Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 17 May 2005 12:51:34 +0900
From:      Joel <rees@ddcom.co.jp>
To:        FreeBSD Mailing List <freebsd-questions@freebsd.org>
Subject:   Re: is this a possible DoS attack?
Message-ID:  <20050517124657.2942.REES@ddcom.co.jp>
In-Reply-To: <FDE0A023-085D-4258-ABB4-805772E3E699@shire.net>
References:  <FDE0A023-085D-4258-ABB4-805772E3E699@shire.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 16 May 2005 08:26:58 -0600
"Chad Leigh -- Shire.Net LLC" <chad@shire.net> wrote
> [...]
> May 16 02:20:00 crickhollow named[87025]: zone 22.63.209.in-addr.arpa/ 
> IN: loading master file ptr.209.63.22: file not found
> May 16 02:33:31 crickhollow /kernel: Limiting icmp unreach response  
> from 232 to 200 packets per second
> May 16 03:14:52 crickhollow /kernel: All mbufs exhausted, please see  
> tuning(7).
> May 16 03:14:53 crickhollow last message repeated 3 times
> May 16 03:14:59 crickhollow /kernel: o 00:20:ed:16:b9:07 on dc0
> May 16 03:14:59 crickhollow /kernel: arp: 166.70.252.252 moved from  
> 00:20:ed:16:b9:07 to 00:20:ed:56:b9:07 on dc0
> May 16 03:14:59 crickhollow /kernel: arp: 166.70.252.252 moved from  
> 00:20:ed:56:b9:07 to 00:20:ed:16:b9:07 on dc0
> May 16 03:14:59 crickhollow /kernel: arp: 166.70.252.252 moved from  
> 00:20:ed:16:b9:07 to 00:20:ed:56:b9:07 on dc0"
> [...]

NIC in 166.70.252.252 going bad?

Some sort early morning of line noise? (I'd suggest the solar flare, but
I think that was before the weekend.)

--
Joel Rees   <rees@ddcom.co.jp>
digitcom, inc.   $B3t<02q<R%G%8%3%`(B
Kobe, Japan   +81-78-672-8800
** <http://www.ddcom.co.jp>; **



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050517124657.2942.REES>