April 2003 - Darwin-kernel - lists.apple.com

Re: NKE socket communication and soreserve
by Joshua Graessley 09 Apr '03

09 Apr '03

soreserve is used to set the maximum amount of data the socket will store in the socket buffer. Sockets have two buffers, a send buffer and a receive buffer. There is a socket option that can be used to set the size of the buffers. When this socket option is called, the soreserve function is called. The soreserve call in the kernel looks like this: int soreserve(struct socket *so, u_long sndcc, u_long rcvcc); The socket filter looks like this: int (*sf_soreserve)(struct socket *, u_long, u_long, struct kextcb *); The first u_long is the new send buffer size and the second u_long is the new receive buffer size. The socket buffers don't actually allocate that memory, they just record the limit and won't store anything over that limit. -josh On Wednesday, Apr 9, 2003, at 07:28 US/Pacific, Stiphane Sudre wrote: Does someone know what the purpose of soreserve is when it is used in the TCPLogger NKE communication sample code? And what is the meaning of the value used in it (the last 2)? There seems to be a bug in the NKE Documentation as the documentation is stating that the soreserve prototype is: soreserve(struct socket *, struct sockbut *); (yes, there's a typo too in the doc) when in the real world, it's not the case. The url of the buggy doc being: developer.apple.com/techpubs/macosx/Darwin/ IOKit/DeviceDrivers/Network/NKE.pdf Strangely enough, there's no man page for soreserve. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

File Access with VFS
by Scott Lance 09 Apr '03

09 Apr '03

I am trying to open a file for manipulation in Kernel mode. After several hours of searching, limited documentation seems to suggest that I would be able to use a VNode to accomplish my objective. I have tried to find documentation on how this works and what I must do to be able to get a handle to a file and open it up for manipulation. Does anyone have any suggestions on where I can look for information on how vnodes and the VFS work? Or perhaps someone could enlighten me on what I must do to be able to open a file for use??? Or might there be a different way to open a file in Kernel mode that I've missed all together? Thanks in advance, Scott Lance _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

NKE socket communication and soreserve
by Stéphane Sudre 09 Apr '03

09 Apr '03

Does someone know what the purpose of soreserve is when it is used in the TCPLogger NKE communication sample code? And what is the meaning of the value used in it (the last 2)? There seems to be a bug in the NKE Documentation as the documentation is stating that the soreserve prototype is: soreserve(struct socket *, struct sockbut *); (yes, there's a typo too in the doc) when in the real world, it's not the case. The url of the buggy doc being: developer.apple.com/techpubs/macosx/Darwin/ IOKit/DeviceDrivers/Network/NKE.pdf Strangely enough, there's no man page for soreserve. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: unkillable process ?
by Philip Parker 07 Apr '03

07 Apr '03

See my comments interspersed On Monday, Apr 7, 2003, at 07:38 US/Pacific, Paul Ripke wrote: On Monday, Apr 7, 2003, at 10:11 Australia/Sydney, Justin Walker wrote: On Sunday, Apr 6, 2003, at 16:30 US/Pacific, Paul Ripke wrote: On Sunday, Apr 6, 2003, at 12:01 Australia/Sydney, Jean-Edouard BABIN wrote: Justin Walker icrit: [snip] Odd. I have one too: ksh$ ps alx | grep Z UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 0 509 0 0 0 0 0 0 - Z con- 0:00.00 (scselect) Just a hunch, but I'd guess that the real PPID isn't zero. I'd say ps is reading a struct which has been nulled, and there's another copy of the real PPID elsewhere. UTSL... This was mentioned earlier in this thread. When a process is inherited by 'init' (PID 1), which happens when the parent process exits before the child, the child's "parent PID" entry in its proc table is cleared (init really isn't its parent; the child is just "attached" to init so that it can be 'reaped'). This is the last step in cleaning up after a process exit, and is something that a process can't do for itself (unlike that cute box that, when you turn it on, has a hand that comes out, turns the switch off, and retreats back into the box). This general behavior has been around for a while, I believe [Unix lore]. I haven't checked other source to be sure. Yes - but by the same token, I believe it's Unix lore that you can't have a zombie with init as the parent (even inherited parent)... at least not for any reasonable duration. I do see it occasionally on systems that have gone forking mad. Definitely saying the obvious but ... If the Zombie is wchan on a resource, and that block is resolved, a PPID of 1 means that init will reap the process. If it is zero, then noone will reap it. If it has another PID, then the parent is still around and has not wait'ed on the process. So a process should have either a real PPID, or 1, but not 0. OK, testing, looks like the process struct gets nulled (from a ps point of view) when the process gets zombie status: Bad, if you're trying to find out how to fix it. I suspect that the command information can sometimes be bogus as well. ksh$ uname -a Darwin stix-pbg3 6.3 Darwin Kernel Version 6.3: Sat Dec 14 03:11:25 PST 2002; root:xnu/xnu-344.23.obj~4/RELEASE_PPC Power Macintosh powerpc ksh$ cat z.c #include <stdio.h> #include <stdlib.h> #include <unistd.h> int main(int argc, char *argv[]) { pid_t pid; pid = fork(); if (pid < 0) { /* error */ perror("fork failed"); } else if (pid == 0) { /* child */ exit(0); } else { /* parent */ for (;;) sleep(10); } return 0; } ksh$ cc -o blah blah.c ksh$ ./blah & [1] 728 ksh$ ps alx | egrep 'PPID|blah' UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 0 729 0 0 0 0 0 0 - Z+ con- 0:00.00 (blah) 20008 728 474 0 31 0 1548 292 - S std 0:00.02 ./blah 20008 731 474 0 31 0 1416 308 - S+ std 0:00.02 egrep PPID|blah This must be a bug, either in the kernel, or ps. Parent is still around. Makes hunting down the parent of a zombie a little difficult, may be worth a bug report. NetBSD doesn't do this: ksh$ uname -a NetBSD stix-pc.stix.org.au 1.6P NetBSD 1.6P (STIX-PC) #5: Sun Mar 2 23:28:12 EST 2003 stix@stix-amd.stix.org.au:/usr/build/obj/usr/src/sys/arch/i386/ compile/STIX-PC i386 ksh$ ps alx | egrep 'PPID|blah' UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 20008 23834 1704 0 10 0 12 344 nanoslee S p4 0:00.00 ./blah 20008 23835 23834 0 -22 0 0 0 - ZW p4 0:00.00 (blah) 20008 23837 1704 0 28 0 160 540 - S+ p4 0:00.01 egrep PPID|blah I started digging through xnu source, but it's getting too late (early?) for my brain to function too well... I'd like to do the same, but CVS appears to be down on anoncvs.opensource.apple.com, I'm getting "/cvs/Darwin: no such repository" regards, Philip -- email: philip_parker(a)mac.com #include <std_disclaimer> _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: unkillable process ?
by Paul Ripke 07 Apr '03

07 Apr '03

On Monday, Apr 7, 2003, at 10:11 Australia/Sydney, Justin Walker wrote: On Sunday, Apr 6, 2003, at 16:30 US/Pacific, Paul Ripke wrote: On Sunday, Apr 6, 2003, at 12:01 Australia/Sydney, Jean-Edouard BABIN wrote: Justin Walker icrit: [snip] Odd. I have one too: ksh$ ps alx | grep Z UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 0 509 0 0 0 0 0 0 - Z con- 0:00.00 (scselect) Just a hunch, but I'd guess that the real PPID isn't zero. I'd say ps is reading a struct which has been nulled, and there's another copy of the real PPID elsewhere. UTSL... This was mentioned earlier in this thread. When a process is inherited by 'init' (PID 1), which happens when the parent process exits before the child, the child's "parent PID" entry in its proc table is cleared (init really isn't its parent; the child is just "attached" to init so that it can be 'reaped'). This is the last step in cleaning up after a process exit, and is something that a process can't do for itself (unlike that cute box that, when you turn it on, has a hand that comes out, turns the switch off, and retreats back into the box). This general behavior has been around for a while, I believe [Unix lore]. I haven't checked other source to be sure. Yes - but by the same token, I believe it's Unix lore that you can't have a zombie with init as the parent (even inherited parent)... at least not for any reasonable duration. I do see it occasionally on systems that have gone forking mad. OK, testing, looks like the process struct gets nulled (from a ps point of view) when the process gets zombie status: ksh$ uname -a Darwin stix-pbg3 6.3 Darwin Kernel Version 6.3: Sat Dec 14 03:11:25 PST 2002; root:xnu/xnu-344.23.obj~4/RELEASE_PPC Power Macintosh powerpc ksh$ cat z.c #include <stdio.h> #include <stdlib.h> #include <unistd.h> int main(int argc, char *argv[]) { pid_t pid; pid = fork(); if (pid < 0) { /* error */ perror("fork failed"); } else if (pid == 0) { /* child */ exit(0); } else { /* parent */ for (;;) sleep(10); } return 0; } ksh$ cc -o blah blah.c ksh$ ./blah & [1] 728 ksh$ ps alx | egrep 'PPID|blah' UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 0 729 0 0 0 0 0 0 - Z+ con- 0:00.00 (blah) 20008 728 474 0 31 0 1548 292 - S std 0:00.02 ./blah 20008 731 474 0 31 0 1416 308 - S+ std 0:00.02 egrep PPID|blah Makes hunting down the parent of a zombie a little difficult, may be worth a bug report. NetBSD doesn't do this: ksh$ uname -a NetBSD stix-pc.stix.org.au 1.6P NetBSD 1.6P (STIX-PC) #5: Sun Mar 2 23:28:12 EST 2003 stix@stix-amd.stix.org.au:/usr/build/obj/usr/src/sys/arch/i386/compile/ STIX-PC i386 ksh$ ps alx | egrep 'PPID|blah' UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 20008 23834 1704 0 10 0 12 344 nanoslee S p4 0:00.00 ./blah 20008 23835 23834 0 -22 0 0 0 - ZW p4 0:00.00 (blah) 20008 23837 1704 0 28 0 160 540 - S+ p4 0:00.01 egrep PPID|blah I started digging through xnu source, but it's getting too late (early?) for my brain to function too well... Cheers, -- Paul Ripke Unix/OpenVMS/TSM/DBA 101 reasons why you can't find your Sysadmin: 68: It's 9AM. He/She is not working that late. -- Koos van den Hout _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: unkillable process ?
by Justin Walker 07 Apr '03

07 Apr '03

On Sunday, Apr 6, 2003, at 16:30 US/Pacific, Paul Ripke wrote: On Sunday, Apr 6, 2003, at 12:01 Australia/Sydney, Jean-Edouard BABIN wrote: Justin Walker icrit: [snip] Odd. I have one too: ksh$ ps alx | grep Z UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 0 509 0 0 0 0 0 0 - Z con- 0:00.00 (scselect) Just a hunch, but I'd guess that the real PPID isn't zero. I'd say ps is reading a struct which has been nulled, and there's another copy of the real PPID elsewhere. UTSL... This was mentioned earlier in this thread. When a process is inherited by 'init' (PID 1), which happens when the parent process exits before the child, the child's "parent PID" entry in its proc table is cleared (init really isn't its parent; the child is just "attached" to init so that it can be 'reaped'). This is the last step in cleaning up after a process exit, and is something that a process can't do for itself (unlike that cute box that, when you turn it on, has a hand that comes out, turns the switch off, and retreats back into the box). This general behavior has been around for a while, I believe [Unix lore]. I haven't checked other source to be sure. Regards, Justin -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | If you're not confused, | You're not paying attention *--------------------------------------*-------------------------------* _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: unkillable process ?
by Paul Ripke 06 Apr '03

06 Apr '03

On Sunday, Apr 6, 2003, at 12:01 Australia/Sydney, Jean-Edouard BABIN wrote: Justin Walker icrit: thanks for your information The existence of a zombie is not that strange; it's unusual, but not unheard of. This could be a bug. You can file a report (<http://bugreport.apple.com>) or try to reproduce it and then file a report. yes i will do this. You can determine the parent process's id by something like "ps -oppid -aux", and the first column of the output will contain the process's parent's pid. PPID is 0 ;) with you command i have just see that i also have 0 root 8000 0.0 0.0 0 0 con- Z 1Jan70 0:00.00 (X11) (i have used X11 today) Odd. I have one too: ksh$ ps alx | grep Z UID PID PPID CPU PRI NI VSZ RSS WCHAN STAT TT TIME COMMAND 0 509 0 0 0 0 0 0 - Z con- 0:00.00 (scselect) Just a hunch, but I'd guess that the real PPID isn't zero. I'd say ps is reading a struct which has been nulled, and there's another copy of the real PPID elsewhere. UTSL... Cheers, -- Paul Ripke Unix/OpenVMS/TSM/DBA 101 reasons why you can't find your Sysadmin: 68: It's 9AM. He/She is not working that late. -- Koos van den Hout _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: unkillable process ?
by Paul Ripke 06 Apr '03

06 Apr '03

On Sunday, Apr 6, 2003, at 00:16 Australia/Sydney, Pejvan BEIGUI wrote: Here are some more info I found in the cdrdao manual: BUGS If the program is terminated during the write/simulation process used IPC resources may not be released. Use ipcs(8) and ipcrm(8) to delete them. It seems that ipcs and ipcrm are not available in Mac OS X. Any suggestions? Binaries built from FreeBSD sources are up on my home site at: <http://stix.homeunix.net:8080/software/ Enjoy, -- Paul Ripke Unix/OpenVMS/TSM/DBA 101 reasons why you can't find your Sysadmin: 68: It's 9AM. He/She is not working that late. -- Koos van den Hout _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: unkillable process ?
by Pejvan BEIGUI 06 Apr '03

06 Apr '03

Pejvan BEIGUI wrote: > jmagee(a)apple.com wrote: > >> >> On Thursday, April 3, 2003, at 12:12PM, Pejvan BEIGUI wrote: >> >>> I've got a real and weird problem, which seems to come from the >>> kernel, and hence I haven't been able to find the answer anywhere >>> else, i'm asking it here: >>> >>> How can anyone explain this: >>> >>> > [2:10:22pm] _pejvan_ ~ >> kill -9 1026 >>> > [2:21:32pm] _pejvan_ ~ >> kill -9 1026 >>> > [2:21:33pm] _pejvan_ ~ >> kill -9 1026 >>> > [2:21:33pm] _pejvan_ ~ >> kill -9 1026 >>> > [2:21:34pm] _pejvan_ ~ >> sudo kill -9 1026 >>> > Password: >>> > [2:21:42pm] _pejvan_ ~ >> sudo kill -9 1026 >>> > [2:21:44pm] _pejvan_ ~ >> sudo kill -9 1026 >>> > [2:21:45pm] _pejvan_ ~ >> ps -U pejvan | grep 1026 >>> > 1026 ?? Us 0:00.02 /Users/pejvan/devel/[...] >> >> >> >> That "U" means that the process (or more appropriately, one of the >> threads in the process) is blocked in the kernel in an >> "uninterruptible" state. It is unacceptable for the kernel/drivers to >> so mark a thread and then non make forward progress on it. Do you >> have any non-standard kernel extensions? What system call was thread >> making when it got into this state? You can find the latter by >> running the sample tool on the process (or attaching with gdb). >> > > In fact, this error doesn't come from my sources, it comes sometimes > when I use cdrdao. I only have one non-standard kernel extension: the > MSMouse kext. > I'll try to run the sample tool on it next time i get this crash, and > I'll report it to you. "Hopefully" this week-end. > Here's what sampler can tell me about the process. Hope it can give you valuable information. Please let me know if you think that I should fill in a bug report. Thanks, Pejvan > Report #0 - Sampling cdrdao (process 1054) > Stacks at 2003-04-06 13:23:05 +0200 > Samples (displayed/total): 1697/1697 > Call graph: > 1697 Thread_5607 > 1697 start > 1697 _start > 1697 main > 1697 setupDevice(Command, char const*, char const*, int, int, int, int, int) > 1697 ScsiIf::init() > 1697 scg_open > 1697 scg__open > 1697 scgo_open > 1697 SCSITaskDeviceClass::ObtainExclusiveAccess() > 1697 IOConnectMethodScalarIScalarO > 1697 io_connect_method_scalarI_scalarO > 1697 mach_msg > 1697 mach_msg_trap > 1697 mach_msg_trap [STACK TOP] > > Total number in stack (recursive counted multiple, when >=5): > > Sort by top of stack, same collapsed (when >= 5): > mach_msg_trap [STACK TOP] 1697 _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re : Can not find TCPLogger example sources
by Sebastien Gaide 06 Apr '03

06 Apr '03

Le vendredi, 4 avr 2003, ` 19:05 Europe/Paris, Justin Walker a icrit : On Friday, Apr 4, 2003, at 03:01 US/Pacific, Sebastien Gaide wrote: Hello, I'm looking for the sources of the TCPLogger example, I have searched the cvs web site with no success. I have searched the archive of this list, and find this url : http://www.opensource.apple.com/cgi-bin/registered/cvs/src/live/ TCPLogger but it seems to be outdated... What does 'outdated' mean? In fact, when I try to access this url I get an error, so I thought that the sources were moved to another place, making this link 'outdated' ... Sorry if it's not the right term, my english is not that good! Regards, Sebastien. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0