From owner-freebsd-stable Wed Nov 7 4:47:36 2001 Delivered-To: freebsd-stable@freebsd.org Received: from mikea.ath.cx (okc-65-30-192-11.mmcable.com [65.30.192.11]) by hub.freebsd.org (Postfix) with ESMTP id AC47837B416 for ; Wed, 7 Nov 2001 04:47:32 -0800 (PST) Received: (from mikea@localhost) by mikea.ath.cx (8.11.6/8.11.1) id fA7ClPb30278; Wed, 7 Nov 2001 06:47:25 -0600 (CST) (envelope-from mikea) Date: Wed, 7 Nov 2001 06:47:25 -0600 From: mikea To: "Jeffrey J. Libman" Cc: freebsd-stable@FreeBSD.ORG Subject: Re: unknown message in logs Message-ID: <20011107064725.C30237@mikea.ath.cx> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from jeffrl@wantabe.com on Wed, Nov 07, 2001 at 06:33:38AM -0600 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, Nov 07, 2001 at 06:33:38AM -0600, Jeffrey J. Libman wrote: > > last night i had several messages like the following in the logs of 2 > servers: > > Limiting closed port RST response from 317 to 200 packets per second Fire up tcpdump to see where the packetstorm is coming from. You may be under a DOS or DDOS attack, or something may be wrong in the network leading into the servers. -- Mike Andrews mikea@mikea.ath.cx Tired old sysadmin since 1964 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message