On Feb 28,  8:26pm, [email protected] 
([email protected]) wrote:
-- Subject: Re: DoS attack against TCP services

| On Sat, 28 Feb 2015, Christos Zoulas wrote:
| >
| > Yes, that's a good start but we need to find which process that
| > lwp belongs to.
| 
| I'm not sure what the best course of action is. The machine is still 
| running. Should you try to get the information from the current system or 
| force a dump and analyze this?
| 
| On Sat, 28 Feb 2015, J. Hannken-Illjes wrote:
| >
| > Looks unlocked -- what about a backtrace of thread 0.5,
| > bt /a 0xfffffe882df11860
| 
| https://www.ipv6.uni-leipzig.de/bt_0xfffffe882df11860.png

So who else is holding the sysmon sme_mtx?

christos

Reply via email to