From owner-freebsd-security Tue Apr 21 13:37:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id NAA16523 for freebsd-security-outgoing; Tue, 21 Apr 1998 13:37:52 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from gw.sut.ru (gw.sut.ru [194.190.126.49]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id UAA16471 for ; Tue, 21 Apr 1998 20:37:35 GMT (envelope-from koala.lanck.ru!uwl@lanck.ru) Received: from lanck.ru (lanck.ru [194.226.196.66]) by gw.sut.ru (8.6.12/8.6.12) with ESMTP id AAA24538 for ; Wed, 22 Apr 1998 00:36:45 +0400 Received: by lanck.ru with UUCP id AAA15530; (8.8.5/vak/1.9) Wed, 22 Apr 1998 00:20:49 +0400 (MSD) Received: (from uwl@localhost) by koala.lanck.ru (8.8.6/8.6.12) id UAA09664; Tue, 21 Apr 1998 20:13:20 +0400 Message-ID: <19980421201320.15084@koala.lanck.ru> Date: Tue, 21 Apr 1998 20:13:20 +0400 From: Vladimir Uralsky To: freebsd-security@FreeBSD.ORG Subject: Re: New DoS attack? References: <199804210533.JAA02644@lms.ru> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.79e In-Reply-To: <199804210533.JAA02644@lms.ru>; from Alexander B. Povolotsky on Tue, Apr 21, 1998 at 09:33:37AM +0400 X-Operating-System: Linux 2.0.29 i486 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk On Tue, Apr 21, 1998 at 09:33:37AM +0400, Alexander B. Povolotsky wrote: > During last months, I've experienced several STRANGE hangs. TCP stack worked > OK, while nothing else did. I thought of poor hardware, instable snap, > everything else. We have same problems, system hangs every day. Searching a reasons we find: in all cases of crash we had one ftp user logged in. A user upload something to incoming directory. We change version of ftpd from default to latest wu-ftpd. Situation repeated again. We continuously run a systat -vm and when system hangs can see no hdd transfers, but periodical pci activity (we have only one pci device -- AHA2940). It's mostly like a SCSI bus hanging I think. In the nearest future we'll try to change a AHA to BusLogic. We and some other people have same problem all of these PCs equipped AHA2940/AIC78[78]0 or AIC7770 host adapters. But these kind of devices so popular :-). I see packets to port 0 many times, but it is not hang our system. -- Vova. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message