LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices



Reply
 
Search this Thread
Old 10-08-2004, 02:18 AM   #1
csstudy
LQ Newbie
 
Registered: May 2004
Posts: 15

Rep: Reputation: 0
messages suppressed?


here is some of my redhat server's log
Oct 8 11:50:06 kernel: NET: 72203 messages suppressed.
Oct 8 11:50:11 kernel: NET: 73431 messages suppressed.
Oct 8 11:50:16 kernel: NET: 73538 messages suppressed.
Oct 8 11:50:21 kernel: NET: 64800 messages suppressed.
Oct 8 11:50:26 kernel: NET: 73611 messages suppressed.
Oct 8 11:50:31 kernel: NET: 73364 messages suppressed.
Oct 8 11:50:36 kernel: NET: 73672 messages suppressed.
Oct 8 11:50:41 kernel: NET: 73325 messages suppressed.
Oct 8 11:50:46 kernel: NET: 73241 messages suppressed.

that time,my server is very slow,I think it is under SYN(for port80)attact,
how can i do?
 
Old 10-10-2004, 08:56 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,679
Blog Entries: 54

Rep: Reputation: 2955Reputation: 2955Reputation: 2955Reputation: 2955Reputation: 2955Reputation: 2955Reputation: 2955Reputation: 2955Reputation: 2955Reputation: 2955Reputation: 2955
here is some of my redhat server's log
Please post the line immediately before these ones.


that time,my server is very slow,I think it is under SYN(for port80)attact, how can i do?
First of all don't think but make sure. With the above you should get some leads on what it actually is.

If you're sure it's a bombardment of requests, make sure SYN cookies are enabled in the kernel, your server has a max requests that's appropriate for your system and use the firewall to rate-limit requests. All of this will not stop a D0S tho, so if this is a (remote) (production) server you (rely on, you) may wish to consult your hosting company or department for additional measures like firewalling or dropping traffic at the router. If it's an attack, file a complaint and let them do the tracebacks and handle contacting upstream providers.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
what does messages suppressed in /var/log/messages mean saavik Linux - Networking 2 05-07-2008 03:31 PM
Redirecting the kernel messages to file other than /var/log/messages jyotika_b83 Linux - General 3 04-28-2005 07:39 PM
linux kernel: printk: 39476 messages suppressed. seanfitz Mandriva 4 04-19-2005 05:36 PM
kernel: NET: 606 messages suppressed gonzo22 Linux - Networking 1 01-08-2005 03:23 AM
net: 70 messages suppressed; neighbour table overflow is the message, only problem techguy2 Linux - Networking 0 10-03-2003 08:57 AM


All times are GMT -5. The time now is 01:10 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration