incoming packets to bypass the INPUT chain and process through FORWARD instead, you’ll use the PREROUTING chain with Destination NAT (DNAT). Packet Flow Through iptables When a packet arrives at your system, it traverses these chains in order: PREROUTING…
The “invalid syntax, continuing…” warning from sysctl typically means your /etc/sysctl.conf file has a malformed line that the parser can’t understand. Here’s how to diagnose and fix it. Identifying the Problem When you run sysctl -p to load configuration from /etc/sysctl.conf, any syntax error will be printed with a line number: sysctl -p warning: /etc/sysctl.conf(44):…
When a process mmaps and mprotects many memory ranges, you’ll eventually hit the kernel limit and start seeing ENOMEM errors from mprotect() calls. This happens because Linux maintains internal kernel structures for each mapped range, and there’s a hard ceiling on how many the kernel will track per process. The culprit is the vm.max_map_count sysctl…
The free command—along with ps, top, kill, pgrep, and dozens of other system utilities—is maintained as part of the procps-ng project. Source repository The source code is hosted at: https://gitlab.com/procps-ng/procps You can clone it with: git clone https://gitlab.com/procps-ng/procps.git cd procps Most distributions package procps-ng, so you likely already have it installed. You can verify the…
When a kernel panic occurs on a remote Linux server, manual intervention via SSH becomes impossible. The kernel can be configured to automatically reboot after a panic, allowing the system to recover without human intervention. Enable Kernel Panic Auto-Reboot The kernel.panic parameter controls this behavior. A value of 0 disables auto-reboot; any positive integer specifies…
UDP packet loss on Linux commonly stems from undersized kernel buffers. When packets arrive faster than the application can process them, the kernel drops excess datagrams silently. Unlike TCP, UDP offers no retransmission, so these losses are permanent. Proper buffer tuning is essential for DNS servers, NTP, monitoring systems, video streaming, and any high-throughput UDP…
If you’re seeing elevated TCP segment retransmission counts on Xen VMs, this typically signals network congestion, packet loss, or CPU contention. Here’s how to identify the root cause and fix it. Check Your Current Retransmission Rate Start by gathering baseline metrics: ss -s Look for the retransmit counters: TCP: established 45 tw 3 alloc 48…
When you modify /etc/sysctl.conf, the changes take effect on the next reboot. To apply them immediately without rebooting, use the sysctl -p command: sudo sysctl -p This reads the configuration file and applies all settings to the running kernel. Reloading Specific Configuration Files By default, sysctl -p reads from /etc/sysctl.conf. You can specify a different…
Swap space is essential for system stability, allowing the kernel to move less-frequently-used memory pages to disk when physical RAM is exhausted. Here’s how to set up a dedicated swap partition. Step 1: Create the Partition Use fdisk, gdisk (for GPT disks), or parted to create a new partition. For modern systems with GPT partition…
When SSH fails but the daemon still runs, or when kernel panics strike, you need automated recovery without physical access. This guide covers three essential techniques: forcing reboots when the system is unresponsive, auto-recovery from kernel panics, and alerting you when it happens. Force a reboot when SSH is unresponsive If a server stops responding…
IPv6 is enabled by default on most Linux distributions. While IPv6 adoption has grown, there are legitimate reasons to disable it: some legacy applications don’t handle dual-stack networks well, it can complicate firewall rules, or you might be operating in an environment that doesn’t support it. Disabling IPv6 requires kernel-level configuration through sysctl. Using sysctl…
A Linux box serving as a network gateway needs two network interfaces: eth0: Connected to the local network (LAN) with IP 192.168.0.1 eth1: Connected to the upstream network (Internet) with IP 198.51.100.1 The goal is to allow clients on the 192.168.0.0/16 network to route traffic through this gateway to reach external networks. Enable IP Forwarding…