Hi,
I just upgrade to the last 23.05.3 stable release, and start with fresh config, very basic and I have a lot of errors in the logs, I wondered if some of those could be fixed?
thanks
Wed Mar 27 12:48:31 2024 kern.warn kernel: [ 37.104937] ath10k_pci 0001:01:00.0: Firmware lacks feature flag indicating a retry limit of > 2 is OK, requested limit: 4
Wed Mar 27 12:48:31 2024 authpriv.warn dropbear[2088]: Failed listening on '22': Error listening: Address not available
Wed Mar 27 12:48:31 2024 authpriv.info dropbear[2088]: Not backgrounding
2024 daemon.notice netifd: radio1 (1776): WARNING: Variable 'data' does not exist or is not an array/object
Wed Mar 27 12:48:20 2024 kern.err kernel: [ 1.641153] OF: Bad cell count for /soc/nand-controller@1ac00000/nand@0/partitions
Wed Mar 27 12:48:20 2024 kern.err kernel: [ 1.648004] OF: Bad cell count for /soc/nand-controller@1ac00000/nand@0/partitions
daemon.warn /usr/sbin/irqbalance: Cannot change IRQ 44 affinity: Invalid argument
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: IRQ 44 affinity is now unmanaged
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: Cannot change IRQ 54 affinity: Invalid argument
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: IRQ 54 affinity is now unmanaged
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: Cannot change IRQ 46 affinity: Invalid argument
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: IRQ 46 affinity is now unmanaged
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: Cannot change IRQ 53 affinity: Invalid argument
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: IRQ 53 affinity is now unmanaged
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: Cannot change IRQ 24 affinity: I/O error
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: IRQ 24 affinity is now unmanaged
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: Cannot change IRQ 48 affinity: Invalid argument
Wed Mar 27 14:08:25 2024 daemon.warn /usr/sbin/irqbalance: IRQ 48 affinity is now unmanaged
maybe this you could post your file:
/etc/config/dropbear
you could enable dropbear only on the LAN
example:
cat /etc/config/dropbear
config dropbear
option PasswordAuth 'on'
option Port '22'
option Interface 'lan'
for the errors (which are warnings not errors) of irqbalance see the post:
Hi Hnyman,
thank you for your effort. Irqbalance is a really important package for the performance, I hope you manage to fix it.
All the best
2 Likes
I have the same error than @Peacefuleight about dropbear and I.have the same setup than you on dropbear config.
logread | grep "dropbear" | grep "listening" | wc -l
0
I don't have any errors, you can post output commands:
ifconfig
netstat -atnup
ncompact:
netstat -atnup
on my side I have that;
root@OpenWrt:~# ifconfig
br-lan Link encap:Ethernet HWaddr xx:xx:xx:xx:xx
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:464747 errors:0 dropped:92 overruns:0 frame:0
TX packets:3663933 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:45198083 (43.1 MiB) TX bytes:5393468808 (5.0 GiB)
eth0 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3677716 errors:0 dropped:0 overruns:0 frame:0
TX packets:452314 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1118615702 (1.0 GiB) TX bytes:51272710 (48.8 MiB)
Interrupt:39
eth0.2 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx
inet addr:xx.xx.xx.x Bcast:24.xx.xx.xx.x Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1766961 errors:0 dropped:0 overruns:0 frame:0
TX packets:452307 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:5248029710 (4.8 GiB) TX bytes:49462656 (47.1 MiB)
eth1 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:381459 errors:0 dropped:0 overruns:0 frame:0
TX packets:3457180 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:35137203 (33.5 MiB) TX bytes:899740054 (858.0 MiB)
Interrupt:40
eth1.1 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:380430 errors:0 dropped:0 overruns:0 frame:0
TX packets:3457159 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:28216229 (26.9 MiB) TX bytes:5180874738 (4.8 GiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:5080 errors:0 dropped:0 overruns:0 frame:0
TX packets:5080 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:510803 (498.8 KiB) TX bytes:510803 (498.8 KiB)
phy0-ap0 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:86640 errors:0 dropped:0 overruns:0 frame:0
TX packets:220032 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:18674989 (17.8 MiB) TX bytes:217044025 (206.9 MiB)
phy1-ap0 Link encap:Ethernet HWaddr xx:xx:xx:xx:xx
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2030 errors:0 dropped:0 overruns:0 frame:0
TX packets:11944 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:147720 (144.2 KiB) TX bytes:5012983 (4.7 MiB)
root@OpenWrt:~# netstat -atnup
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:53 0.0.0.0:* LISTEN 5115/dnsmasq
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1706/uhttpd
tcp 0 0 127.0.0.1:5353 0.0.0.0:* LISTEN 3428/dnsproxy
tcp 0 0 24.xx.xx.xx:53 0.0.0.0:* LISTEN 5115/dnsmasq
tcp 0 0 192.168.1.1:53 0.0.0.0:* LISTEN 5115/dnsmasq
tcp 0 0 192.168.1.1:22 0.0.0.0:* LISTEN 2199/dropbear
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN 1706/uhttpd
tcp 0 892 192.168.1.1:22 192.168.1.178:50714 ESTABLISHED 6258/dropbear
tcp 0 0 :::80 :::* LISTEN 1706/uhttpd
tcp 0 0 :::443 :::* LISTEN 1706/uhttpd
udp 0 0 24.xx.xx.xx:123 0.0.0.0:* 5525/ntpd
udp 0 0 192.168.1.1:123 0.0.0.0:* 5525/ntpd
udp 0 0 127.0.0.1:123 0.0.0.0:* 5525/ntpd
udp 0 0 0.0.0.0:123 0.0.0.0:* 5525/ntpd
udp 0 0 127.0.0.1:5353 0.0.0.0:* 3428/dnsproxy
udp 0 0 127.0.0.1:53 0.0.0.0:* 5115/dnsmasq
udp 0 0 192.168.1.1:53 0.0.0.0:* 5115/dnsmasq
udp 0 0 24.xx.xx.x:53 0.0.0.0:* 5115/dnsmasq
udp 0 0 0.0.0.0:67 0.0.0.0:* 5115/dnsmasq
udp 0 0 :::123 :::* 5525/ntpd
udp 0 0 :::39855 :::* 3428/dnsproxy
root@OpenWrt:~#
1 Like
could you try to see if by restarting the dropbear daemon the error persists or is it something that only occurs once when starting/restarting the router?
if it only shows up once when you start/restart the router you could try moving the execution order of the daemons
mv /etc/rc.d/S19dropbear /etc/rd.d/S21dropbear
show this command:
ls -la /etc/rc.d
/etc/init.d/dropbear restart
Thu Mar 28 07:04:44 2024 authpriv.info dropbear[2199]: Early exit: Terminated by signal
Thu Mar 28 07:04:44 2024 authpriv.warn dropbear[7577]: Failed listening on '22': Error listening: Address not available
Thu Mar 28 07:04:44 2024 authpriv.info dropbear[7577]: Not backgrounding
root@OpenWrt:~# ls -la /etc/rc.d
drwxr-xr-x 1 root root 376 Mar 27 16:41 .
drwxr-xr-x 1 root root 2000 Mar 27 16:38 ..
lrwxrwxrwx 1 root root 18 Mar 22 18:09 K10collectd -> ../init.d/collectd
lrwxrwxrwx 1 root root 21 Mar 22 18:09 K10gpio_switch -> ../init.d/gpio_switch
lrwxrwxrwx 1 root root 20 Mar 22 18:09 K10irqbalance -> ../init.d/irqbalance
lrwxrwxrwx 1 root root 25 Mar 22 18:09 K11luci_statistics -> ../init.d/luci_statistics
lrwxrwxrwx 1 root root 14 Mar 22 18:09 K21wpad -> ../init.d/wpad
lrwxrwxrwx 1 root root 22 Mar 27 16:37 K4adblock-lean -> ../init.d/adblock-lean
lrwxrwxrwx 1 root root 18 Mar 22 18:09 K50dropbear -> ../init.d/dropbear
lrwxrwxrwx 1 root root 14 Mar 22 18:09 K65ntpd -> ../init.d/ntpd
lrwxrwxrwx 1 root root 13 Mar 22 18:09 K89log -> ../init.d/log
lrwxrwxrwx 1 root root 14 Mar 22 18:09 K90boot -> ../init.d/boot
lrwxrwxrwx 1 root root 17 Mar 22 18:09 K90network -> ../init.d/network
lrwxrwxrwx 1 root root 20 Mar 22 18:09 K90sysfixtime -> ../init.d/sysfixtime
lrwxrwxrwx 1 root root 16 Mar 22 18:09 K90umount -> ../init.d/umount
lrwxrwxrwx 1 root root 20 Mar 22 18:09 S00sysfixtime -> ../init.d/sysfixtime
lrwxrwxrwx 1 root root 15 Mar 22 18:09 S00urngd -> ../init.d/urngd
lrwxrwxrwx 1 root root 14 Mar 22 18:09 S10boot -> ../init.d/boot
lrwxrwxrwx 1 root root 16 Mar 22 18:09 S10system -> ../init.d/system
lrwxrwxrwx 1 root root 16 Mar 22 18:09 S11sysctl -> ../init.d/sysctl
lrwxrwxrwx 1 root root 13 Mar 22 18:09 S12log -> ../init.d/log
lrwxrwxrwx 1 root root 14 Mar 22 18:09 S12rpcd -> ../init.d/rpcd
lrwxrwxrwx 1 root root 17 Mar 22 18:09 S13openssl -> ../init.d/openssl
lrwxrwxrwx 1 root root 17 Mar 22 18:09 S15cpufreq -> ../init.d/cpufreq
lrwxrwxrwx 1 root root 17 Mar 22 18:09 S19dnsmasq -> ../init.d/dnsmasq
lrwxrwxrwx 1 root root 18 Mar 22 18:09 S19dropbear -> ../init.d/dropbear
lrwxrwxrwx 1 root root 18 Mar 22 18:09 S19firewall -> ../init.d/firewall
lrwxrwxrwx 1 root root 14 Mar 22 18:09 S19wpad -> ../init.d/wpad
lrwxrwxrwx 1 root root 17 Mar 22 18:09 S20network -> ../init.d/network
lrwxrwxrwx 1 root root 25 Mar 22 18:09 S25packet_steering -> ../init.d/packet_steering
lrwxrwxrwx 1 root root 14 Mar 22 18:09 S50cron -> ../init.d/cron
lrwxrwxrwx 1 root root 16 Mar 22 18:09 S50uhttpd -> ../init.d/uhttpd
lrwxrwxrwx 1 root root 17 Mar 22 18:09 S60ntpdate -> ../init.d/ntpdate
lrwxrwxrwx 1 root root 14 Mar 22 18:09 S65ntpd -> ../init.d/ntpd
lrwxrwxrwx 1 root root 25 Mar 22 18:09 S79luci_statistics -> ../init.d/luci_statistics
lrwxrwxrwx 1 root root 18 Mar 22 18:09 S80collectd -> ../init.d/collectd
lrwxrwxrwx 1 root root 18 Mar 22 18:09 S80ucitrack -> ../init.d/ucitrack
lrwxrwxrwx 1 root root 18 Mar 22 18:09 S90dnsproxy -> ../init.d/dnsproxy
lrwxrwxrwx 1 root root 20 Mar 22 18:09 S90irqbalance -> ../init.d/irqbalance
lrwxrwxrwx 1 root root 21 Mar 22 18:09 S94gpio_switch -> ../init.d/gpio_switch
lrwxrwxrwx 1 root root 13 Mar 22 18:09 S94pbr -> ../init.d/pbr
lrwxrwxrwx 1 root root 15 Mar 22 18:09 S95banip -> ../init.d/banip
lrwxrwxrwx 1 root root 14 Mar 22 18:09 S95done -> ../init.d/done
lrwxrwxrwx 1 root root 13 Mar 22 18:09 S96led -> ../init.d/led
lrwxrwxrwx 1 root root 22 Mar 27 16:37 S99adblock-lean -> ../init.d/adblock-lean
lrwxrwxrwx 1 root root 19 Mar 22 18:09 S99bootcount -> ../init.d/bootcount
lrwxrwxrwx 1 root root 22 Mar 22 18:09 S99urandom_seed -> ../init.d/urandom_seed
root@OpenWrt:~#
mv /etc/rc.d/S19dropbear /etc/rc.d/S21dropbear
Thu Mar 28 07:09:37 2024 authpriv.info dropbear[7577]: Early exit: Terminated by signal
Thu Mar 28 07:09:37 2024 authpriv.warn dropbear[7667]: Failed listening on '22': Error listening: Address not available
Thu Mar 28 07:09:37 2024 authpriv.info dropbear[7667]: Not backgrounding
From what I can observe you have only one instance of Dropbear running on the LAN and you have no IPV6 addresses assigned to the LAN
you can ignore the warning or open a bug-track on the git.openwrt.org site, however they are warnings, not exactly errors...
see if you want to proceed in that direction...
1 Like
ok thank you, but first time I have that and I use the same config, as usual....
However, you could attach the following information to allow someone more expert than me to analyze the warning message you receive
this message obviously:
Please connect to your OpenWrt device using ssh and copy the output of the following commands and post it here using the "Preformatted text </>
" button:
Remember to redact passwords, MAC addresses and any public IP addresses you may have:
ubus call system board
cat /etc/config/network
cat /etc/config/dhcp
cat /etc/config/firewall
cat /etc/config/dropbear
2 Likes
root@OpenWrt:~# ubus call system board
{
"kernel": "5.15.150",
"hostname": "OpenWrt",
"system": "ARMv7 Processor rev 0 (v7l)",
"model": "Netgear Nighthawk X4S R7800",
"board_name": "netgear,r7800",
"rootfs_type": "squashfs",
"release": {
"distribution": "OpenWrt",
"version": "23.05.3",
"revision": "r23809-234f1a2efa",
"target": "ipq806x/generic",
"description": "OpenWrt 23.05.3 r23809-234f1a2efa"
}
}
root@OpenWrt:~# cat /etc/config/network
config interface 'loopback'
option device 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fd39:dc21:be95::/48'
config device
option name 'br-lan'
option type 'bridge'
list ports 'eth1.1'
config interface 'lan'
option device 'br-lan'
option proto 'static'
option ipaddr '192.168.1.1'
option netmask '255.255.255.0'
option ip6assign '60'
config interface 'wan'
option device 'eth0.2'
option proto 'dhcp'
config switch
option name 'switch0'
option reset '1'
option enable_vlan '1'
config switch_vlan
option device 'switch0'
option vlan '1'
option ports '1 2 3 4 6t'
config switch_vlan
option device 'switch0'
option vlan '2'
option ports '5 0t'
config device 'guest_dev'
option type 'bridge'
option name 'br-guest'
config interface 'guest'
option proto 'static'
option device 'br-guest'
list ipaddr '192.168.3.1/24'
root@OpenWrt:~# cat /etc/config/dhcp
config dnsmasq
option domainneeded '1'
option localise_queries '1'
option local '/lan/'
option domain 'lan'
option expandhosts '1'
option authoritative '1'
option readethers '1'
option leasefile '/tmp/dhcp.leases'
option localservice '1'
option ednspacket_max '1232'
option rebind_protection '0'
option noresolv '1'
option localuse '1'
option filter_aaaa '1'
option allservers '1'
option nonegcache '1'
option cachesize '2500'
option confdir '/tmp/dnsmasq.d'
list server '/pool.ntp.org/1.1.1.1'
list server '/time.cloudflare.com/1.1.1.1'
list server '127.0.0.1#5353'
list addnmount '/bin/busybox'
config dhcp 'lan'
option interface 'lan'
option start '100'
option limit '150'
option leasetime '12h'
config dhcp 'wan'
option interface 'wan'
option ignore '1'
config dhcp 'guest'
option interface 'guest'
option start '100'
option limit '150'
option leasetime '12h'
root@OpenWrt:~# cat /etc/config/firewall
config defaults
option syn_flood '1'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
config zone
option name 'lan'
option input 'ACCEPT'
option output 'ACCEPT'
option forward 'ACCEPT'
list network 'lan'
config zone
option name 'wan'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
option masq '1'
option mtu_fix '1'
list network 'wan'
config forwarding
option src 'lan'
option dest 'wan'
config rule
option name 'Allow-DHCP-Renew'
option src 'wan'
option proto 'udp'
option dest_port '68'
option target 'ACCEPT'
option family 'ipv4'
config rule
option name 'Allow-Ping'
option src 'wan'
option proto 'icmp'
option icmp_type 'echo-request'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-IGMP'
option src 'wan'
option proto 'igmp'
option family 'ipv4'
option target 'ACCEPT'
config rule
option name 'Allow-DHCPv6'
option src 'wan'
option proto 'udp'
option dest_port '546'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-MLD'
option src 'wan'
option proto 'icmp'
option src_ip 'fe80::/10'
list icmp_type '130/0'
list icmp_type '131/0'
list icmp_type '132/0'
list icmp_type '143/0'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Input'
option src 'wan'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
list icmp_type 'router-solicitation'
list icmp_type 'neighbour-solicitation'
list icmp_type 'router-advertisement'
list icmp_type 'neighbour-advertisement'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-ICMPv6-Forward'
option src 'wan'
option dest '*'
option proto 'icmp'
list icmp_type 'echo-request'
list icmp_type 'echo-reply'
list icmp_type 'destination-unreachable'
list icmp_type 'packet-too-big'
list icmp_type 'time-exceeded'
list icmp_type 'bad-header'
list icmp_type 'unknown-header-type'
option limit '1000/sec'
option family 'ipv6'
option target 'ACCEPT'
config rule
option name 'Allow-IPSec-ESP'
option src 'wan'
option dest 'lan'
option proto 'esp'
option target 'ACCEPT'
config rule
option name 'Allow-ISAKMP'
option src 'wan'
option dest 'lan'
option dest_port '500'
option proto 'udp'
option target 'ACCEPT'
config include 'pbr'
option fw4_compatible '1'
option type 'script'
option path '/usr/share/pbr/pbr.firewall.include'
config zone 'guest'
option name 'guest'
option network 'guest'
option input 'REJECT'
option output 'ACCEPT'
option forward 'REJECT'
config forwarding 'guest_wan'
option src 'guest'
option dest 'wan'
config rule 'guest_dns'
option name 'Allow-DNS-Guest'
option src 'guest'
option dest_port '53'
option proto 'tcp udp'
option target 'ACCEPT'
config rule 'guest_dhcp'
option name 'Allow-DHCP-Guest'
option src 'guest'
option dest_port '67'
option proto 'udp'
option family 'ipv4'
option target 'ACCEPT'
config redirect 'dns_int'
option name 'Intercept-DNS'
option src 'lan'
option src_dport '53'
option proto 'tcp udp'
option family 'any'
option target 'DNAT'
root@OpenWrt:~# cat /etc/config/dropbear
config dropbear
option PasswordAuth 'off'
option RootPasswordAuth 'off'
option Port '22'
option Interface 'lan'
root@OpenWrt:~#
1 Like