Re: FreeBSD ixl0: Malicious Driver Detection event / Flapping / Update firmware not work

IGost · ‎02-08-2018

Hello;

I have a Box (supermicro) with:

S.O : FreeBSD 11.1-STABLE (FreeNAS)

NIC: - Intel Corporation Ethernet Controller X710 for 10GbE SFP+ (rev 02).

- Intel(R) Ethernet Connection XL710/X722 Driver, Version - 1.7.12-k

- dev.ixl.0.fw_version: fw 5.0.40043 api 1.5 nvm 5.05 etid 80002a43 oem 1.261.0

I have issues with the connection Flapping on the interfaces 10G and a lot of messages "ixl0: Malicious Driver Detection event 2 on TX queue 2, pf number 0"

I m trying to Upgrade the Firmware to 6.0.1; but the procedure (./nvmupdate64e) says:

Num Description Ver. DevId S:B Status

=== ======================================== ===== ===== ====== ===============

01) Intel(R) I350 Gigabit Network Connection 1.99 1521 00:001 Update not

available

02) Intel(R) Ethernet Controller X710 for 5.05 1572 00:002 Update not

10GbE SFP+ available

Tool execution completed with the following status: Device not found.

idata · ‎02-08-2018

Hi Igost,

Thank you for posting in Wired Communities. Just to double check if the X710 is an onboard NIC on your Supermicro system?

Have you tried updating the driver to version 1.9.5 at https://downloadcenter.intel.com/download/25160/Ethernet-Intel-Network-Adapter-Driver-for-PCIe-40-Gigabit-Ethernet-Network-Connection-under-FreeBSD-

With regards to the firmware, I need to check if this can be applicable to OEM NIC.

Thanks,

Sharon T

IGost · ‎02-13-2018

Hello, thanks for the answer.

The NICs are a "ultra riser", Model: AOC-URN2-i4GXS ( http://www.supermicro.com/a_images/products/Accessories/AOC-URN2-i4GXS.jpg http://www.supermicro.com/a_images/products/Accessories/AOC-URN2-i4GXS.jpg ); with:

2x 'Ethernet Controller X710 for 10GbE SFP+'

2x I350 Gigabit Network Connection

I cant upgrade the driver easily, because the FreeNAs don't contain the Kernel source to compile the driver.

idata · ‎02-13-2018

Hi Igost,

Thank you for the additional information. I would like to clarify if your X7101 is an OEM or retail unit. The ultra riser model you provided is a riser card, are you saying the X710 NIC is plugged into the riser card?

Is your X710 a standalone retail network adapter similar to the one shown in the product brief https://www.intel.com/content/dam/www/public/us/en/documents/product-briefs/ethernet-x710-brief.pdf?

Please share the marking (serial number) on the X710 NIC if you can find 15 alphanumeric + 6 alphanumeric + 6-3 digits on the physical NIC for me to identify if this is an OEM. If this is an OEM NIC, you need to obtain the firmware from the OEM NIC vendor instead, the firmware upgrade from Intel is not applicable to the OEM model.

Thanks,

Sharon T

IGost · ‎02-14-2018

The X710 is on ultra-riser format (part of them). Like in the picture.

In this moment I cant Open the Server for see the serial/part numbers. The server is in continuous use (but in 1Gbps).

Regards.

Ian.,

idata · ‎02-14-2018

Hi Igost,

Thank you for the reply. This is an OEM X710 on the Supermicro riser card, you may refer to

http://www.supermicro.com/support/resources/aoc/aoc_compatibility_ultra.cfm. Please contact Supermicro (the board vendor) for the firmware.

Please refer to OEM support for X710 ethernet controller

https://www.intel.com/content/www/us/en/support/articles/000006454/network-and-i-o/ethernet-products.html

Thanks,

Sharon T

idata · ‎02-21-2018

Hi Igost,

Please update me if you still encounter the said issue and if there are other inquiries.

Thanks,

Sharon T

idata · ‎02-28-2018

Hi Igost,

Please be informed firmware for OEM X710 NIC, you need to contact the OEM NIC vendor for the firmware which is customized for the OEM NIC. Please feel free to update me if you have other inquiries.

Thanks,

Sharon T

IGost · ‎03-05-2018

I m waiting for a response from the Vendor.

IGost · ‎03-05-2018

I updated to FreeNas 11.1-U2; And their introduce a new Driver:

dev.ixl.1.%desc: Intel(R) Ethernet Connection 700 Series PF Driver, Version - 1.9.5

dev.ixl.0.%desc: Intel(R) Ethernet Connection 700 Series PF Driver, Version - 1.9.5

There is NO error/messages about Malicious driver detected.

I m going to Test those new drivers....

idata · ‎03-05-2018

HI Igost,

Thanks for sharing the update and that is good news indeed. Please feel free to update me the test result.

Regards,

Sharon T

idata · ‎03-13-2018

Hi Igost,

Please feel free to update me if further assistance needed.

Thanks,

Sharon T