DDoS attack detection solution - FastNetMon

Hello! :) As you know I'm an author of DDoS detection application called FastNetMon.

FastNetMon allows you to find out host which was a DDoS attack target and apply some actions to mitigate it. Mitigation can be implemented using BGP Blackhole (which blocks all traffic to/from host on ISP level) or you can use BGP Flow Spec to filter out only malicious traffic. As most flexible option you can use script call.

FastNetMon provides lots of information about your network and provides nice way to access it using Grafana:

FastNetMon supports all equipment available on market and implement following network telemetry protocols:

• sFlow v5
• Netflow v5, v9, v10
• IPFIX
• SPAN/Mirror

To learn more check official site of project: https://fastnetmon.com

Ubuntu 24.04, frame.work laptop and Intel Corporation Wi-Fi 6E(802.11ax) AX210/AX1675* 2x2 [Typhoon Peak] (rev 1a)

 Today I had issues with Intel Corporation Wi-Fi 6E(802.11ax) AX210/AX1675* 2x2 [Typhoon Peak] (rev 1a) on my shiny frame.work laptop.

It failed with following error in dmesg:

[   16.658015] [drm] ring sdma_32768.3.3 ib test pass

[   16.661872] ------------[ cut here ]------------

[   16.661874] Timeout waiting for hardware access (CSR_GP_CNTRL 0xffffffff)

[   16.661898] WARNING: CPU: 11 PID: 1402 at drivers/net/wireless/intel/iwlwifi/pcie/trans.c:2237 __iwl_trans_pcie_grab_nic_access+0x1a0/0x1b0 [iwlwifi]

[   16.661919] Modules linked in: binfmt_misc nls_iso8859_1 intel_rapl_msr intel_rapl_common amdgpu(+) snd_sof_amd_acp63 snd_sof_amd_vangogh snd_sof_amd_rembrandt snd_hda_codec_realtek snd_sof_amd_renoir snd_sof_amd_acp snd_hda_codec_generic snd_sof_pci snd_sof_xtensa_dsp snd_hda_codec_hdmi iwlmvm(+) snd_sof snd_hda_intel snd_sof_utils snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec edac_mce_amd snd_soc_core snd_hda_core mac80211 snd_compress amdxcp ac97_bus drm_exec snd_hwdep btusb snd_pcm_dmaengine uvcvideo btrtl snd_seq_midi snd_pci_ps gpu_sched videobuf2_vmalloc kvm_amd snd_seq_midi_event btintel snd_rpl_pci_acp6x drm_buddy uvc snd_acp_pci btbcm drm_suballoc_helper videobuf2_memops libarc4 snd_rawmidi sch_fq_codel btmtk drm_ttm_helper snd_acp_legacy_common cros_ec_lpcs videobuf2_v4l2 cros_ec snd_pci_acp6x snd_seq kvm ttm hid_sensor_als snd_pcm bluetooth iwlwifi videodev hid_sensor_trigger snd_seq_device drm_display_helper industrialio_triggered_buffer snd_pci_acp5x snd_timer kfifo_buf irqbypass snd_rn_pci_acp3x cec

[   16.661983]  videobuf2_common hid_sensor_iio_common snd_acp_config ecdh_generic mc amd_pmf ecc rc_core rapl snd_soc_acpi snd industrialio amdtee cfg80211 snd_pci_acp3x soundcore k10temp i2c_algo_bit i2c_piix4 ccp amd_sfh tee input_leds platform_profile amd_pmc joydev serio_raw mac_hid msr parport_pc ppdev lp parport xt_cgroup efi_pstore nfnetlink dmi_sysfs ip_tables x_tables autofs4 dm_crypt usbhid crct10dif_pclmul nvme crc32_pclmul polyval_clmulni polyval_generic ghash_clmulni_intel nvme_core sha256_ssse3 ucsi_acpi hid_sensor_hub hid_multitouch hid_generic sha1_ssse3 thunderbolt typec_ucsi xhci_pci xhci_pci_renesas i2c_hid_acpi nvme_auth typec i2c_hid video wmi hid aesni_intel crypto_simd cryptd

[   16.662050] CPU: 11 PID: 1402 Comm: modprobe Not tainted 6.8.0-48-generic #48-Ubuntu

[   16.662053] Hardware name: Framework Laptop 13 (AMD Ryzen 7040Series)/FRANMDCP07, BIOS 03.03 10/17/2023

[   16.662055] RIP: 0010:__iwl_trans_pcie_grab_nic_access+0x1a0/0x1b0 [iwlwifi]

[   16.662071] Code: dc 31 c0 e9 6b ff ff ff 31 f6 48 89 df e8 18 fd ff ff eb e5 44 89 e6 48 c7 c7 50 c7 ca c0 c6 05 cd f9 02 00 01 e8 40 f9 4b db <0f> 0b eb 93 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90

[   16.662074] RSP: 0018:ffffb966c42af480 EFLAGS: 00010246

[   16.662076] RAX: 0000000000000000 RBX: ffff913b9c7d0028 RCX: 0000000000000000

[   16.662078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000

[   16.662079] RBP: ffffb966c42af4a8 R08: 0000000000000000 R09: 0000000000000000

[   16.662081] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000ffffffff

[   16.662082] R13: 0000000000000000 R14: ffff913b9c7d35f4 R15: 0000000000000011

[   16.662084] FS:  00007eba36978080(0000) GS:ffff9142de780000(0000) knlGS:0000000000000000

[   16.662085] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033

[   16.662086] CR2: 00005bc3c7a65628 CR3: 0000000105692000 CR4: 0000000000f50ef0

[   16.662088] PKRU: 55555554

[   16.662089] Call Trace:

[   16.662090]  <TASK>

[   16.662093]  ? show_regs+0x6d/0x80

[   16.662097]  ? __warn+0x89/0x160

[   16.662102]  ? __iwl_trans_pcie_grab_nic_access+0x1a0/0x1b0 [iwlwifi]

[   16.662119]  ? report_bug+0x17e/0x1b0

[   16.662123]  ? handle_bug+0x51/0xa0

[   16.662126]  ? exc_invalid_op+0x18/0x80

[   16.662128]  ? asm_exc_invalid_op+0x1b/0x20

[   16.662153]  ? __iwl_trans_pcie_grab_nic_access+0x1a0/0x1b0 [iwlwifi]

[   16.662169]  iwl_trans_pcie_grab_nic_access+0x1a/0x50 [iwlwifi]

[   16.662185]  iwl_read_prph+0x1f/0x70 [iwlwifi]

[   16.662200]  iwl_mvm_load_ucode_wait_alive+0x308/0x670 [iwlmvm]

[   16.662240]  ? __pfx_iwl_alive_fn+0x10/0x10 [iwlmvm]

[   16.662260]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662265]  iwl_run_unified_mvm_ucode+0xc9/0x310 [iwlmvm]

[   16.662278]  ? __pfx_iwl_wait_init_complete+0x10/0x10 [iwlmvm]

[   16.662298]  ? iwl_write32+0x33/0x90 [iwlwifi]

[   16.662313]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662317]  iwl_run_init_mvm_ucode+0x216/0x420 [iwlmvm]

[   16.662336]  ? iwl_read32+0x21/0x90 [iwlwifi]

[   16.662353]  ? iwl_trans_pcie_start_hw+0x8e/0x300 [iwlwifi]

[   16.662370]  iwl_mvm_start_get_nvm+0xaf/0x2c0 [iwlmvm]

[   16.662393]  iwl_op_mode_mvm_start+0x81d/0xab0 [iwlmvm]

[   16.662413]  _iwl_op_mode_start+0xba/0xf0 [iwlwifi]

[   16.662428]  iwl_opmode_register+0x6d/0xf0 [iwlwifi]

[   16.662446]  ? __pfx_iwl_mvm_init+0x10/0x10 [iwlmvm]

[   16.662466]  iwl_mvm_init+0x26/0xff0 [iwlmvm]

[   16.662484]  ? __pfx_iwl_mvm_init+0x10/0x10 [iwlmvm]

[   16.662505] [drm] Initialized amdgpu 3.57.0 20150101 for 0000:c1:00.0 on minor 1

[   16.662503]  do_one_initcall+0x5b/0x340

[   16.662510]  do_init_module+0x97/0x290

[   16.662514]  load_module+0xba1/0xcf0

[   16.662516]  ? kvfree+0x31/0x40

[   16.662524]  init_module_from_file+0x96/0x100

[   16.662526]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662529]  ? init_module_from_file+0x96/0x100

[   16.662534]  idempotent_init_module+0x11c/0x2b0

[   16.662538]  __x64_sys_finit_module+0x64/0xd0

[   16.662541]  x64_sys_call+0x1d6e/0x25c0

[   16.662544]  do_syscall_64+0x7f/0x180

[   16.662547]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662549]  ? touch_atime+0xbe/0x120

[   16.662553]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662558]  ? filemap_read+0x3f7/0x470

[   16.662564]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662566]  ? generic_file_read_iter+0xbb/0x110

[   16.662569]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662574]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662576]  ? rseq_get_rseq_cs+0x22/0x280

[   16.662580]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662582]  ? rseq_ip_fixup+0x90/0x1f0

[   16.662585]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662589]  ? ext4_llseek+0xc3/0x130

[   16.662594]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662596]  ? ksys_lseek+0x7d/0xd0

[   16.662600]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662602]  ? syscall_exit_to_user_mode+0x86/0x260

[   16.662608]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662610]  ? do_syscall_64+0x8c/0x180

[   16.662613]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662614]  ? syscall_exit_to_user_mode+0x86/0x260

[   16.662617]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662618]  ? do_syscall_64+0x8c/0x180

[   16.662623]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662625]  ? __fput+0x15e/0x2e0

[   16.662628]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662630]  ? __fput_sync+0x1c/0x30

[   16.662632]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662634]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662638]  ? syscall_exit_to_user_mode+0x86/0x260

[   16.662641]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662643]  ? do_syscall_64+0x8c/0x180

[   16.662645]  ? do_syscall_64+0x8c/0x180

[   16.662647]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662648]  ? irqentry_exit+0x43/0x50

[   16.662652]  ? srso_alias_return_thunk+0x5/0xfbef5

[   16.662654]  ? exc_page_fault+0x94/0x1b0

[   16.662657]  entry_SYSCALL_64_after_hwframe+0x78/0x80

[   16.662659] RIP: 0033:0x7eba3612725d

[   16.662689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 8b bb 0d 00 f7 d8 64 89 01 48

[   16.662691] RSP: 002b:00007ffe328f2998 EFLAGS: 00000246 ORIG_RAX: 0000000000000139

[   16.662694] RAX: ffffffffffffffda RBX: 00005f731b305f70 RCX: 00007eba3612725d

[   16.662695] RDX: 0000000000000004 RSI: 00005f731a834e52 RDI: 0000000000000002

[   16.662696] RBP: 00007ffe328f2a50 R08: 0000000000000040 R09: 00007ffe328f29e0

[   16.662697] R10: 00007eba36203b20 R11: 0000000000000246 R12: 00005f731a834e52

[   16.662698] R13: 0000000000040000 R14: 00005f731b305dd0 R15: 0000000000000000

[   16.662701]  </TASK>

[   16.662702] ---[ end trace 0000000000000000 ]---

[   16.662706] iwlwifi 0000:01:00.0: iwlwifi transaction failed, dumping registers

[   16.662712] iwlwifi 0000:01:00.0: iwlwifi device config registers:

[   16.662832] iwlwifi 0000:01:00.0: 00000000: 27258086 00100000 0280001a 00000000 00000004 00000000 00000000 00000000

[   16.662834] iwlwifi 0000:01:00.0: 00000020: 00000000 00000000 00000000 00208086 00000000 000000c8 00000000 00000100

[   16.662836] iwlwifi 0000:01:00.0: 00000040: 00028010 10008ec0 001b0c10 0445e812 10120000 00000000 00000000 00000000

[   16.662838] iwlwifi 0000:01:00.0: 00000060: 00000000 00080812 00000005 00000006 00000002 00000000 00000000 00000000

[   16.662840] iwlwifi 0000:01:00.0: 00000080: 000f0011 00002000 00003000 00000000 00000000 00000000 00000000 00000000

[   16.662842] iwlwifi 0000:01:00.0: 000000a0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.662844] iwlwifi 0000:01:00.0: 000000c0: 00000000 00000000 c823d001 0d000008 00804005 00000000 00000000 00000000

[   16.662846] iwlwifi 0000:01:00.0: 000000e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.662847] iwlwifi 0000:01:00.0: 00000100: 14c10001 00100000 00000000 00462031 00002000 00002000 00000014 40001001

[   16.662849] iwlwifi 0000:01:00.0: 00000120: 0000000f 90b00024 00000000 00000000 00000000 00000000 00000000 00000000

[   16.662851] iwlwifi 0000:01:00.0: 00000140: 14c00000 ff000000 000000ff 15410018 00000000 0001001e 00481e1f 00000000

[   16.662853] iwlwifi 0000:01:00.0: iwlwifi device memory mapped registers:

[   16.662871] iwlwifi 0000:01:00.0: 00000000: ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff

[   16.662873] iwlwifi 0000:01:00.0: 00000020: ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff

[   16.662876] iwlwifi 0000:01:00.0: iwlwifi device AER capability structure:

[   16.662893] iwlwifi 0000:01:00.0: 00000000: 14c10001 00100000 00000000 00462031 00002000 00002000 00000014 40001001

[   16.662894] iwlwifi 0000:01:00.0: 00000020: 0000000f 90b00024 00000000

[   16.662896] iwlwifi 0000:01:00.0: iwlwifi parent port (0000:00:02.2) config registers:

[   16.662981] iwlwifi 0000:00:02.2: 00000000: 14ee1022 00100407 06040000 00810010 00000000 00000000 00010100 200001f1

[   16.662982] iwlwifi 0000:00:02.2: 00000020: 90b090b0 0001fff1 00000000 00000000 00000000 00000050 00000000 000200ff

[   16.662984] iwlwifi 0000:00:02.2: 00000040: 00000000 00000000 00000000 00000000 c8035801 00000000 0142a010 00008021

[   16.662986] iwlwifi 0000:00:02.2: 00000060: 00002910 04737814 f01200c2 00042580 01400000 00010018 00000000 007319ff

[   16.662988] iwlwifi 0000:00:02.2: 00000080: 00000006 0180001e 00010042 00000000 00000000 00000000 00000000 00000000

[   16.662990] iwlwifi 0000:00:02.2: 000000a0: 0081c005 fee00000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.662992] iwlwifi 0000:00:02.2: 000000c0: 0000c80d 14531022 a8030008 00000000 00000000 00000000 00000000 00000000

[   16.662994] iwlwifi 0000:00:02.2: 000000e0: 00000000 9fff27fc 00000000 00000000 00000000 00000000 00000000 00000000

[   16.662995] iwlwifi 0000:00:02.2: 00000100: 2701000b 01010001 00000000 00000000 00000000 00000000 00000000 00000000

[   16.662997] iwlwifi 0000:00:02.2: 00000120: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.662999] iwlwifi 0000:00:02.2: 00000140: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.663001] iwlwifi 0000:00:02.2: 00000160: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.663002] iwlwifi 0000:00:02.2: 00000180: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.663004] iwlwifi 0000:00:02.2: 000001a0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.663006] iwlwifi 0000:00:02.2: 000001c0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.663008] iwlwifi 0000:00:02.2: 000001e0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000

[   16.663009] iwlwifi 0000:00:02.2: 00000200: 00000000 00000000 00000000

[   16.663022] iwlwifi 0000:01:00.0: WFPM_UMAC_PD_NOTIFICATION: 0x5a5a5a5a

[   16.680493] iwlwifi 0000:01:00.0: WFPM_LMAC2_PD_NOTIFICATION: 0x5a5a5a5a

[   16.689449] fbcon: amdgpudrmfb (fb0) is primary device

[   16.689453] fbcon: Deferring console take-over

[   16.689457] amdgpu 0000:c1:00.0: [drm] fb0: amdgpudrmfb frame buffer device

[   16.698242] iwlwifi 0000:01:00.0: WFPM_AUTH_KEY_0: 0x5a5a5a5a

[   16.716327] iwlwifi 0000:01:00.0: CNVI_SCU_SEQ_DATA_DW9: 0x5a5a5a5a

[   16.752505] iwlwifi 0000:01:00.0: SecBoot CPU1 Status: 0x5a5a5a5a, CPU2 Status: 0x5a5a5a5a

[   16.770564] iwlwifi 0000:01:00.0: WFPM_LMAC1_PD_NOTIFICATION: 0x5a5a5a5a

[   16.788685] iwlwifi 0000:01:00.0: HPM_SECONDARY_DEVICE_STATE: 0x5a5a5a5a

[   16.806757] iwlwifi 0000:01:00.0: WFPM_MAC_OTP_CFG7_ADDR: 0x5a5a5a5a

[   16.824797] iwlwifi 0000:01:00.0: WFPM_MAC_OTP_CFG7_DATA: 0x5a5a5a5a

[   16.824801] iwlwifi 0000:01:00.0: UMAC CURRENT PC: 0xd05c18

[   16.824805] iwlwifi 0000:01:00.0: LMAC1 CURRENT PC: 0xd05c1c

[   16.824810] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms).

[   16.860939] iwlwifi 0000:01:00.0: HW error, resetting before reading

[   16.884510] iwlwifi 0000:01:00.0: Loaded firmware version: 86.fb5c9aeb.0 ty-a0-gf-a0-86.ucode

[   16.884513] iwlwifi 0000:01:00.0: 0x00000000 | ADVANCED_SYSASSERT          

[   16.884515] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status0

[   16.884517] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status1

[   16.884518] iwlwifi 0000:01:00.0: 0x00000000 | branchlink2

[   16.884520] iwlwifi 0000:01:00.0: 0x00000000 | interruptlink1

[   16.884521] iwlwifi 0000:01:00.0: 0x00000000 | interruptlink2

[   16.884523] iwlwifi 0000:01:00.0: 0x00000000 | data1

[   16.884524] iwlwifi 0000:01:00.0: 0x00000000 | data2

[   16.884525] iwlwifi 0000:01:00.0: 0x00000000 | data3

[   16.884527] iwlwifi 0000:01:00.0: 0x00000000 | beacon time

[   16.884528] iwlwifi 0000:01:00.0: 0x00000000 | tsf low

[   16.884530] iwlwifi 0000:01:00.0: 0x00000000 | tsf hi

[   16.884531] iwlwifi 0000:01:00.0: 0x00000000 | time gp1

[   16.884533] iwlwifi 0000:01:00.0: 0x00000000 | time gp2

[   16.884534] iwlwifi 0000:01:00.0: 0x00000000 | uCode revision type

[   16.884535] iwlwifi 0000:01:00.0: 0x00000000 | uCode version major

[   16.884537] iwlwifi 0000:01:00.0: 0x00000000 | uCode version minor

[   16.884539] iwlwifi 0000:01:00.0: 0x00000000 | hw version

[   16.884540] iwlwifi 0000:01:00.0: 0x00000000 | board version

[   16.884542] iwlwifi 0000:01:00.0: 0x00000000 | hcmd

[   16.884543] iwlwifi 0000:01:00.0: 0x00000000 | isr0

[   16.884545] iwlwifi 0000:01:00.0: 0x00000000 | isr1

[   16.884546] iwlwifi 0000:01:00.0: 0x00000000 | isr2

[   16.884548] iwlwifi 0000:01:00.0: 0x00000000 | isr3

[   16.884549] iwlwifi 0000:01:00.0: 0x00000000 | isr4

[   16.884551] iwlwifi 0000:01:00.0: 0x00000000 | last cmd Id

[   16.884553] iwlwifi 0000:01:00.0: 0x00000000 | wait_event

[   16.884555] iwlwifi 0000:01:00.0: 0x00000000 | l2p_control

[   16.884556] iwlwifi 0000:01:00.0: 0x00000000 | l2p_duration

[   16.884558] iwlwifi 0000:01:00.0: 0x00000000 | l2p_mhvalid

[   16.884560] iwlwifi 0000:01:00.0: 0x00000000 | l2p_addr_match

[   16.884562] iwlwifi 0000:01:00.0: 0x00000000 | lmpm_pmg_sel

[   16.884564] iwlwifi 0000:01:00.0: 0x00000000 | timestamp

[   16.884565] iwlwifi 0000:01:00.0: 0x00000000 | flow_handler

[   16.902216] iwlwifi 0000:01:00.0: 0x00000000 | ADVANCED_SYSASSERT

[   16.902227] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink1

[   16.902229] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink2

[   16.902231] iwlwifi 0000:01:00.0: 0x00000000 | umac interruptlink1

[   16.902233] iwlwifi 0000:01:00.0: 0x00000000 | umac interruptlink2

[   16.902234] iwlwifi 0000:01:00.0: 0x00000000 | umac data1

[   16.902236] iwlwifi 0000:01:00.0: 0x00000000 | umac data2

[   16.902238] iwlwifi 0000:01:00.0: 0x00000000 | umac data3

[   16.902239] iwlwifi 0000:01:00.0: 0x00000000 | umac major

[   16.902240] iwlwifi 0000:01:00.0: 0x00000000 | umac minor

[   16.902242] iwlwifi 0000:01:00.0: 0x00000000 | frame pointer

[   16.902243] iwlwifi 0000:01:00.0: 0x00000000 | stack pointer

[   16.902245] iwlwifi 0000:01:00.0: 0x00000000 | last host cmd

[   16.902246] iwlwifi 0000:01:00.0: 0x00000000 | isr status reg

[   16.920225] iwlwifi 0000:01:00.0: IML/ROM dump:

[   16.920231] iwlwifi 0000:01:00.0: 0x5A5A | IML/ROM SYSASSERT

[   16.920235] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM error/state

[   16.938226] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM data1

[   16.948831] [drm] DSC precompute is not needed.

[   16.956476] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM WFPM_AUTH_KEY_0

[   16.992429] iwlwifi 0000:01:00.0: Failed to start RT ucode: -110

[   16.992441] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms).

[   17.028266] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=1, type=10

[   17.136964] iwlwifi 0000:01:00.0: Failed to get monitor header

[   17.136972] iwlwifi 0000:01:00.0: WRT: Failed to fill region header: id=16, type=2

[   17.173462] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=20, type=19

[   17.191494] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=22, type=10

[   17.282884] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=1, type=10

[   17.391758] iwlwifi 0000:01:00.0: Failed to get monitor header

[   17.391764] iwlwifi 0000:01:00.0: WRT: Failed to fill region header: id=16, type=2

[   17.428430] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=20, type=19

[   17.446553] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=22, type=10

[   19.352597] iwlwifi 0000:01:00.0: Failed to run INIT ucode: -110

[   19.364804] iwlwifi 0000:01:00.0: retry init count 0

[   19.366682] iwlwifi 0000:01:00.0: Detected Intel(R) Wi-Fi 6 AX210 160MHz, REV=0x420

[   19.366734] thermal thermal_zone0: failed to read out thermal zone (-61)

[   19.410788] iwlwifi 0000:01:00.0: WRT: Invalid buffer destination

[   19.528305] Bluetooth: BNEP (Ethernet Emulation) ver 1.3

[   19.528312] Bluetooth: BNEP filters: protocol multicast

[   19.528323] Bluetooth: BNEP socket layer initialized

[   19.530027] Bluetooth: MGMT ver 1.22

[   19.560713] NET: Registered PF_ALG protocol family

[   19.604902] block nvme0n1: No UUID available providing old NGUID

[   19.682871] NET: Registered PF_QIPCRTR protocol family

[   20.111120] vboxdrv: loading out-of-tree module taints kernel.

[   20.111126] vboxdrv: module verification failed: signature and/or required key missing - tainting kernel

[   20.121989] vboxdrv: Found 16 processor cores/threads

[   20.137904] vboxdrv: TSC mode is Invariant, tentative frequency 3293789431 Hz

[   20.137912] vboxdrv: Successfully loaded version 7.1.4 r165100 (interface 0x00340001)

[   20.354150] VBoxNetFlt: Successfully started.

[   20.357103] VBoxNetAdp: Successfully started.

[   21.463084] iwlwifi 0000:01:00.0: WFPM_UMAC_PD_NOTIFICATION: 0x5a5a5a5a

[   21.481099] iwlwifi 0000:01:00.0: WFPM_LMAC2_PD_NOTIFICATION: 0x5a5a5a5a

[   21.499056] iwlwifi 0000:01:00.0: WFPM_AUTH_KEY_0: 0x5a5a5a5a

[   21.517013] iwlwifi 0000:01:00.0: CNVI_SCU_SEQ_DATA_DW9: 0x5a5a5a5a

[   21.552900] iwlwifi 0000:01:00.0: SecBoot CPU1 Status: 0x5a5a5a5a, CPU2 Status: 0x5a5a5a5a

[   21.570852] iwlwifi 0000:01:00.0: WFPM_LMAC1_PD_NOTIFICATION: 0x5a5a5a5a

[   21.588822] iwlwifi 0000:01:00.0: HPM_SECONDARY_DEVICE_STATE: 0x5a5a5a5a

[   21.606864] iwlwifi 0000:01:00.0: WFPM_MAC_OTP_CFG7_ADDR: 0x5a5a5a5a

[   21.624821] iwlwifi 0000:01:00.0: WFPM_MAC_OTP_CFG7_DATA: 0x5a5a5a5a

[   21.624826] iwlwifi 0000:01:00.0: UMAC CURRENT PC: 0xd05c18

[   21.624830] iwlwifi 0000:01:00.0: LMAC1 CURRENT PC: 0xd05c1c

[   21.624835] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms).

[   21.660717] iwlwifi 0000:01:00.0: HW error, resetting before reading

[   21.684967] iwlwifi 0000:01:00.0: Loaded firmware version: 86.fb5c9aeb.0 ty-a0-gf-a0-86.ucode

[   21.684975] iwlwifi 0000:01:00.0: 0x00000000 | ADVANCED_SYSASSERT          

[   21.684980] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status0

[   21.684983] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status1

[   21.684986] iwlwifi 0000:01:00.0: 0x00000000 | branchlink2

[   21.684989] iwlwifi 0000:01:00.0: 0x00000000 | interruptlink1

[   21.684992] iwlwifi 0000:01:00.0: 0x00000000 | interruptlink2

[   21.684995] iwlwifi 0000:01:00.0: 0x00000000 | data1

[   21.684998] iwlwifi 0000:01:00.0: 0x00000000 | data2

[   21.685001] iwlwifi 0000:01:00.0: 0x00000000 | data3

[   21.685003] iwlwifi 0000:01:00.0: 0x00000000 | beacon time

[   21.685006] iwlwifi 0000:01:00.0: 0x00000000 | tsf low

[   21.685009] iwlwifi 0000:01:00.0: 0x00000000 | tsf hi

[   21.685012] iwlwifi 0000:01:00.0: 0x00000000 | time gp1

[   21.685015] iwlwifi 0000:01:00.0: 0x00000000 | time gp2

[   21.685018] iwlwifi 0000:01:00.0: 0x00000000 | uCode revision type

[   21.685021] iwlwifi 0000:01:00.0: 0x00000000 | uCode version major

[   21.685023] iwlwifi 0000:01:00.0: 0x00000000 | uCode version minor

[   21.685026] iwlwifi 0000:01:00.0: 0x00000000 | hw version

[   21.685029] iwlwifi 0000:01:00.0: 0x00000000 | board version

[   21.685032] iwlwifi 0000:01:00.0: 0x00000000 | hcmd

[   21.685035] iwlwifi 0000:01:00.0: 0x00000000 | isr0

[   21.685038] iwlwifi 0000:01:00.0: 0x00000000 | isr1

[   21.685041] iwlwifi 0000:01:00.0: 0x00000000 | isr2

[   21.685043] iwlwifi 0000:01:00.0: 0x00000000 | isr3

[   21.685046] iwlwifi 0000:01:00.0: 0x00000000 | isr4

[   21.685049] iwlwifi 0000:01:00.0: 0x00000000 | last cmd Id

[   21.685052] iwlwifi 0000:01:00.0: 0x00000000 | wait_event

[   21.685055] iwlwifi 0000:01:00.0: 0x00000000 | l2p_control

[   21.685057] iwlwifi 0000:01:00.0: 0x00000000 | l2p_duration

[   21.685060] iwlwifi 0000:01:00.0: 0x00000000 | l2p_mhvalid

[   21.685063] iwlwifi 0000:01:00.0: 0x00000000 | l2p_addr_match

[   21.685066] iwlwifi 0000:01:00.0: 0x00000000 | lmpm_pmg_sel

[   21.685069] iwlwifi 0000:01:00.0: 0x00000000 | timestamp

[   21.685072] iwlwifi 0000:01:00.0: 0x00000000 | flow_handler

[   21.703125] iwlwifi 0000:01:00.0: 0x00000000 | ADVANCED_SYSASSERT

[   21.703129] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink1

[   21.703132] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink2

[   21.703135] iwlwifi 0000:01:00.0: 0x00000000 | umac interruptlink1

[   21.703138] iwlwifi 0000:01:00.0: 0x00000000 | umac interruptlink2

[   21.703141] iwlwifi 0000:01:00.0: 0x00000000 | umac data1

[   21.703144] iwlwifi 0000:01:00.0: 0x00000000 | umac data2

[   21.703147] iwlwifi 0000:01:00.0: 0x00000000 | umac data3

[   21.703149] iwlwifi 0000:01:00.0: 0x00000000 | umac major

[   21.703152] iwlwifi 0000:01:00.0: 0x00000000 | umac minor

[   21.703155] iwlwifi 0000:01:00.0: 0x00000000 | frame pointer

[   21.703158] iwlwifi 0000:01:00.0: 0x00000000 | stack pointer

[   21.703161] iwlwifi 0000:01:00.0: 0x00000000 | last host cmd

[   21.703164] iwlwifi 0000:01:00.0: 0x00000000 | isr status reg

[   21.721112] iwlwifi 0000:01:00.0: IML/ROM dump:

[   21.721116] iwlwifi 0000:01:00.0: 0x5A5A | IML/ROM SYSASSERT

[   21.721119] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM error/state

[   21.739181] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM data1

[   21.757123] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM WFPM_AUTH_KEY_0

[   21.793025] iwlwifi 0000:01:00.0: Failed to start RT ucode: -110

[   21.793030] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms).

[   21.828345] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=1, type=10

[   21.930996] iwlwifi 0000:01:00.0: Failed to get monitor header

[   21.930998] iwlwifi 0000:01:00.0: WRT: Failed to fill region header: id=16, type=2

[   21.965573] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=20, type=19

[   21.982689] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=22, type=10

[   22.072157] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=1, type=10

[   22.180213] iwlwifi 0000:01:00.0: Failed to get monitor header

[   22.180218] iwlwifi 0000:01:00.0: WRT: Failed to fill region header: id=16, type=2

[   22.216539] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=20, type=19

[   22.234601] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=22, type=10

[   24.138606] iwlwifi 0000:01:00.0: Failed to run INIT ucode: -110

[   24.150422] iwlwifi 0000:01:00.0: retry init count 1

[   24.152480] iwlwifi 0000:01:00.0: Detected Intel(R) Wi-Fi 6 AX210 160MHz, REV=0x420

[   24.152561] thermal thermal_zone0: failed to read out thermal zone (-61)

[   24.197170] iwlwifi 0000:01:00.0: WRT: Invalid buffer destination

[   26.262951] iwlwifi 0000:01:00.0: WFPM_UMAC_PD_NOTIFICATION: 0x5a5a5a5a

[   26.280892] iwlwifi 0000:01:00.0: WFPM_LMAC2_PD_NOTIFICATION: 0x5a5a5a5a

[   26.298836] iwlwifi 0000:01:00.0: WFPM_AUTH_KEY_0: 0x5a5a5a5a

[   26.316776] iwlwifi 0000:01:00.0: CNVI_SCU_SEQ_DATA_DW9: 0x5a5a5a5a

[   26.352683] iwlwifi 0000:01:00.0: SecBoot CPU1 Status: 0x5a5a5a5a, CPU2 Status: 0x5a5a5a5a

[   26.370642] iwlwifi 0000:01:00.0: WFPM_LMAC1_PD_NOTIFICATION: 0x5a5a5a5a

[   26.388582] iwlwifi 0000:01:00.0: HPM_SECONDARY_DEVICE_STATE: 0x5a5a5a5a

[   26.406536] iwlwifi 0000:01:00.0: WFPM_MAC_OTP_CFG7_ADDR: 0x5a5a5a5a

[   26.424474] iwlwifi 0000:01:00.0: WFPM_MAC_OTP_CFG7_DATA: 0x5a5a5a5a

[   26.424478] iwlwifi 0000:01:00.0: UMAC CURRENT PC: 0xd05c18

[   26.424482] iwlwifi 0000:01:00.0: LMAC1 CURRENT PC: 0xd05c1c

[   26.424486] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms).

[   26.460373] iwlwifi 0000:01:00.0: HW error, resetting before reading

[   26.484937] iwlwifi 0000:01:00.0: Loaded firmware version: 86.fb5c9aeb.0 ty-a0-gf-a0-86.ucode

[   26.484948] iwlwifi 0000:01:00.0: 0x00000000 | ADVANCED_SYSASSERT          

[   26.484954] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status0

[   26.484957] iwlwifi 0000:01:00.0: 0x00000000 | trm_hw_status1

[   26.484961] iwlwifi 0000:01:00.0: 0x00000000 | branchlink2

[   26.484963] iwlwifi 0000:01:00.0: 0x00000000 | interruptlink1

[   26.484966] iwlwifi 0000:01:00.0: 0x00000000 | interruptlink2

[   26.484969] iwlwifi 0000:01:00.0: 0x00000000 | data1

[   26.484972] iwlwifi 0000:01:00.0: 0x00000000 | data2

[   26.484975] iwlwifi 0000:01:00.0: 0x00000000 | data3

[   26.484978] iwlwifi 0000:01:00.0: 0x00000000 | beacon time

[   26.484981] iwlwifi 0000:01:00.0: 0x00000000 | tsf low

[   26.484984] iwlwifi 0000:01:00.0: 0x00000000 | tsf hi

[   26.484986] iwlwifi 0000:01:00.0: 0x00000000 | time gp1

[   26.484989] iwlwifi 0000:01:00.0: 0x00000000 | time gp2

[   26.484992] iwlwifi 0000:01:00.0: 0x00000000 | uCode revision type

[   26.484995] iwlwifi 0000:01:00.0: 0x00000000 | uCode version major

[   26.484998] iwlwifi 0000:01:00.0: 0x00000000 | uCode version minor

[   26.485001] iwlwifi 0000:01:00.0: 0x00000000 | hw version

[   26.485004] iwlwifi 0000:01:00.0: 0x00000000 | board version

[   26.485006] iwlwifi 0000:01:00.0: 0x00000000 | hcmd

[   26.485009] iwlwifi 0000:01:00.0: 0x00000000 | isr0

[   26.485012] iwlwifi 0000:01:00.0: 0x00000000 | isr1

[   26.485015] iwlwifi 0000:01:00.0: 0x00000000 | isr2

[   26.485018] iwlwifi 0000:01:00.0: 0x00000000 | isr3

[   26.485020] iwlwifi 0000:01:00.0: 0x00000000 | isr4

[   26.485023] iwlwifi 0000:01:00.0: 0x00000000 | last cmd Id

[   26.485026] iwlwifi 0000:01:00.0: 0x00000000 | wait_event

[   26.485029] iwlwifi 0000:01:00.0: 0x00000000 | l2p_control

[   26.485032] iwlwifi 0000:01:00.0: 0x00000000 | l2p_duration

[   26.485034] iwlwifi 0000:01:00.0: 0x00000000 | l2p_mhvalid

[   26.485037] iwlwifi 0000:01:00.0: 0x00000000 | l2p_addr_match

[   26.485040] iwlwifi 0000:01:00.0: 0x00000000 | lmpm_pmg_sel

[   26.485043] iwlwifi 0000:01:00.0: 0x00000000 | timestamp

[   26.485046] iwlwifi 0000:01:00.0: 0x00000000 | flow_handler

[   26.502916] iwlwifi 0000:01:00.0: 0x00000000 | ADVANCED_SYSASSERT

[   26.502922] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink1

[   26.502926] iwlwifi 0000:01:00.0: 0x00000000 | umac branchlink2

[   26.502929] iwlwifi 0000:01:00.0: 0x00000000 | umac interruptlink1

[   26.502933] iwlwifi 0000:01:00.0: 0x00000000 | umac interruptlink2

[   26.502936] iwlwifi 0000:01:00.0: 0x00000000 | umac data1

[   26.502939] iwlwifi 0000:01:00.0: 0x00000000 | umac data2

[   26.502942] iwlwifi 0000:01:00.0: 0x00000000 | umac data3

[   26.502945] iwlwifi 0000:01:00.0: 0x00000000 | umac major

[   26.502948] iwlwifi 0000:01:00.0: 0x00000000 | umac minor

[   26.502951] iwlwifi 0000:01:00.0: 0x00000000 | frame pointer

[   26.502955] iwlwifi 0000:01:00.0: 0x00000000 | stack pointer

[   26.502958] iwlwifi 0000:01:00.0: 0x00000000 | last host cmd

[   26.502961] iwlwifi 0000:01:00.0: 0x00000000 | isr status reg

[   26.520861] iwlwifi 0000:01:00.0: IML/ROM dump:

[   26.520865] iwlwifi 0000:01:00.0: 0x5A5A | IML/ROM SYSASSERT

[   26.520869] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM error/state

[   26.538801] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM data1

[   26.556735] iwlwifi 0000:01:00.0: 0x5A5A5A5A | IML/ROM WFPM_AUTH_KEY_0

[   26.592637] iwlwifi 0000:01:00.0: Failed to start RT ucode: -110

[   26.592644] iwlwifi 0000:01:00.0: WRT: Collecting data: ini trigger 13 fired (delay=0ms).

[   26.628676] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=1, type=10

[   26.736684] iwlwifi 0000:01:00.0: Failed to get monitor header

[   26.736690] iwlwifi 0000:01:00.0: WRT: Failed to fill region header: id=16, type=2

[   26.773182] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=20, type=19

[   26.791148] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=22, type=10

[   26.882655] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=1, type=10

[   26.990520] iwlwifi 0000:01:00.0: Failed to get monitor header

[   26.990525] iwlwifi 0000:01:00.0: WRT: Failed to fill region header: id=16, type=2

[   27.026906] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=20, type=19

[   27.044982] iwlwifi 0000:01:00.0: WRT: Failed to dump region: id=22, type=10

[   28.948353] iwlwifi 0000:01:00.0: Failed to run INIT ucode: -110

[   28.960420] iwlwifi 0000:01:00.0: retry init count 2

[   29.119236] loop38: detected capacity change from 0 to 8

To workaround it I installed newer driver this way:

sudo apt-get install -y backport-iwlwifi-dkms

How to unblock PIN code on Yubikey?

 Easy:

ykman piv access unblock-pin

Found it here.

Windows 11 on USB from Linux easy way

 I found this guide and it looks easy and clear. 

Broken screen sharing in Google Meet (Chrome and Firefox) and Zoom on Ubuntu 24.04

Today I had very embarrassing experience as my screen sharing option failed during call. 

Firefox version: Mozilla Firefox 128.0.3

Chromium 126.0.6478.182 snap

Zoom: 6.1.6.1013

When I opened sharing option and clicked whole screen then nothing happened:

After pretty much cursing I found traces of issue in Chrome log:

[11042:11042:0730/140758.199500:ERROR:screen_capture_portal_interface.cc(48)] Failed to request session: GDBus.Error:org.freedesktop.DBus.Error.UnknownMethod: No such interface “org.freedesktop.portal.ScreenCast” on object at path /org/freedesktop/portal/desktop

[11042:11042:0730/140758.199528:ERROR:base_capturer_pipewire.cc(81)] ScreenCastPortal failed: 3

Which led me to solution:

sudo apt install xdg-desktop-portal-gnome gnome-remote-desktop

NB! You will need to restart machine.

The weirdest part that I never had this package before:

 cat /var/log/dpkg.log|grep xdg-desktop-portal-gnome

2024-07-30 14:09:09 install xdg-desktop-portal-gnome:amd64 <none> 46.2-0ubuntu1

2024-07-30 14:09:09 status half-installed xdg-desktop-portal-gnome:amd64 46.2-0ubuntu1

2024-07-30 14:09:09 status unpacked xdg-desktop-portal-gnome:amd64 46.2-0ubuntu1

2024-07-30 14:09:09 configure xdg-desktop-portal-gnome:amd64 46.2-0ubuntu1 <none>

2024-07-30 14:09:09 status unpacked xdg-desktop-portal-gnome:amd64 46.2-0ubuntu1

2024-07-30 14:09:09 status half-configured xdg-desktop-portal-gnome:amd64 46.2-0ubuntu1

2024-07-30 14:09:09 status triggers-awaited xdg-desktop-portal-gnome:amd64 46.2-0ubuntu1

2024-07-30 14:09:09 status installed xdg-desktop-portal-gnome:amd64 46.2-0ubuntu1

The root cause of this issue is related with Wayland and as easier workaround you may consider switching to X11 session if this solution does not work. 

More details: here 

And there is a nice site to check sharing. 

How to get public SSH key from GitHub?

 Easy: https://github.com/your-user-name.keys

How to create bootable USB for Windows 2022 server on Ubuntu 22.04

NB! Sadly this guide below did not work on my system (apparently because it's not very recent system) and I decided to use WoeUSB instead. 

It's very easy to use:

sudo ./woeusb-5.2.4.bash --device ~/Documents/Window/SERVER_EVAL_x64FRE_en-us.iso /dev/sdX

Please note that it will overwrite all data on USB stick.

Example output:

WoeUSB v5.2.4

==============================

Info: Mounting source filesystem...

Info: Wiping all existing partition table and filesystem signatures in /dev/sda...

/dev/sda: 8 bytes were erased at offset 0x00000200 (gpt): 45 46 49 20 50 41 52 54

/dev/sda: 8 bytes were erased at offset 0x729bffe00 (gpt): 45 46 49 20 50 41 52 54

/dev/sda: 2 bytes were erased at offset 0x000001fe (PMBR): 55 aa

/dev/sda: calling ioctl to re-read partition table: Success

Info: Ensure that /dev/sda is really wiped...

Info: Creating new partition table on /dev/sda...

Info: Creating target partition...

Info: Making system realize that partition table has changed...

Info: Wait 3 seconds for block device nodes to populate...

mkfs.fat 4.2 (2021-01-31)

mkfs.fat: Warning: lowercase labels might not work properly on some systems

Info: Mounting target filesystem...

Info: Copying files from source media...

Splitting WIM: 4127 MiB of 4127 MiB (100%) written, part 2 of 24%

Finished splitting "./sources/install.wim"

Info: Installing GRUB bootloader for legacy PC booting support...

Installing for i386-pc platform.

 

Installation finished. No error reported.

Info: Installing custom GRUB config for legacy PC booting...

Info: Done :)

Info: The target device should be bootable now

Info: Unmounting and removing "/tmp/woeusb-source-20240302-155025-Saturday.g0vizR"...

Info: Unmounting and removing "/tmp/woeusb-target-20240302-155025-Saturday.T2VU0b"...

Info: You may now safely detach the target device

As first step format USB stick by creating new GPT partition table on it:

Then create single partition on it using NTFS file system:

Then review changes:

After that you will see that this partition will be mounted in file manager:

After that download ISO image for Wndows 2022 server from official web site and click twice on downloaded ISO and it will be mounted too:

Then select all files from mounted ISO disk to mounted NTFS partition on USB disk:

Wait until finish and unmount it using unmount button on left side:

Please be patient as unmount will take significant time:

Done!

jTAG / UART / serial console access for ROCKPro64 with CH340 UART USB

I bought ROCKPro64 quite long time ago and it's still pretty good even in 2024. So I decided to install official Debian for it to use it for NAT64 gateway and home automation platform. 

To install Debian I need console access as HDMI does not work until you install Linux Distro which supports it.

So I decided to play with serial port access. On SBC you need to plug 3 pins to Pi-2-bus with following order.

On CH340 you need to plug them in following order:

And yellow jumper need to be in 3V3 mode this way:

Then you need to plug CH341 to your PC and check that it recognised correctly in dmesg:

[ 6981.858478] usb 1-5: new full-speed USB device number 23 using xhci_hcd

[ 6982.107488] usb 1-5: New USB device found, idVendor=1a86, idProduct=7523, bcdDevice= 2.64

[ 6982.107492] usb 1-5: New USB device strings: Mfr=0, Product=2, SerialNumber=0

[ 6982.107494] usb 1-5: Product: USB Serial

[ 6982.120247] ch341 1-5:1.0: ch341-uart converter detected

[ 6982.134269] usb 1-5: ch341-uart converter now attached to ttyUSB0

It may not connect from first attempt but you can try it multiple times to get required results.  

After that you can run screen or minicom on your Linux box:

screen /dev/ttyUSB0 1500000

And finally reboot SBC using power (keep it for 5+ seconds) or reset button and then you will see boot sequence:

Hit any key to stop autoboot: 1 

switch to partitions #0, OK

Scanningmmc1:1... 

Retrieving file: /extlinux/extlinux.conf

Enter choice: 1:        Debian-Installer

Retrieving file: /initrd.gz

Retrieving file: /dtbs/rockchip/rk3399-rockpro64.dtb

Moving Image from 0x2080000 to 0x2200000, end=4050000

 01f00000

   Booting using the fdt blob at   Loading Ramdisk to ef112000, OK

   Loading Device Tree to 00000000ef0ff000, end 00000000ef111300OK

Starting kernel ...

My guide was based on this reference guide. 

In some cases device may refuse loading when TXD cable is plugged and you will need temporarily unplug it.

Using TP Link TL-SG108E web UI configuration tool on Ubuntu 22.04

My research was based on this great post from 2014.

This switch has UI which can be accessed via windows application and has UI which can be accessed via browser. 

Just for entertaining purposes I decided to try Window app on my Ubuntu 22.04 Linux machine.

To do so I installed wine:

sudo apt install wine-development

Then I downloaded version v1.3.10, 2022-04-12 from TP Link web site and unpacked it:

wget https://static.tp-link.com/upload/software/2022/202204/20220412/Easy%20Smart%20Configuration%20Utility%20v1.3.10.0.zip

unzip "Easy Smart Configuration Utility v1.3.10.0.zip"

After that I was able to run installer:

wine Easy\ Smart\ Configuration\ Utility\ v1.3.10.0.exe

Installation was finished successfully and then all exe files were put to "~/.wine/drive_c/Program Files (x86)/TPLINK/EasySmartConfigurationUtility".

And I was able to run it from first attempt:

cd ~/.wine/drive_c/Program Files (x86)/TPLINK/EasySmartConfigurationUtility 

wine Easy\ Smart\ Configuration\ Utility.jar

Unfortunately, it did not find switch:

Then I used trick from article I referenced above. You need to replace 192.168.1.201 by local IP address in your network:

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A PREROUTING -p udp -d 255.255.255.255 --dport 29809 -j DNAT --to 192.168.1.201:29809

After that it worked just fine:

Yay! For some reasons DHCP did not work well and IP address wasn't changed. In this case UI tool solves one of the most annoying issues: IP address discovery. 

I was able to change password to new one but everything else causes wine to crash:

0130:err:ole:com_get_class_object class {597d4fb0-47fd-4aff-89b9-c6cfae8cf08e} not registered

0130:err:ole:com_get_class_object no class object {597d4fb0-47fd-4aff-89b9-c6cfae8cf08e} could be created for context 0x1

0130:err:ole:com_get_class_object class {597d4fb0-47fd-4aff-89b9-c6cfae8cf08e} not registered

0130:err:ole:com_get_class_object no class object {597d4fb0-47fd-4aff-89b9-c6cfae8cf08e} could be created for context 0x1

#

# A fatal error has been detected by the Java Runtime Environment:

#

#  EXCEPTION_ACCESS_VIOLATION (0xc0000005) at pc=0x6d2efe4d, pid=244, tid=304

#

# JRE version: 7.0_15-b03

# Java VM: Java HotSpot(TM) Client VM (23.7-b01 mixed mode windows-x86 )

# Problematic frame:

# C  [glass.dll+0xfe4d]  _Java_com_sun_glass_events_KeyEvent__1getKeyCodeForChar@12+0x134d

#

# Failed to write core dump. Minidumps are not enabled by default on client versions of Windows

#

# An error report file with more information is saved as:

# C:\Program Files (x86)\TPLINK\EasySmartConfigurationUtility\hs_err_pid244.log

#

# If you would like to submit a bug report, please visit:

#   http://bugreport.sun.com/bugreport/crash.jsp

# The crash happened outside the Java Virtual Machine in native code.

# See problematic frame for where to report the bug.

#

0130:err:msvcrt:_invalid_parameter (null):0 (null): (null) 0 

After reading the Internet I found that this exe file is in fact Java JAR file and I've tried running it using OpenJDK:

sudo apt install default-jre

Sadly it failed miserably:

java -jar Easy\ Smart\ Configuration\ Utility.exe 

Error: JavaFX runtime components are missing, and are required to run this application

As final attempt I've tried using Java from Oracle directly.   You need to download it manually and then unpack it:

sudo tar -xf jre-8u381-linux-i586.tar.gz -C /opt

And run:

/opt/jre1.8.0_381/bin/java -jar Easy\ Smart\ Configuration\ Utility.exe 

Sadly it failed too:

Exception in thread "main" java.lang.reflect.InvocationTargetException

at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

at java.lang.reflect.Method.invoke(Method.java:498)

at sun.launcher.LauncherHelper$FXHelper.main(LauncherHelper.java:904)

Caused by: java.lang.UnsupportedOperationException: Internal Error

at com.sun.glass.ui.gtk.GtkApplication.lambda$new$5(GtkApplication.java:158)

at java.security.AccessController.doPrivileged(Native Method)

at com.sun.glass.ui.gtk.GtkApplication.<init>(GtkApplication.java:140)

at com.sun.glass.ui.gtk.GtkPlatformFactory.createApplication(GtkPlatformFactory.java:41)

at com.sun.glass.ui.Application.run(Application.java:147)

at com.sun.javafx.tk.quantum.QuantumToolkit.startup(QuantumToolkit.java:279)

at com.sun.javafx.application.PlatformImpl.startup(PlatformImpl.java:211)

at com.sun.javafx.application.LauncherImpl.startToolkit(LauncherImpl.java:675)

at com.sun.javafx.application.LauncherImpl.launchApplicationWithArgs(LauncherImpl.java:337)

at com.sun.javafx.application.LauncherImpl.launchApplication(LauncherImpl.java:328)

... 5 more

 You may try running older version of Oracle Java as bundled JRE is dated by 2013:

root@station:/home/pavel/.wine/drive_c/Program Files (x86)/TPLINK/EasySmartConfigurationUtility/jre# head COPYRIGHT 

Copyright � 1993, 2013, Oracle and/or its affiliates. 

All rights reserved.

This software and related documentation are provided under a

license agreement containing restrictions on use and

disclosure and are protected by intellectual property laws.

Except as expressly permitted in your license agreement or

allowed by law, you may not use, copy, reproduce, translate,

broadcast, modify, license, transmit, distribute, exhibit,

perform, publish, or display any part, in any form, or by

root@station:/home/pavel/.wine/drive_c/Program Files (x86)/TPLINK/EasySmartConfigurationUtility/jre# cat release 

JAVA_VERSION="1.7.0"

OS_NAME="Windows"

OS_VERSION="5.1"

OS_ARCH="i586"

SOURCE=" .:f37a75bd3959 corba:e5b996dabec6 deploy:3bb10c0238fe hotspot:5b55cef461b0 hotspot/src/closed:759fc4d1d429 hotspot/test/closed:2d8e36f71952 install:0154bd493323 jaxp:a55f67cfe182 jaxws:eaf9b2990670 jdk:87e45d30e24d jdk/make/closed:b83ea3e4144a jdk/src/closed:d8651f160809 jdk/test/closed:7e4b15d6c1bb langtools:c160d7d1616d pubs:06f851196d93 sponsors:2dbf246921cb"

 

With IP address in hands I was able to access web UI:

And finally I can use capability for which this switch was bought - port mirror:

 

 

Ubuntu 22.04 installation on VirtualBox using command line

We use VirtualBox for process of preparing VM images for our product. Sadly some things had to be done manually and we're heading towards full automation and it was an attempt to prepare VM for Ubuntu 22.04 installation from ISO using only command line interface.

NB! If you have IPv4 disabled on your machine you have to enable it as otherwise VM will not have connection and installer may fail. 

Set some variables shared by next steps:

export VM_NAME=Ubuntu2204_TEST_OVA

export VM_ROOT_FOLDER="/home/pavel/VirtualBoxVMs"

export VM_FOLDER="$VM_ROOT_FOLDER/$VM_NAME"

By default VirtualBox uses path with nasty space in it and that's why I changed it to custom one without spaces as I do not like spaces and bash agrees with me about it. 

Create VM and register it in VirtualBox:

VBoxManage createvm --name $VM_NAME  --register  --ostype=Ubuntu22_LTS_64 --basefolder=$VM_ROOT_FOLDER

If you plan to use another OS then you can get all list of all OS types using this command:

VBoxManage list ostypes

Then set some basic hardware options:

VBoxManage modifyvm $VM_NAME --ioapic on                     

VBoxManage modifyvm $VM_NAME --memory 16384  --vram 128       

VBoxManage modifyvm $VM_NAME --cpus 8

VBoxManage modifyvm $VM_NAME  --nic1 nat

Then create 150G disk for VM and attach it to it:

VBoxManage createhd --filename $VM_FOLDER/disk.vdi --size 150000 --format VDI

Add SATA controller: 

VBoxManage storagectl $VM_NAME  --name "SATA Controller" --add sata --controller IntelAhci

And attach our disk to it: 

VBoxManage storageattach $VM_NAME  --storagectl "SATA Controller" --port 0 --device 0 --type hdd --medium  $VM_FOLDER/disk.vdi

Then add IDE controller to mount ISO disk with installer: 

VBoxManage storagectl $VM_NAME  --name "IDE Controller" --add ide --controller PIIX4 

VBoxManage storageattach $VM_NAME --storagectl "IDE Controller" --port 1 --device 0 --type dvddrive --medium ~/Downloads/ubuntu-22.04.2-live-server-amd64.iso 

VBoxManage modifyvm $VM_NAME  --boot1 dvd --boot2 disk --boot3 none --boot4 none

Then you can run VM:

VBoxManage startvm $VM_NAME

Based on this guide. 

sign_and_send_pubkey: signing failed for RSA "PIV AUTH pubkey" from agent: agent refused operatio

This error is very annoying and it happens when you use Yubikey for ssh auth and by accident you did not click on Yubikey when you did ssh auth.

After this happens you need to restart machine or ssh agent and all the things to fix it.

When it happens I was able to catch this error log:

sudo systemctl status pcscd.service 

● pcscd.service - PC/SC Smart Card Daemon

     Loaded: loaded (/lib/systemd/system/pcscd.service; indirect; vendor preset: enabled)

     Active: active (running) since Thu 2023-05-04 10:46:27 BST; 2h 39min ago

TriggeredBy: ● pcscd.socket

       Docs: man:pcscd(8)

   Main PID: 2505 (pcscd)

      Tasks: 9 (limit: 38276)

     Memory: 2.6M

        CPU: 88ms

     CGroup: /system.slice/pcscd.service

             └─2505 /usr/sbin/pcscd --foreground --auto-exit

May 04 10:46:27 station systemd[1]: Started PC/SC Smart Card Daemon.

May 04 13:22:18 station pcscd[2505]: 00000000 ccid_usb.c:1566:InterruptStop() libusb_cancel_transfer failed: LIBUSB_ERROR_NO_DEVICE

Then I feed "ccid_usb.c:1566:InterruptStop() libusb_cancel_transfer failed: LIBUSB_ERROR_NO_DEVICE" to Google. 

I have this issue on Ubuntu 22.04 and I've tried version from Ubuntu 22.10 which has version 1.99 of affected package and it did not help. 

Apparently this bugfix may fix this issue and it wasn't part of 1.99 release. Related GitHub issue.

Can Mozilla VPN users connect Mullwad servers directly?

I've tried to fix my IPv6 compatibility issues by using Mozilla VPN over NAT64 box this way.

I've tried to improve this setup but it did not work as expected. 

Mozilla VPN uses Mullwad internally and we can find Mullwad's server name using this interface. Just fill "us-nyc-wg-505" in hostname field and after that you will see something like: "us-nyc-wg-505.relays.mullvad.net".

With this information on our hands we can replace:

Endpoint = x.y.z.y:23662

To:

Endpoint = us-nyc-wg-505.relays.mullvad.net:23662

Sadly in my case this trick did not work ;(

If you have any advice about ways to fix it please share. 

 

Mozilla VPN without UI on Ubuntu Linux 22.04 over NAT64

Mozilla VPN service is a really nice service but their UI does not support IPv6 only environment. I use NAT64 box in my network and it does not help either.

Sadly it's known bug and it's still here ;( Luckily I found nice way to workaround it using command line interface. 

I found nice workaround 

Install their Linux app as documented on web site. 

Then we're going to use console app to authenticate. Start authentication process using:

mozillavpn login

Then check that you're successfully authenticated:

mozillavpn status

Then get list of all available servers:

mozillavpn servers

And select your favourite one:

mozillavpn select us-nyc-wg-505

Generate Wireguard configuration using wgconf option which was added recently:

mozillavpn wgconf > mozilla-vpn.conf

Optiwas added recently. 

Then open mozilla-vpn.conf with editor and alter line like this:

Endpoint = x.y.z.y:23662

To:

Endpoint = 64:ff9b::x.y.z.y:23662

Then establish VPN:

wg-quick up mozilla-vpn.conf

To shutdown it you can use:

wg-quick down mozilla-vpn.conf

In this case we will use NAT64 gateway for connection.

Yubikey ssh on Ubuntu 22.04

Today I did full fresh installation of Ubuntu 22.04 to migrate to new 2T NVME disk from Samsung as I had disk space issues with my old 500G drive. 

After installation I noticed that I cannot use my Yubikey for ssh auth as documented here. 

I tried to add Yubikey as auth source and it failed with pretty weird error:

ssh-add -s /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so

Enter passphrase for PKCS#11: 

Could not add card "/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so": agent refused operation

 This error can mean literally anything.

I've tried running ssh agent manually in foreground mode:

ssh-agent -d

And after that I saw error which sounds like "no available slots".

So I back to guide as I suspected that my Yubikey died and I've sued following command:

sudo ykman list --serials

WARNING: PC/SC not available. Smart card (CCID) protocols will not function.

ERROR: Unable to list devices for connection

1232134323

That's interesting and this error lead me to this bug and I got fix:

 sudo systemctl start pcscd

After that it worked just fine.

As long term fix you need to enable automatic start on machine boot: 

sudo systemctl enable pcscd

Sadly it's known Ubuntu bug. 

Yubikey ssh and signing failed for RSA "PIV AUTH pubkey" from agent: agent refused operation

You may face this issue if you use ssh and Yubikey like covered in this guide. 

Previously I had to reboot machine to address this issue but I found nice trick to get it work.

Originally error looks like:

ssh server

sign_and_send_pubkey: signing failed for RSA "PIV AUTH pubkey" from agent: agent refused operation

root@xxx: Permission denied (publickey).

It may happen when you forgot to tap confirmation on Yubikey and it was just slow.

First attempt to fix it was to kill all ssh agent processes which may be run on system:

ps aux|grep ssh

odintsov   16493  0.0  0.0   7972  5820 ?        S    12:36   0:00 /usr/bin/ssh-agent -D -a /run/user/1000/keyring/.ssh

odintsov   16494  0.0  0.0 164340 11584 ?        SLl  12:36   0:00 /usr/lib/openssh/ssh-pkcs11-helper

odintsov   27798  0.0  0.0   7972  3848 ?        Ss   13:20   0:00 ssh-agent -s

odintsov   27801  0.0  0.0 164340 11572 ?        SLl  13:20   0:00 /usr/lib/openssh/ssh-pkcs11-helper

The best way to kill them is:

pkill ssh

After that we need to start ssh agent again:

eval `ssh-agent -s`

After that load Yubikey key to agent:

ssh-add -s /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so

For last command I use fancy alias in ~/.bashrc:

alias ssh_add='ssh-add -s /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so'

It's not clear why Yubikey fails that way. I think it has something to do with ssh-pkcs11-helper being stuck in operation to Yubikey hardware.