From owner-freebsd-security Tue Jan 21 8: 8:18 2003 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A958537B401 for ; Tue, 21 Jan 2003 08:08:15 -0800 (PST) Received: from mail1.crowders.org (mail1.crowders.org [62.49.128.148]) by mx1.FreeBSD.org (Postfix) with SMTP id DF85243F3F for ; Tue, 21 Jan 2003 08:08:08 -0800 (PST) (envelope-from steve@crowders.org) Received: (qmail 37009 invoked from network); 21 Jan 2003 16:07:27 -0000 Received: from wn2k-13.crowders.org (HELO wn2k13) (192.168.66.13) by mail-1.crowders.org with SMTP; 21 Jan 2003 16:07:27 -0000 Reply-To: From: "Steve Crowder" To: "Martin McCormick" , Subject: RE: Limiting icmp unreach response from 231 to 200 packets per second Date: Tue, 21 Jan 2003 16:08:07 -0000 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 In-reply-to: <200301211600.h0LG08vD022507@dc.cis.okstate.edu> Importance: Normal X-Spam-Rating: mail-1.crowders.org 1.6.2 0/0/N Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi I too have had an identical experience on two machines recently, any input much appreciated. Or perhaps it's a BIND 9 specific problem... Thanks --- Steve Crowder steve@crowders.org http://www.crowders.org/ -----Original Message----- From: owner-freebsd-security@FreeBSD.ORG [mailto:owner-freebsd-security@FreeBSD.ORG]On Behalf Of Martin McCormick Sent: 21 January 2003 16:00 To: freebsd-security@FreeBSD.ORG Subject: Limiting icmp unreach response from 231 to 200 packets per second On rare occasions, a FreeBSD system in our network has been known to print the example shown in the subject at a furious rate for a short time and then things get back to normal. Is that what the effects of a ping flood look like? On one system running bind9, the named process died after the syslog message said that packets had reached 243 per second, but I was able to restart it within seconds of its crash. Only the named process crashed, not the system. Any ideas as to what this is? Martin McCormick WB5AGZ Stillwater, OK OSU Center for Computing and Information Services Network Operations Group To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message