LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 11-21-2008, 10:46 AM   #1
userlander
Member
 
Registered: Jul 2008
Distribution: Arch, Debian
Posts: 61

Rep: Reputation: 17
Question NFS Log Events: Why So Many?


I have some NFS shares on a server, and everyday now I'm seeing messages like this in my snort report:

Code:
                                                                                          
Events from same host to same destination using same method                               
=========================================================================                 
 # of  from             to               method                                           
=========================================================================                 
  173  192.168.0.122    192.168.0.123    RPC portmap nlockmgr request TCP                 
  156  192.168.0.126    192.168.0.123    RPC portmap mountd request TCP                   
  106  192.168.0.121    192.168.0.123    RPC portmap mountd request TCP                   
  106  192.168.0.121    192.168.0.123    RPC mountd TCP mount request                     
  106  192.168.0.121    192.168.0.123    RPC portmap NFS request TCP                      
   86  192.168.0.126    192.168.0.123    RPC mountd TCP mount request                     
   84  192.168.0.122    192.168.0.123    RPC portmap mountd request UDP                   
   75  192.168.0.126    192.168.0.123    RPC portmap NFS request TCP                      
   70  192.168.0.126    192.168.0.123    RPC mountd TCP unmount request                   
   65  192.168.0.122    192.168.0.123    RPC portmap NFS request TCP                      
   60  192.168.0.122    192.168.0.123    RPC portmap mountd request TCP                   
   57  38.99.44.104     192.168.0.123    WEB-MISC robots.txt access                       
   54  192.168.0.122    192.168.0.123    RPC mountd UDP mount request                     
   51  66.249.73.154    192.168.0.123    WEB-MISC robots.txt access                       
   51  38.99.13.125     192.168.0.123    WEB-MISC robots.txt access                       
   39  192.168.0.122    192.168.0.123    RPC mountd TCP mount request                     
   28  192.168.0.122    192.168.0.123    COMMUNITY WEB-MISC mod_jrun overflow attempt     
   24  192.168.0.120    192.168.0.123    RPC portmap NFS request TCP                      
   24  192.168.0.126    192.168.0.123    RPC portmap mountd request UDP
Is that normal to have so many requests like that, or is something probably misconfigured? I ask because snort is segfaulting now everyday.

What's also disturbing is where it says "COMMUNITY WEB-MISC mod_jrun overflow attempt," because why would that come from one of my own machines to the server? I'm not sure what this all means, but I think there is a misconfiguration somewhere.
 
Old 11-22-2008, 03:03 PM   #2
userlander
Member
 
Registered: Jul 2008
Distribution: Arch, Debian
Posts: 61

Original Poster
Rep: Reputation: 17
bump

Mods, is this in the wrong forum? NFS - "NETWORK" File Share would seem to go in networking, but maybe it's more of a "software" question?
 
Old 03-21-2009, 11:19 AM   #3
userlander
Member
 
Registered: Jul 2008
Distribution: Arch, Debian
Posts: 61

Original Poster
Rep: Reputation: 17
lol -wow, lame forum.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Keyboard events interrupting mouse events. miner49er Linux - Hardware 3 11-04-2008 04:16 AM
Hang on triggering udev events- is there a buildup of events? sonichedgehog Slackware 20 07-11-2008 02:49 AM
how to log the mouse and keyboard events sridhar_yerram Linux - Newbie 0 10-15-2007 12:04 AM
Where do the nfs daemons log to, & how can I configure that? sp1ff Slackware 1 02-22-2005 02:06 PM
Events on Log analyse dough29 Programming 2 11-07-2004 01:20 PM


All times are GMT -5. The time now is 05:38 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration