Re: filling up UDP socket buffers like mad

2006-03-27 Thread Michael W. Lucas
On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote: On Mar 24, 2006, at 4:17 PM, Michael W. Lucas wrote: Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server. I'm having trouble with DNS, DHCP, and syslogd locking up, and I think I've found what they all share in

Re: filling up UDP socket buffers like mad

2006-03-27 Thread Chuck Swiger
Michael W. Lucas wrote: On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote: [ ... ] udp4 43414 0 *.514 *.* udp4 0 0 *.49661*.* ... We have no firewall on this machine; it's buried behind three layers

Re: filling up UDP socket buffers like mad

2006-03-27 Thread Freminlins
Michael, On 3/27/06, Michael W. Lucas [EMAIL PROTECTED] wrote: # netstat -na udp4 43414 0 *.514 *.* That's a big queue. I'm attaching the output of netstat -na and netstat -s for general informative purposes; if anyone has any further suggestions, I'm all ears.

Re: filling up UDP socket buffers like mad

2006-03-27 Thread Michael W. Lucas
On Mon, Mar 27, 2006 at 10:22:18AM -0500, Chuck Swiger wrote: Michael W. Lucas wrote: On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote: [ ... ] udp4 43414 0 *.514 *.* udp4 0 0 *.49661*.* ...

Re: filling up UDP socket buffers like mad

2006-03-27 Thread Michael W. Lucas
On Mon, Mar 27, 2006 at 04:29:31PM +0100, Freminlins wrote: Michael, On 3/27/06, Michael W. Lucas [EMAIL PROTECTED] wrote: # netstat -na udp4 43414 0 *.514 *.* That's a big queue. Yep. Mine is bigger than yours. :-) I'm attaching the output of netstat

Re: filling up UDP socket buffers like mad

2006-03-27 Thread Luiz Eduardo Guida Valmont
Could it be that you're under a DOS attack even though you're behind three layers of firewall? =/ Try configuring a firewall to block every UDP packet for every port except those needed by the services you run. On 3/27/06, Michael W. Lucas [EMAIL PROTECTED] wrote: On Fri, Mar 24, 2006 at

filling up UDP socket buffers like mad

2006-03-24 Thread Michael W. Lucas
Hi, Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server. I'm having trouble with DNS, DHCP, and syslogd locking up, and I think I've found what they all share in common. During the lockups, the box starts dropping UDP due to full socket buffers. I have a dumb little script to

Re: filling up UDP socket buffers like mad

2006-03-24 Thread Charles Swiger
On Mar 24, 2006, at 4:17 PM, Michael W. Lucas wrote: Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server. I'm having trouble with DNS, DHCP, and syslogd locking up, and I think I've found what they all share in common. During the lockups, the box starts dropping UDP due to full

Re: filling up UDP socket buffers like mad

2006-03-24 Thread Garrett Cooper
Michael W. Lucas wrote: Hi, Running FreeBSD 6.1-PRERELEASE as a DNS, dhcp, and syslog server. I'm having trouble with DNS, DHCP, and syslogd locking up, and I think I've found what they all share in common. During the lockups, the box starts dropping UDP due to full socket buffers. I have a