Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 20 Aug 2003 22:07:43 +0200
From:      "Oldach, Helge" <Helge.Oldach@atosorigin.com>
To:        "'tarkhil@over.ru'" <tarkhil@over.ru>, stable@freebsd.org
Subject:   RE: Strange fork-related problem: acutally, virus-related
Message-ID:  <D2CFC58E0F8CB443B54BE72201E8916E94C9E1@dehhx005.hbg.de.int.atosorigin.com>

next in thread | raw e-mail | index | archive | help
From: tarkhil@over.ru [mailto:tarkhil@over.ru]
> On Wed, Aug 20, 2003 at 01:12:51PM +0400, tarkhil@over.ru wrote:
> > 10-20 minutes of work. New processes doesn't create anymore, process
trying
> > to fork looks in top having -20 PRI and "temp" STATE. I was unable to
find
> 
> I've got infected computers in my network. When ipnat mapping 
> table grew to
> 39000+ entries, described effect appeared. 
> 
> Anyway, it should not behave that way.

Should it? Worms are known to be a NAT killer on dedicated routing
platforms. I am
facing customers every other day complaining about their Cisco router
performance
which usually turns out to be caused by virii. (In particular these days.)

Sure it shouldn't be, but that's fighting the symptom, not the root cause.

Helge



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?D2CFC58E0F8CB443B54BE72201E8916E94C9E1>