Bug#471849: openssh-client: drops connections with "Corrupted MAC on input." errors when loads of data get transferred

[Folkert van Heusden]

Package: openssh-client
Version: 1:4.7p1-2
Severity: normal


drops connections with "Corrupted MAC on input." errors when loads of data get transferred

output (ssh -vvv):
Disconnecting: Corrupted MAC on input.
debug3: channel 0: close_fds r 4 w 5 e 6 c -1

This happens when connecting to 'OpenSSH_4.7p1 Debian-2, OpenSSL 0.9.8g
19 Oct 2007' on 32bit as well as 64bit.

-- System Information:
Debian Release: lenny/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.23pps-nodeb.pps-nodeb (SMP w/2 CPU cores)
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)
Shell: /bin/sh linked to /bin/bash

Versions of packages openssh-client depends on:
ii  adduser               3.106              add and remove users and groups
ii  debconf [debconf-2.0] 1.5.19             Debian configuration management sy
ii  dpkg                  1.14.16.6          package maintenance system for Deb
ii  libc6                 2.7-6              GNU C Library: Shared libraries
ii  libcomerr2            1.40.6-1           common error description library
ii  libedit2              2.9.cvs.20050518-4 BSD editline and history libraries
ii  libkrb53              1.6.dfsg.3~beta1-3 MIT Kerberos runtime libraries
ii  libncurses5           5.6+20080203-1     Shared libraries for terminal hand
ii  libssl0.9.8           0.9.8g-7           SSL shared libraries
ii  passwd                1:4.1.0-2          change and administer password and
ii  zlib1g                1:1.2.3.3.dfsg-11  compression library - runtime

openssh-client recommends no packages.

-- no debconf information



--
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

[Russ Allbery-2]

Folkert van Heusden <folkert@...> writes:

> Package: openssh-client
> Version: 1:4.7p1-2
> Severity: normal
>
> drops connections with "Corrupted MAC on input." errors when loads of
> data get transferred
>
> output (ssh -vvv):
> Disconnecting: Corrupted MAC on input.
> debug3: channel 0: close_fds r 4 w 5 e 6 c -1
>
> This happens when connecting to 'OpenSSH_4.7p1 Debian-2, OpenSSL 0.9.8g
> 19 Oct 2007' on 32bit as well as 64bit.

In my experience, this usually indicates a hardware problem with either
your NIC or with one of the intervening pieces of network equipment.  When
I've previously tracked down problems like this, I've found bit errors
introduced on the wire and had the problem go away after network cards and
switches were replaced.

--
Russ Allbery (rra@...)               <http://www.eyrie.org/~eagle/>



--
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

[Folkert van Heusden]

> > Package: openssh-client
> > Version: 1:4.7p1-2
> > Severity: normal
> >
> > drops connections with "Corrupted MAC on input." errors when loads of
> > data get transferred
> >
> > output (ssh -vvv):
> > Disconnecting: Corrupted MAC on input.
> > debug3: channel 0: close_fds r 4 w 5 e 6 c -1
> >
> > This happens when connecting to 'OpenSSH_4.7p1 Debian-2, OpenSSL 0.9.8g
> > 19 Oct 2007' on 32bit as well as 64bit.
>
> In my experience, this usually indicates a hardware problem with either
> your NIC or with one of the intervening pieces of network equipment.  When
> I've previously tracked down problems like this, I've found bit errors
> introduced on the wire and had the problem go away after network cards and
> switches were replaced.

But shouldn't I be seeing these errors in regular datatransfers as well?


Folkert van Heusden

--
Looking for a cheap but fast webhoster with an excellent helpdesk?
http://keetweej.vanheusden.com/redir.php?id=1001
----------------------------------------------------------------------
Phone: [phone], PGP-key: 1F28D8AE, www.vanheusden.com



--
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

[Russ Allbery-2]

Folkert van Heusden <folkert@...> writes:

>> In my experience, this usually indicates a hardware problem with either
>> your NIC or with one of the intervening pieces of network equipment.
>> When I've previously tracked down problems like this, I've found bit
>> errors introduced on the wire and had the problem go away after network
>> cards and switches were replaced.
>
> But shouldn't I be seeing these errors in regular datatransfers as well?

The frequency is considerably higher for ssh since ssh checks every
packet.  When I was having this problem, I thought it was ssh for a long
time too, and then I caught single bit errors in some straight HTTP
traffic.

--
Russ Allbery (rra@...)               <http://www.eyrie.org/~eagle/>



--
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...

[Marc A. Donges]

On Wednesday, April 30, 2008 at 19:48:37 (+0200), Folkert van Heusden wrote:
> Ok, you're right: I swapped the networkcard for another and now all
> problems are gone. Funny thing is that both cards were broken.

It could be a systematic problem (hardware design bug/kernel bug).
What network card did you use?

Marc

--
  _ _    Marc A. Donges                      [phone]
  'v'    Klosterweg 28 / E110
 /   \   76131 Karlsruhe
  W W



--
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@...
with a subject of "unsubscribe". Trouble? Contact listmaster@...