In message <[EMAIL PROTECTED]> you write
:
> I think I got something, icmp_error_track() increases the use count
> (calling ip_conntrack_find_get()) when it returns with no error (not NULL).
The reference count is now held by the skb.
Hope that helps,
Rusty.
--
Hacking time.
-
To unsubscribe
In message <20001115154603.D4089@psuedomode> you write:
> I was DDoS'd today while away and came home to find the firewall unable to
> do anything network related (although my connection to irc was still
> working oddly). a quick dmesg showed the problem.
> ip_conntrack: maximum limit of 2048
In message 20001115154603.D4089@psuedomode you write:
I was DDoS'd today while away and came home to find the firewall unable to
do anything network related (although my connection to irc was still
working oddly). a quick dmesg showed the problem.
ip_conntrack: maximum limit of 2048 entries
In message [EMAIL PROTECTED] you write
:
I think I got something, icmp_error_track() increases the use count
(calling ip_conntrack_find_get()) when it returns with no error (not NULL).
The reference count is now held by the skb.
Hope that helps,
Rusty.
--
Hacking time.
-
To unsubscribe from
> > > I have also seen this happen on a box which ran test9. Apparently because of
> > > it's long uptime, because the logs should no signs of an attack.
> > >
> > > I guess conntrack forgets to flush some entries? Or maybe there is no way it can
> > > recover from a full conntrack table? Is it
vegae:/usr/src/linux# grep -r ./* --regexp="IPS_CON" | grep "define"
./include/linux/elf.h:#define DT_MIPS_CONFLICT 0x7008
./include/linux/elf.h:#define DT_MIPS_CONFLICTNO0x700b
./include/linux/elf.h:#define SHT_MIPS_CONFLICT 0x7002
vegae:/usr/src/linux#
On Thu, 16 Nov 2000, Dan Aloni wrote:
> On Wed, 15 Nov 2000, Guus Sliepen wrote:
>
> > > I was DDoS'd today while away and came home to find the firewall unable to
> > > do anything network related (although my connection to irc was still
> > > working oddly). a quick dmesg showed the problem.
On Wed, 15 Nov 2000, Guus Sliepen wrote:
> > I was DDoS'd today while away and came home to find the firewall unable to
> > do anything network related (although my connection to irc was still
> > working oddly). a quick dmesg showed the problem.
> > ip_conntrack: maximum limit of 2048 entries
On Wed, Nov 15, 2000 at 04:34:50PM -0500, safemode wrote:
> On Wed, 15 Nov 2000 16:19:23 Guus Sliepen wrote:
> > On Wed, Nov 15, 2000 at 03:46:03PM -0500, safemode wrote:
> >
> > > I was DDoS'd today while away and came home to find the firewall unable
> > to
> > > do anything network related
On Wed, 15 Nov 2000 16:19:23 Guus Sliepen wrote:
> On Wed, Nov 15, 2000 at 03:46:03PM -0500, safemode wrote:
>
> > I was DDoS'd today while away and came home to find the firewall unable
> to
> > do anything network related (although my connection to irc was still
> > working oddly). a quick
On Wed, Nov 15, 2000 at 03:46:03PM -0500, safemode wrote:
> I was DDoS'd today while away and came home to find the firewall unable to
> do anything network related (although my connection to irc was still
> working oddly). a quick dmesg showed the problem.
> ip_conntrack: maximum limit of 2048
I was DDoS'd today while away and came home to find the firewall unable to
do anything network related (although my connection to irc was still
working oddly). a quick dmesg showed the problem.
ip_conntrack: maximum limit of 2048 entries exceeded
NET: 1 messages suppressed.
ip_conntrack: maximum
I was DDoS'd today while away and came home to find the firewall unable to
do anything network related (although my connection to irc was still
working oddly). a quick dmesg showed the problem.
ip_conntrack: maximum limit of 2048 entries exceeded
NET: 1 messages suppressed.
ip_conntrack: maximum
On Wed, Nov 15, 2000 at 03:46:03PM -0500, safemode wrote:
I was DDoS'd today while away and came home to find the firewall unable to
do anything network related (although my connection to irc was still
working oddly). a quick dmesg showed the problem.
ip_conntrack: maximum limit of 2048
On Wed, 15 Nov 2000 16:19:23 Guus Sliepen wrote:
On Wed, Nov 15, 2000 at 03:46:03PM -0500, safemode wrote:
I was DDoS'd today while away and came home to find the firewall unable
to
do anything network related (although my connection to irc was still
working oddly). a quick dmesg
On Wed, Nov 15, 2000 at 04:34:50PM -0500, safemode wrote:
On Wed, 15 Nov 2000 16:19:23 Guus Sliepen wrote:
On Wed, Nov 15, 2000 at 03:46:03PM -0500, safemode wrote:
I was DDoS'd today while away and came home to find the firewall unable
to
do anything network related (although my
On Wed, 15 Nov 2000, Guus Sliepen wrote:
I was DDoS'd today while away and came home to find the firewall unable to
do anything network related (although my connection to irc was still
working oddly). a quick dmesg showed the problem.
ip_conntrack: maximum limit of 2048 entries exceeded
On Thu, 16 Nov 2000, Dan Aloni wrote:
On Wed, 15 Nov 2000, Guus Sliepen wrote:
I was DDoS'd today while away and came home to find the firewall unable to
do anything network related (although my connection to irc was still
working oddly). a quick dmesg showed the problem.
vegae:/usr/src/linux# grep -r ./* --regexp="IPS_CON" | grep "define"
./include/linux/elf.h:#define DT_MIPS_CONFLICT 0x7008
./include/linux/elf.h:#define DT_MIPS_CONFLICTNO0x700b
./include/linux/elf.h:#define SHT_MIPS_CONFLICT 0x7002
vegae:/usr/src/linux#
I have also seen this happen on a box which ran test9. Apparently because of
it's long uptime, because the logs should no signs of an attack.
I guess conntrack forgets to flush some entries? Or maybe there is no way it can
recover from a full conntrack table? Is it maybe necessary
20 matches
Mail list logo
