On Thu, 21 Oct 2004 11:48:24 +0300 (EEST) "Catalin(ux aka Dino) BOIE" <[EMAIL PROTECTED]> wrote:
> > a,da. shi intre mesajele alea mai apare shi: > > > > Slab corruption: start=d625533c, len=2048 > > Redzone: 0x5a2cf071/0x5a2cf071. > > Last user: [<c0231f68>](kfree_skbmem+0x10/0x26) > > 010: 6b 6b 22 a0 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 3b c0 > > 020: 6b 6b ff ff ff ff ff ff 00 04 76 e2 e4 6c 08 06 > > 030: 00 01 08 00 06 04 00 01 00 04 76 e2 e4 6c 51 c4 > > 040: 9a e9 00 00 00 00 00 00 51 c4 9a ec 00 00 00 00 > > 050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6b 6b > > Prev obj: start=d6254b30, len=2048 > > Redzone: 0x170fc2a5/0x170fc2a5. > > Last user: [<c0231d9d>](alloc_skb+0x53/0xfc) > > 000: 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a 5a > > 010: 5a 5a 00 00 00 00 42 ad 32 32 ff ff ff ff 00 00 > > Ai probleme cu kernel-ul, cu memoria sau cu restul hard-ului. > Deci, nu te poti baza ca tcpdump-ul functioneaza corect, implicit ca > pachetele alea chiar vin spre tine exact asa cum le vezi. > > Deci, rezolva problema de mai sus, si abia apoi o sa poti trece la > problema 2. > > Da, poate sa fie si un exploit de tip DOS. > > Ce kernel ai? Linux 2.6.8-gentoo-r2 #5 SMP Wed Sep 22 17:03:34 EEST 2004 i686 Intel(R) Pentium(R) 4 CPU 2.80GHz GenuineIntel GNU/Linux > Cum de ai activat CONFIG_DEBUG_SLAB? Te intreb pentru ca numai > developer-ii il folosesc. Din cite mi-aduc aminte, era un bug in kernel > care aparea numai cu CONFIG_DEBUG_SLAB activat. humm.. sa il dezactivez .. > Incearca sa scoti optiunea si sa vezi daca mai apare. > > Ce tip de placa de retea? intel eepro. > > > > > acum cateva saptamani bune tzin minte ca ma uitam cu dnstop la > > traficul pe 62.231.76.49 shi cam un sfert din activitate era > > facuta de 81.196.154.25 asta. scula n-are deschis decat ssh-ul. > > > > are cineva idei ceva..? > > thx. > > > > On Wed, 20 Oct 2004 20:51:32 +0300 > > petre daniel <[EMAIL PROTECTED]> wrote: > > > >> > >> daca shtii tu mai multe decat noi,ceilaltzi, despre portul 53, > >> apuca-te shi povesteshte :> > >> > >> On Wed, 20 Oct 2004 20:48:05 +0300 > >> KobrAs <[EMAIL PROTECTED]> wrote: > >> > >>> portul 53 iti spune ceva ? > >>> > >>> On Wed, 2004-10-20 at 19:09, petre daniel wrote: > >>>> a mai vazut cineva asha ceva? > >>>> > >>>> UDP: short packet: From 81.196.154.25:3576 0/38 to 62.231.76.49:53 > >>>> UDP: short packet: From 81.196.154.25:3538 0/38 to 62.231.76.49:53 > >>>> UDP: short packet: From 81.196.154.25:0 53/38 to 62.231.76.49:2260 > >>>> UDP: short packet: From 81.196.154.25:1595 0/36 to 62.231.76.49:53 > >>>> UDP: short packet: From 81.196.154.25:1732 0/38 to 62.231.76.49:53 > >>>> UDP: short packet: From 81.196.154.25:1654 0/41 to 62.231.76.49:53 > >>>> UDP: short packet: From 81.196.154.25:0 53/36 to 62.231.76.49:4903 > >>>> UDP: short packet: From 81.196.154.25:0 53/42 to 62.231.76.49:4522 > >>>> UDP: short packet: From 81.196.154.25:37214 0/38 to 62.231.76.49:53 > >>>> UDP: short packet: From 81.196.154.25:1375 0/40 to 62.231.76.49:53 > >>>> > >>>> 62.231.76.49 sunt eu, 81.196.154.25 este un client. > >>>> > >>>> thx. > >>> > >>> > >>> --- > >>> Detalii despre listele noastre de mail: http://www.lug.ro/ > >>> > >>> > >>> > >>> > >>> > >> > >> > >> -- > >> petre daniel,system administrator, > >> romania data systems, pitesti branch > >> mobile 740.10.2196,phone 248.219917 > >> > >> --- > >> Detalii despre listele noastre de mail: http://www.lug.ro/ > >> > >> > >> > >> > >> > > > > > > -- > > petre daniel,system administrator, > > romania data systems, pitesti branch > > mobile 740.10.2196,phone 248.219917 > > > > --- > > Detalii despre listele noastre de mail: http://www.lug.ro/ > > > > > > --- > Catalin(ux aka Dino) BOIE > catab at deuroconsult.ro > http://kernel.umbrella.ro/ > > --- > Detalii despre listele noastre de mail: http://www.lug.ro/ > > > > !DSPAM:417777ca36799853439642! > -- petre daniel,system administrator, tech support & network supervisor, romania data systems, pitesti branch mobile 1234.123.123,phone 0348.400.401 --- Detalii despre listele noastre de mail: http://www.lug.ro/
