Date: Mon, 4 Apr 2005 21:47:58 -0500 (CDT) From: Mike Silbersack <silby@silby.com> To: Jesper Wallin <jesper@hackunite.net> Cc: freebsd-security@freebsd.org Subject: Re: Strange messages in dmesg after DDoS-attack. Message-ID: <20050404214404.I4823@odysseus.silby.com> In-Reply-To: <1656.213.112.198.172.1112664721.squirrel@mail.hackunite.net> References: <1614.213.112.198.172.1112663454.squirrel@mail.hackunite.net> <1656.213.112.198.172.1112664721.squirrel@mail.hackunite.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, 5 Apr 2005, Jesper Wallin wrote: > Hi Mike, > > First of all, thanks for your reply.. Nope, as far as I can see, I only > got 6 of those lines and nothing more. > > I have a fxp0 in my other server, would you recommend me to switch the > NICs since the server using the xl0 got higher priority than the fxp0 one? > > > Regards, > Jesper Wallin All network cards/drivers have some bugs in them, so as long as the 3com card survived the DDoS and didn't require the interface to be restarted, I'd stick with it. I think I found how those messages appeared, xl_init is called whenever the card sets the flag "ADFAIL", whatever that means. Apparently it's bad and the network driver resets itself when it happens. So, you're probably losing a few packets as a result of the reset, but other than that I don't see it causing any real problems. Mike "Silby" Silbersack
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050404214404.I4823>