Date: Thu, 17 Jul 2003 15:26:32 -0300 From: Carlos Horowicz <carlos@infodrive.com.ar> To: James West <jwest254@mail.com> Cc: Terry Lambert <tlambert2@mindspring.com> Subject: Re: Major problem with "No buffer space available" errors Message-ID: <1058466392.3f16ea58729ba@www.infodrive.com.ar> In-Reply-To: <20030717105252.3632.qmail@mail.com> References: <20030717105252.3632.qmail@mail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi Mensaje citado por James West <jwest254@mail.com>: > > > So the questions to answer are: > > > > 1) Are you using a lot of ICMP (e.g. ping, traceroute, RIP, etc.)? > > The box is almost idle - there's definitely no pings going on, and no > traceroutes either, also no RIP. > > Could this be caused by a flood of some sort? (like a DoS attack?) I had the same messages some time ago with a similar config : a 4.7 lan gateway doing nat, two NICs, one connected to an ADSL modem, the other one to the LAN ... it turned out to be a w2k in the LAN infected with sql-slammer, hitting my FreeBSD gateway, trying to connect to any ip address out in the internet scanning for MS-SQL servers... those bursts seemed to be eating up all network resources of the FreeBSD ... tcpdump helped diagnose the problem, ipfw solved it. Not sure if this has anything to do with your one NIC setup, but you might take a look at your traffic. Can't remember either whether the DoS was tcp, udp or both. > > > > > 2) Are you using a lot of UDP (e.g. Linux NFS clients using UDP > > mounts and an rsize or wsize larger than the MTU would permit > > to fit in a single UDP packet)? > > No, not udp - the only UDP traffic that'd be going on with the box is DNS. > The box runs qmail, apache, ssh and that's it. Nothing else - no other ports > are open on the machine other than ones for these services, everything else > is locked down (syslog's not listening on a network port, mysql isn't etc. > etc.). > > -- > __________________________________________________________ > Sign-up for your own FREE Personalized E-mail at Mail.com > http://www.mail.com/?sr=signup > > CareerBuilder.com has over 400,000 jobs. Be smarter about your job search > http://corp.mail.com/careers > > _______________________________________________ > freebsd-performance@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-performance > To unsubscribe, send any mail to > "freebsd-performance-unsubscribe@freebsd.org" > > -- > Este mensaje ha sido analizado en busca de virus y otros contenidos > peligrosos, y se considera que está limpio. > -- http://www.infodrive.com.ar - E-mail corporativo > -- Carlos ------------------------------------------------- Mail enviado con INFODRIVE -- Este mensaje ha sido analizado en busca de virus y otros contenidos peligrosos, y se considera que está limpio. -- http://www.infodrive.com.ar - E-mail corporativo -- Obtenga gratis su cuenta @Argentina.com con AntiVirus, 20mb de espacio y acceso libre UltraVeloz en 24 ciudades www.Argentina.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1058466392.3f16ea58729ba>