From owner-freebsd-questions Mon Apr 16 5:50:31 2001 Delivered-To: freebsd-questions@freebsd.org Received: from SWCC2.sw.cc.va.us (mailhost.sw.cc.va.us [164.106.192.192]) by hub.freebsd.org (Postfix) with ESMTP id ACCE537B43C for ; Mon, 16 Apr 2001 05:50:25 -0700 (PDT) (envelope-from Ben_Compton@sw.cc.va.us) Received: by SWCC2.sw.cc.va.us with Internet Mail Service (5.5.2653.19) id <2X5GSA4N>; Mon, 16 Apr 2001 08:53:40 -0500 Message-ID: From: Ben Compton To: "'questions@freebsd.org'" Subject: Date: Mon, 16 Apr 2001 08:53:39 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: text/plain; charset="iso-8859-1" Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG -----BEGIN PGP SIGNED MESSAGE----- Ok guys I need some help here with a freaky networking problem. I'm running FreeBSD 4.2-RELEASE on a P120 with 64 MB of RAM and roughly 6 GB of online storage. The machine runs great from the console however after a few days of uptime the network connection goes all to hell. I can restart the machine and things are back to normal and it works smoothly on both the console and through SSH and FTP. During the slowdown I can check top to see if any processes are running wild and I don't see anything that is abnormal. And as I said anything done from the console works great no matter what so I think this indicates that it is not a process going out of control. As far as services go I'm running ProFTPd and SSHd as well as sendmail. I'm however noticing some odd connections when I do a dmesg....you can see a clipping below. Why is my DNS server always trying to connect to my server using UDP? Anyway there you go. I thank you for your help in advance. > Connection attempt to UDP 164.106.194.12:2472 from 164.106.192.1:53 > Connection attempt to TCP 164.106.194.12:53 from 61.218.24.2:2561 > Connection attempt to TCP 164.106.194.12:53 from 210.72.122.1:3847 > Connection attempt to TCP 164.106.194.12:53 from 203.242.151.1:3178 > arp: 164.106.194.11 moved from 00:00:1d:21:8a:0b to > 00:50:2a:a8:f8:00 on tx0 Connection attempt to UDP > 164.106.194.12:2478 from 164.106.192.1:53 Connection attempt to TCP > 164.106.194.12:113 from 128.173.35.190:3587 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 Connection attempt to > UDP 164.106.194.12:2519 from 164.106.192.1:53 Connection attempt to > UDP 164.106.194.12:2533 from 164.106.192.1:53 Connection attempt to > UDP 164.106.194.12:2537 from 164.106.192.1:53 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 stray irq 7 > arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 stray irq 7 > too many stray irq 7's; not logging any more > arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 > moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp: > 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on > tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to > 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 Connection attempt to > TCP 164.106.194.12:111 from 63.148.224.36:4611 arp: 164.106.194.11 > moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: > 164.106.194.11 moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on > tx0 arp: 164.106.194.11 moved from 00:00:1d:21:8a:0b to > 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 moved from > 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 Connection attempt to > UDP 164.106.194.12:2593 from 164.106.192.1:53 Ben C. Computer Technician Southwest Virginia Community College PO Box SVCC Richlands, VA 24641 Phone: (540) 964-7629 Fax: (540) 964-9307 -----BEGIN PGP SIGNATURE----- Version: PGP Personal Privacy 6.5.8 iQEVAwUBOtrqlcN2ZWHSyGjHAQGO6wf/d5D/wFa22FB9nsK1bJSCcRblRSbDYJI/ m64cVtk9RdnBvySfw+g93IcG5tFWlm0/TdORSlOs65TRJEIOcMF1tVEzkyOgeJsZ X2lzyJWsC7aNY+8vBeeO0X5GxgOpB5LB7HdH4xtCRACNUnch+Wx7mZGRRmqZQ/pU wd+Q2UvDXR+Q0iGHXATOMj4Q19bal88ymcLDFOrTGQp2HRwXDsr/MCR9oHyx/CBJ HQP1lkS6S5R2+5qAiJ9bJLWe7UTLpdlK5S4C2EYp+eATixVqRbHDjPj/JbsLpkaQ k0ezd2HR3Nu/SCyN88Mn+Cj3ZyVRQgTJgLayCrMz3uxmLwnszk5gOA== =0dAS -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message