From owner-freebsd-questions Fri Feb 26 18:54:38 1999 Delivered-To: freebsd-questions@freebsd.org Received: from cliff.mfn.org (cliff.mfn.org [204.238.179.8]) by hub.freebsd.org (Postfix) with ESMTP id BC543150B9; Fri, 26 Feb 1999 18:54:26 -0800 (PST) (envelope-from measl@mfn.org) X-Message1: Missouri FreeNet does not relay. If this email X-Message2: is unsolicited bulk or commercial, please report X-Message3: this abuse promptly to abuse@mfn.org. Thank You. X-ORIGINIP: 204.238.179.3 X-ORIGINDNS: greeves.mfn.org Received: from greeves.mfn.org (greeves.mfn.org [204.238.179.3]) by cliff.mfn.org (8.8.7/8.8.7) with SMTP id UAA05935; Fri, 26 Feb 1999 20:54:00 -0600 (CST) (envelope-from measl@mfn.org) Posted-Date: Fri, 26 Feb 1999 20:54:00 -0600 (CST) Date: Fri, 26 Feb 1999 20:54:00 -0600 (CST) From: Missouri FreeNet Administration To: freebsd-security@freebsd.org, freebsd-questions@freebsd.org Subject: New attack? Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi folks... Beginning about two weeks ago, we have had a recurring problem with a public [outside of the firewall] server. Nearly every day it freezes with the following messages: Fatal trap 1: priviledged instruction fault while in kernel mode instruction pointer = 0x8:0xf010a93b stack pointer = 0x10:0xefbffe30 frame pointer = 0x10:0xefbffe98 code segment = base 0x0, limit 0xfffff, type 0x1b = DPL 0, pres1, def32 1 gran 1 prcessor eflags = interrupt enabled, resume, IOPL = 0 current process = 846 (login) interrupt mask = panic: privileged instruction fault *Why* login I wonder??? It's one of the things that has raised my index of suspicion here. This machine was a solid performer until this started, needing reboot only once every few months. It's user base is *very* static as well. Hardware is a 133mhz 486, 64mb. Several NFS mounts, as well as a 1.6gb local drive. I know there was a lot of frozen OS's reported lately over nmap scans, would the picture I have drawn here be compatible with such a theory? Is there anything I can do to help track this down (short of diverting every single packet for later search)? Very Concerned, J.A. Terranson sysadmin@mfn.org -- If Governments really want us to behave like civilized human beings, they should give serious consideration towards setting a better example: Ruling by force, rather than consensus; the unrestrained application of unjust laws (which the victim-populations were never allowed input on in the first place); the State policy of justice only for the rich and elected; the intentional abuse and occassionally destruction of entire populations merely to distract an already apathetic and numb electorate... This type of demogoguery must surely wipe out the fascist United States as surely as it wiped out the fascist Union of Soviet Socialist Republics. The views expressed here are mine, and NOT those of my employers, associates, or others. Besides, if it *were* the opinion of all of those people, I doubt there would be a problem to bitch about in the first place... -------------------------------------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message