X710/X557-AT Malicious Driver Detection Event 2 on TX q-FreeBsd 11.1

[TISHI17]

Hi Sharon,

I have the same problem.

1. FreeBSD 11.1-RELEASE

2. ixl0:

ixl0: fw 5.0.40043 api 1.5 nvm 5.04 etid 80002505 oem 0.0.0

3. this is iscsi target server. If traffic with high load is flowing on the server, error log will occur frequently.

ixl0: WARNING: queue 2 appears to be hung!

ixl0: WARNING: Resetting!

ixl0: Malicious Driver Detection event 2 on TX queue 6, pf number 0

ixl0: MDD TX event is for this function!

It does not solve even driver version 1.7

Regards,

Takunii

[idata]

Hi Takunii,

Thank you for posting at Wired Communities and sharing the test result. What is the exact XL 710 model you have? Is this an onboard NIC on certain system? If yes what is the exact model and system model? Thanks,sharon

[TISHI17]

Hi Sharon,

The model number is Intel XL710-QDA2. It occurs on multiple servers.

I updated nvm, but it did not recover.

Regards,

Takunii

[idata]

Hi Takunii,

Thank you for the information. Just to double what is the current firmware version on your XL710-QDA2? Regards,sharon

[TISHI17]

Hi Sharon,

is this correct?

ixl0: fw 5.0.40043 api 1.5 nvm 5.05 etid 800028a6 oem 0.0.0

ixl1: fw 5.0.40043 api 1.5 nvm 5.05 etid 800028a6 oem 0.0.0

Regards,

Takunii

[idata]

Hi Takunii,

Thank you for the information, the 5.05 is the firmware version. Can you share the screenshot of the serial number of the network adapter as I see OEM stated in the information provided. The network adapter serial number can be found on the physical network adapter on a white sticker. The format of the serial number is 15 alphanumeric + 6 alphanumeric + 6 alphanumeric -xxx (3 digits).Regards,sharon

[TISHI17]

Hi Sharon,

How do i send a photo Personally?

Regards,

Takunii

[idata]

Hi Takunii,

I will send a private message to you.

Thanks,

sharon

[idata]

Hi Takunii,

Please download and upgrade the firmware to version 6.01 which is available at https://downloadcenter.intel.com/download/24769/Non-Volatile-Memory-NVM-Update-Utility-for-Intel-Ethernet-Converged-Network-Adapter-XL710-and-X710-Series?product=83965 Feel free to update me the result. Thanks,sharon

[idata]

Hi Takunii,

Please update the driver to version 1.7.12.1, (Please note this is the latest version that ends with .1) posted on 8/22/17. https://downloadcenter.intel.com/download/25160/Ethernet-Intel-Network-Adapter-Driver-for-PCIe-40-Gigabit-Ethernet-Network-Connection-under-FreeBSD- Do let me know the status after upgrading the driver.Thanks,sharon

[TISHI17]

Hi Sharon,

I can not load a new driver. Please tell me how to load a new driver on the GENERIC kernel.

--- boot messages---

module ixl already present!

ixl0: mem 0xfa800000-0xfaffffff,0xfb808000-0xfb80ffff irq 64 at device 0.0 numa-domain 1 on pci15

ixl0: Using MSIX interrupts with 9 vectors

ixl0: fw 6.0.48442 api 1.7 nvm 6.01 etid 800034a4 oem 1.262.0

ixl0: The driver for the device detected a newer version of the NVM image than expected.

Please install the most recent version of the network driver.

---end---

Thanks,

Takunii

[idata]

Hi Takunii,

Thank you for the reply. Let me further check.regards,sharon

[idata]

Hi Takunii,

Please unload the driver first then reload the driver as below:1) Use the kldunload to unload the ixl driver2) Then use kldload to load version1.7.12.1 Please feel free to update me.Thanks,sharon

[TISHI17]

Hi Sharon,

The GENERIC kernel contains the ixl driver, so it cannot be read by the loadable module.

Therefore, intel ports seem to be operating to overwrite at the time of boot loader, but they were not supported at 11.1R.

Name : intel-ixl-kmod

Version : 1.7.11

Origin : net/intel-ixl-kmod

Architecture : FreeBSD:11:amd64

Could you check again?

Thanks,

Takunii

[idata]

Hi Takunii,

Thank you for the update. Let me check on this.Regards,sharon

[idata]

Hi Takunii,

Please try disabling the TSO (TCP segmentation Operation). Feel free to update me. Thanks,Sharon

[idata]

Hi Takunii,

Please feel free to update me if disabling the TSO work for you. Thanks.

Regards,

Sharon

[TISHI17]

Hi Sharon,

The interface is no longer reset.

Is there any performance problem with CPU processing?

I have not received any answers to the new driver for GENERIC KERNEL. Do you know how to apply it?

Thanks,

Takunii

[idata]

Hi Takunii,

Thank you for the reply. Just to double check are you referring to after you disabling the TSO , the interface no longer reset? Can you give more information about what is the interface no longer reset you refer to? Have you tried updating the firmware 6.01 which I posted on August 30? https://downloadcenter.intel.com/download/24769/Non-Volatile-Memory-NVM-Update-Utility-for-Intel-Ethernet-Converged-Network-Adapter-XL710-and-X710-Series?product=83965 When you said performance problem with CPU processing, are you referring to your NIC XL710? You need to disable the TSO first, then apply the following steps to load the driver1) Use the kldunload to unload the ixl driver2) Then use kldload to load version1.7.12.1Thanks,Sharon

[TISHI17]

Hi Sharon,

The firmware has been applied. However, the problem was not resolved. Disabling TSO resolved the problem.

However, if TSO is disabled, the CPU will perform offload processing on the NIC.

I'm asking if there is no problem because this affects performance.

I have said many times, but kldload cannot load drivers. Because the standard Kernel has an Intel driver built into it. kldunload cannot exclude drivers loaded in Kernel. Could you please confirm with the developer?

---errorlog---

interface ixl.1 already present in the KLD 'kernel'!

linker_load_file: Unsupported file type

---

Best Regards,

Takunii

[idata]

Hi Takunii,

Thank you for the clarification. Let me further check.Regards,Sharon