Certain Solaris 8 and Solaris 9 Security Patches May Cause Lost Connectivity Over UDP or Poor Network Performance |
|
| Category : | Availability |
| Release Phase : | Resolved |
| Product : | Solaris 9 Operating System Solaris 8 Operating System
|
| Bug Id : | 6561086
|
| Date of Workaround Release : | 02-AUG-2007
|
| Date of Resolved Release : | 24-SEP-2007
|
Impact
Certain Solaris 8 and Solaris 9 patches (116965-26, 114344-25, 116966-25, and 119435-15) on systems using IPv4 may cause reassembly of IP fragments to fail. This will result in poor network performance and may make systems unreachable over UDP.
Patches 116965-26, 114344-25, 116966-25, and 119435-15 have been WITHDRAWN and are no longer available on SunSolve.
Contributing Factors
This issue can occur in the following releases:
SPARC Platform:
x86 Platform:
Notes:
1. Solaris 10 is not affected by this issue.
2. Communication over IPv6 is not impacted by this issue.
3. This issue only affects a system when a remote host communicates with the Solaris system with a fragmented datagram. To determine if the Solaris system has received any fragmented datagrams, check if the counter 'ipReasmReqds' has a non-zero value by running the following command:
% /usr/bin/netstat -s | /usr/bin/egrep ipReasmReqds
4. This issue is more likely to occur when the network is under load.
5. Some operating systems are known to send the fragments in reverse order which also triggers the issue and causes a loss of connectivity for those connections.
Symptoms
Should the described issue occur, the counters 'icmpOutTimeExcds' and 'ipReasmFails' will have non-zero values, usually in two digits or more. To check these counters, the following command can be run:
% /usr/bin/netstat -s | /usr/bin/egrep 'icmpOutTimeExcds|ipReasmFails'
Workaround
There is no workaround for this issue. Please see the Resolution section below.
Resolution
This issue is addressed in the following releases:
SPARC Platform
x86 Platform
Modification HistoryDate: 07-AUG-2007
Date: 18-SEP-2007
- Updated Contributing Factors and Resolution sections
Date: 24-SEP-2007
- Updated Contributing Factors and Resolution sections
- State: Resolved
AttachmentsThis solution has no attachment