Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 16 Apr 2001 08:53:39 -0500
From:      Ben Compton <Ben_Compton@sw.cc.va.us>
To:        "'questions@freebsd.org'" <questions@freebsd.org>
Message-ID:  <F02F7A802EF07441B206FDBEACAF65B622E545@SWCC2.sw.cc.va.us>

next in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----

Ok guys I need some help here with a freaky networking problem.  I'm
running FreeBSD 4.2-RELEASE on a P120 with 64 MB of RAM and roughly 6
GB of online storage.  The machine runs great from the console
however after a few days of uptime the network connection goes all to
hell.  I can restart the machine and things are back to normal and it
works smoothly on both the console and through SSH and FTP.  During
the slowdown I can check top to see if any processes are running wild
and I don't see anything that is abnormal.  And as I said anything
done from the console works great no matter what so I think this
indicates that it is not a process going out of control.  As far as
services go I'm running ProFTPd and SSHd as well as sendmail.  I'm
however noticing some odd connections when I do a dmesg....you can
see a clipping below.  Why is my DNS server always trying to connect
to my server using UDP?  Anyway there you go.  I thank you for your
help in advance.

> Connection attempt to UDP 164.106.194.12:2472 from 164.106.192.1:53
> Connection attempt to TCP 164.106.194.12:53 from 61.218.24.2:2561
> Connection attempt to TCP 164.106.194.12:53 from 210.72.122.1:3847
> Connection attempt to TCP 164.106.194.12:53 from 203.242.151.1:3178
> arp: 164.106.194.11 moved from 00:00:1d:21:8a:0b to
> 00:50:2a:a8:f8:00 on tx0 Connection attempt to UDP
> 164.106.194.12:2478 from 164.106.192.1:53 Connection attempt to TCP
> 164.106.194.12:113 from 128.173.35.190:3587 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 Connection attempt to
> UDP 164.106.194.12:2519 from 164.106.192.1:53 Connection attempt to
> UDP 164.106.194.12:2533 from 164.106.192.1:53 Connection attempt to
> UDP 164.106.194.12:2537 from 164.106.192.1:53 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 stray irq 7
> arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 stray irq 7
> too many stray irq 7's; not logging any more
> arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11
> moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on tx0 arp:
> 164.106.194.11 moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on
> tx0 arp: 164.106.194.11 moved from 00:50:2a:a8:f8:00 to
> 00:00:1d:21:8a:0b on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 Connection attempt to
> TCP 164.106.194.12:111 from 63.148.224.36:4611 arp: 164.106.194.11
> moved from 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 arp:
> 164.106.194.11 moved from 00:50:2a:a8:f8:00 to 00:00:1d:21:8a:0b on
> tx0 arp: 164.106.194.11 moved from 00:00:1d:21:8a:0b to
> 00:50:2a:a8:f8:00 on tx0 arp: 164.106.194.11 moved from
> 00:00:1d:21:8a:0b to 00:50:2a:a8:f8:00 on tx0 Connection attempt to
> UDP 164.106.194.12:2593 from 164.106.192.1:53  

Ben C.
Computer Technician
Southwest Virginia Community College
PO Box SVCC
Richlands, VA  24641
Phone: (540) 964-7629
Fax: (540) 964-9307


-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.5.8

iQEVAwUBOtrqlcN2ZWHSyGjHAQGO6wf/d5D/wFa22FB9nsK1bJSCcRblRSbDYJI/
m64cVtk9RdnBvySfw+g93IcG5tFWlm0/TdORSlOs65TRJEIOcMF1tVEzkyOgeJsZ
X2lzyJWsC7aNY+8vBeeO0X5GxgOpB5LB7HdH4xtCRACNUnch+Wx7mZGRRmqZQ/pU
wd+Q2UvDXR+Q0iGHXATOMj4Q19bal88ymcLDFOrTGQp2HRwXDsr/MCR9oHyx/CBJ
HQP1lkS6S5R2+5qAiJ9bJLWe7UTLpdlK5S4C2EYp+eATixVqRbHDjPj/JbsLpkaQ
k0ezd2HR3Nu/SCyN88Mn+Cj3ZyVRQgTJgLayCrMz3uxmLwnszk5gOA==
=0dAS
-----END PGP SIGNATURE-----

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?F02F7A802EF07441B206FDBEACAF65B622E545>