De asta ce sa mai zic ca se pare ca destinatia acestor pachete e aceeasi
cu a lui Florin
Eu sunt de parere ca e ceva (virus/vierme) ca am facut drop pe clasa mea
de ip-uri
din care vene problema (am alocate doar 64 de ip-uri din 256) si el
trimitea pe toata clasa
Asta era inainte sa tai clasa mea :
cu xxx.xxx.x e clasa mea
0.000000 xxx.xxx.x5.121 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000153 xxx.xxx.x5.167 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000164 xxx.xxx.x5.167 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000298 xxx.xxx.x5.245 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000306 xxx.xxx.x5.243 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000446 xxx.xxx.x5.95 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000594 xxx.xxx.x5.5 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000601 xxx.xxx.x5.103 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000743 xxx.xxx.x5.220 -> 62.75.187.205 ISAKMP DOI Specific Use
0.000754 xxx.xxx.x5.143 -> 62.75.187.205 ISAKMP ISAKMP Future Use
0.000837 xxx.xxx.x0.86 -> xxx.xxx.x2.119 TCP 30365 > afbackup [ACK]
Seq=0 Ack=0 Win=65535 Len=0
0.000893 xxx.xxx.x2.119 -> xxx.xxx.x0.86 TCP [TCP Previous segment lost]
afbackup > 30365 [ACK] Seq=4380 Ack=0 Win=63948 Len=1
460
0.001000 xxx.xxx.x5.152 -> 62.75.187.205 ISAKMP DOI Specific Use
0.001040 xxx.xxx.x5.118 -> 62.75.187.205 ISAKMP DOI Specific Use
0.001199 xxx.xxx.x2.119 -> xxx.xxx.x0.86 TCP afbackup > 30365 [ACK]
Seq=5840 Ack=0 Win=63948 Len=1460
0.001251 xxx.xxx.x5.130 -> 62.75.187.205 ISAKMP DOI Specific Use
0.001337 xxx.xxx.x5.33 -> 62.75.187.205 ISAKMP NONE
0.001486 xxx.xxx.x2.119 -> xxx.xxx.x0.86 TCP afbackup > 30365 [ACK]
Seq=7300 Ack=0 Win=63948 Len=1460
0.001572 xxx.xxx.x5.172 -> 62.75.187.205 ISAKMP DOI Specific Use
0.001784 xxx.xxx.x2.119 -> xxx.xxx.x0.86 TCP afbackup > 30365 [ACK]
Seq=8760 Ack=0 Win=63948 Len=1460
0.001840 xxx.xxx.x5.73 -> 62.75.187.205 ISAKMP DOI Specific Use
0.001850 xxx.xxx.x5.104 -> 62.75.187.205 ISAKMP DOI Specific Use
0.001962 xxx.xxx.x0.86 -> xxx.xxx.x2.119 TCP 30365 > afbackup [ACK]
Seq=0 Ack=2920 Win=65535 Len=0
0.002081 xxx.xxx.x2.119 -> xxx.xxx.x0.86 TCP afbackup > 30365 [ACK]
Seq=10220 Ack=0 Win=63948 Len=1460
0.002135 xxx.xxx.x5.39 -> 62.75.187.205 ISAKMP Private Use
0.002230 xxx.xxx.x2.119 -> xxx.xxx.x0.86 TCP afbackup > 30365 [ACK]
Seq=11680 Ack=0 Win=63948 Len=1460
0.002286 xxx.xxx.x5.34 -> 62.75.187.205 ISAKMP DOI Specific Use
0.002379 xxx.xxx.x5.200 -> 62.75.187.205 ISAKMP ISAKMP Future Use
0.002539 xxx.xxx.x5.118 -> 62.75.187.205 ISAKMP DOI Specific Use
0.002548 xxx.xxx.x5.49 -> 62.75.187.205 ISAKMP DOI Specific Use
0.002677 xxx.xxx.x5.167 -> 62.75.187.205 ISAKMP DOI Specific Use
0.002824 xxx.xxx.x5.152 -> 62.75.187.205 ISAKMP DOI Specific Use
0.002834 xxx.xxx.x5.204 -> 62.75.187.205 ISAKMP DOI Specific Use
0.002973 xxx.xxx.x5.226 -> 62.75.187.205 ISAKMP DOI Specific Use
0.002981 xxx.xxx.x5.8 -> 62.75.187.205 ISAKMP DOI Specific Use
0.003121 xxx.xxx.x5.106 -> 62.75.187.205 ISAKMP DOI Specific Use
0.003128 xxx.xxx.x5.129 -> 62.75.187.205 ISAKMP DOI Specific Use
0.003270 xxx.xxx.x5.135 -> 62.75.187.205 ISAKMP DOI Specific Use
0.003419 xxx.xxx.x5.17 -> 62.75.187.205 ISAKMP DOI Specific Use
0.003425 xxx.xxx.x5.227 -> 62.75.187.205 ISAKMP DOI Specific Use
0.003567 xxx.xxx.x5.154 -> 62.75.187.205 ISAKMP DOI Specific Use
0.003574 xxx.xxx.x5.159 -> 62.75.187.205 ISAKMP DOI Specific Use
Asta dupa ce am taiat clasa:
au aparut cu 0.0.0.numar
0.014322 86.104.81.28 -> 86.104.86.76 TCP 2910 > 2263 [ACK] Seq=0
Ack=0 Win=65257 Len=1460
0.014912 0.0.0.81 -> 62.75.187.205 ISAKMP DOI Specific Use
0.015535 0.0.0.61 -> 84.254.65.239 ISAKMP ISAKMP Future Use
0.016147 0.0.0.20 -> 84.254.65.239 ISAKMP DOI Specific Use
0.016930 0.0.0.195 -> 84.254.65.239 ISAKMP Private Use
0.017107 0.0.0.9 -> 62.75.187.205 ISAKMP ISAKMP Future Use
0.019331 86.34.8.29 -> 86.104.80.132 TCP 3753 > 29223 [ACK] Seq=0
Ack=0 Win=65247 Len=1452
0.019975 0.0.0.14 -> 62.75.187.205 ISAKMP ISAKMP Future Use
0.020240 0.0.0.142 -> 62.75.187.205 ISAKMP Private Use
0.020324 0.0.0.70 -> 62.75.187.205 ISAKMP DOI Specific Use
0.021043 0.0.0.242 -> 62.75.187.205 ISAKMP ISAKMP Future Use
0.021172 86.104.81.28 -> 86.104.86.76 TCP [TCP Previous segment lost]
2910 > 2263 [ACK] Seq=10220 Ack=0 Win=65257 Len=1460
0.021730 86.104.80.142 -> 86.104.81.231 TCP [TCP Previous segment
lost] 2038 > 1359 [ACK] Seq=11680 Ack=0 Win=65179 Len=1460
0.021925 86.104.80.142 -> 86.104.81.231 TCP 2038 > 1359 [PSH, ACK]
Seq=13140 Ack=0 Win=65179 Len=1296
0.022359 0.0.0.94 -> 62.75.187.205 ISAKMP DOI Specific Use
0.022445 0.0.0.33 -> 84.254.65.239 ISAKMP Base
0.023145 0.0.0.13 -> 62.75.187.205 ISAKMP DOI Specific Use
0.023513 0.0.0.151 -> 84.254.65.239 ISAKMP DOI Specific Use
0.024357 86.104.86.76 -> 86.104.81.28 TCP 2263 > 2910 [ACK] Seq=0
Ack=4380 Win=65535 Len=0 SLE=950737572 SRE=950743412
0.024579 0.0.0.225 -> 62.75.187.205 ISAKMP DOI Specific Use
0.024661 0.0.0.7 -> 84.254.65.239 ISAKMP DOI Specific Use
0.025260 86.104.80.25 -> 86.104.85.74 TCP [TCP Previous segment lost]
3597 > 9470 [ACK] Seq=29200 Ack=0 Win=64167 Len=1460
0.025938 0.0.0.205 -> 62.75.187.205 ISAKMP DOI Specific Use
0.026025 0.0.0.163 -> 84.254.65.239 ISAKMP Private Use
0.026759 0.0.0.143 -> 62.75.187.205 ISAKMP ISAKMP Future Use
0.027283 0.0.0.194 -> 84.254.65.239 ISAKMP DOI Specific Use
0.027371 0.0.0.212 -> 62.75.187.205 ISAKMP DOI Specific Use
0.027544 0.0.0.156 -> 62.75.187.205 ISAKMP DOI Specific Use
0.027671 86.104.81.28 -> 86.104.86.76 TCP 2910 > 2263 [ACK] Seq=11680
Ack=0 Win=65257 Len=1460
0.028264 0.0.0.180 -> 62.75.187.205 ISAKMP DOI Specific Use
0.028908 0.0.0.240 -> 62.75.187.205 ISAKMP DOI Specific Use
0.029787 0.0.0.232 -> 62.75.187.205 ISAKMP Private Use
0.030692 86.104.80.25 -> 86.104.85.74 TCP [TCP Previous segment lost]
3597 > 9470 [PSH, ACK] Seq=35040 Ack=0 Win=64167 Len=1
460
0.032366 86.104.80.25 -> 86.104.85.74 TCP [TCP Previous segment lost]
3597 > 9470 [ACK] Seq=42340 Ack=0 Win=64167 Len=1460
0.032847 86.105.114.213 -> 86.104.80.54 TCP 1533 > 59175 [PSH, ACK]
Seq=0 Ack=0 Win=64613 Len=109
0.033793 0.0.0.23 -> 84.254.65.239 ISAKMP DOI Specific Use
0.034531 86.104.86.3 -> 70.187.149.7 TCP 4028 > microsoft-ds [SYN]
Seq=0 Ack=0 Win=64240 Len=0 MSS=1460
0.035517 0.0.0.201 -> 62.75.187.205 ISAKMP DOI Specific Use
0.036217 0.0.0.104 -> 84.254.65.239 ISAKMP DOI Specific Use
----- Original Message -----
From: "Vali Dragnuta" <[EMAIL PROTECTED]>
To: "Romanian Linux Users Group" <[email protected]>
Sent: Saturday, January 28, 2006 7:43 PM
Subject: Re: [rlug] problema (posibil ceva vierme/virus de pe scule cu
wingoz)
intr-adevar e putin probabil sa fie crappy.
Pe de alta parte eu am avut cindva niste probleme
serioase cu niste e1000 onboard, probleme care
nu s-au rezolvat la vremea aceea decit prin compilarea
modulului din sursele de pe siteul intel.
Mai investigheaza totusi problema cu hardwareul, pentru
ca nu ar trebui sa iti moara toata masina din cauza numarului
prea mare de pachete, mai ales daca le faci drop de indata
ce intra in kernel.
Si apropos, cum moare de fapt ? ingheata complet ?
Fara oopsuri sau kernel panic ?
_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug
_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug
