> a,da. shi intre mesajele alea mai apare shi:
>
> Slab corruption: start=d625533c, len=2048
> Redzone: 0x5a2cf071/0x5a2cf071.
> Last user: [<c0231f68>](kfree_skbmem+0x10/0x26)
> 010: 6b 6b 22 a0 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 3b c0
> 020: 6b 6b ff ff ff ff ff ff 00 04 76 e2 e4 6c 08 06
> 030: 00 01 08 00 06 04 00 01 00 04 76 e2 e4 6c 51 c4
> 040: 9a e9 00 00 00 00 00 00 51 c4 9a ec 00 00 00 00
> 050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6b 6b
> Prev obj: start=d6254b30, len=2048
> Redzone: 0x170fc2a5/0x170fc2a5.
> Last user: [<c0231d9d>](alloc_skb+0x53/0xfc)
> 000: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a
> 010: 5a 5a 00 00 00 00 42 ad 32 32 ff ff ff ff 00 00

Ai probleme cu kernel-ul, cu memoria sau cu restul hard-ului.
Deci, nu te poti baza ca tcpdump-ul functioneaza corect, implicit ca 
pachetele alea chiar vin spre tine exact asa cum le vezi.

Deci, rezolva problema de mai sus, si abia apoi o sa poti trece la 
problema 2.

Da, poate sa fie si un exploit de tip DOS.

Ce kernel ai?
Cum de ai activat CONFIG_DEBUG_SLAB? Te intreb pentru ca numai 
developer-ii il folosesc. Din cite mi-aduc aminte, era un bug in kernel 
care aparea numai cu CONFIG_DEBUG_SLAB activat.
Incearca sa scoti optiunea si sa vezi daca mai apare.

Ce tip de placa de retea?

>
> acum cateva saptamani bune tzin minte ca ma uitam cu dnstop la
> traficul pe 62.231.76.49 shi cam un sfert din activitate era
> facuta de 81.196.154.25 asta. scula n-are deschis decat ssh-ul.
>
> are cineva idei ceva..?
> thx.
>
> On Wed, 20 Oct 2004 20:51:32 +0300
> petre daniel <[EMAIL PROTECTED]> wrote:
>
>>
>> daca shtii tu mai multe decat noi,ceilaltzi, despre portul 53,
>> apuca-te shi povesteshte :>
>>
>> On Wed, 20 Oct 2004 20:48:05 +0300
>> KobrAs <[EMAIL PROTECTED]> wrote:
>>
>>> portul 53 iti spune ceva ?
>>>
>>> On Wed, 2004-10-20 at 19:09, petre daniel wrote:
>>>> a mai vazut cineva asha ceva?
>>>>
>>>> UDP: short packet: From 81.196.154.25:3576 0/38 to 62.231.76.49:53
>>>> UDP: short packet: From 81.196.154.25:3538 0/38 to 62.231.76.49:53
>>>> UDP: short packet: From 81.196.154.25:0 53/38 to 62.231.76.49:2260
>>>> UDP: short packet: From 81.196.154.25:1595 0/36 to 62.231.76.49:53
>>>> UDP: short packet: From 81.196.154.25:1732 0/38 to 62.231.76.49:53
>>>> UDP: short packet: From 81.196.154.25:1654 0/41 to 62.231.76.49:53
>>>> UDP: short packet: From 81.196.154.25:0 53/36 to 62.231.76.49:4903
>>>> UDP: short packet: From 81.196.154.25:0 53/42 to 62.231.76.49:4522
>>>> UDP: short packet: From 81.196.154.25:37214 0/38 to 62.231.76.49:53
>>>> UDP: short packet: From 81.196.154.25:1375 0/40 to 62.231.76.49:53
>>>>
>>>> 62.231.76.49 sunt eu, 81.196.154.25 este un client.
>>>>
>>>> thx.
>>>
>>>
>>> ---
>>> Detalii despre listele noastre de mail: http://www.lug.ro/
>>>
>>>
>>>
>>>
>>>
>>
>>
>> --
>> petre daniel,system  administrator,
>> romania data systems, pitesti branch
>> mobile 740.10.2196,phone 248.219917
>>
>> ---
>> Detalii despre listele noastre de mail: http://www.lug.ro/
>>
>>
>>
>> !DSPAM:4176a5da139121629714756!
>>
>
>
> -- 
> petre daniel,system  administrator,
> romania data systems, pitesti branch
> mobile 740.10.2196,phone 248.219917
>
> ---
> Detalii despre listele noastre de mail: http://www.lug.ro/
>
>

---
Catalin(ux aka Dino) BOIE
catab at deuroconsult.ro
http://kernel.umbrella.ro/

--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui