Date: Fri, 21 May 1999 09:31:37 +0100 From: "Greg Quinlan" <greg@qmpgmc.ac.uk> To: <freebsd-security@FreeBSD.ORG> Subject: Server trying to connect to Port 113 Message-ID: <001f01bea364$57d9c820$380051c2@greg.qmpgmc.ac.uk>
next in thread | raw e-mail | index | archive | help
I am not on the mailing list so please include me in your reply. Can someone explain what this remote system is trying to do? May 21 09:22:14 amanda /kernel: ipfw: 24110 Deny TCP <their ip>:1937 <our ip>:113 in via fxp1 May 21 09:22:35 amanda last message repeated 3 times Extract from /etc/services auth 113/tcp ident tap #Authentication Service auth 113/udp ident tap #Authentication Service Greg -----Original Message----- From: Andrew McNaughton <andrew@squiz.co.nz> To: junkmale@xtra.co.nz <junkmale@xtra.co.nz> Cc: freebsd-security@FreeBSD.ORG <freebsd-security@FreeBSD.ORG> Date: 18 May 1999 23:34 Subject: Re: http attack(?) >> A few days ago, I noticed my machine was running extremely slowly. I did a top 10 at the console and >> got "too many open files". Existing telnet sessions were non-responsive. New telnets would not start. >> >> I then tried a top 5. named and syslogd were busy. >> >> I looked at httpd.error and 21 of these spread over 14 seconds: >> [Sat May 15 16:45:34 1999] accept: (client socket): Too many open files in system > >I'm not too sure whether to trust that the restriction on file handles is system wide. Some programs may not know about FreeBSD's process limits scheme. > >Check the output of 'limits' and 'sysctl -a | grep maxfiles'. They might give you a better idea what is happening. The context in which you run limits is important, but if your shell is failing, then that shell is probably a good thing to have a look at. limits is a shell built-in under sh and bash, and will not spawn a new process. > >Andrew McNaughton >-- >----------- >Andrew McNaughton >andrew@squiz.co.nz >http://www.newsroom.co.nz/ > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-security" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?001f01bea364$57d9c820$380051c2>