Re: Strange messages in dmesg after DDoS-attack.

From: Jesper Wallin (jesper_at_hackunite.net)
Date: 04/05/05

  • Next message: Mike Silbersack: "Re: Strange messages in dmesg after DDoS-attack." 
    Date: Tue, 5 Apr 2005 03:32:01 +0200 (CEST)
To: "Mike Silbersack" <silby@silby.com>

    >
    > On Tue, 5 Apr 2005, Jesper Wallin wrote:
    >
    >> Dear list,
    >>
    >> A few days ago one of my machines were attacked by a DDoS-attack using
    >> UDP
    >> on random ports.. When I later on analyzed the logs, I found this in my
    >> dmesg:
    >>
    >> xl0: initialization of the rx ring failed (55)
    >> xl0: initialization of the rx ring failed (55)
    >> xl0: initialization of the rx ring failed (55)
    >>
    >> I tried to find out on google what it ment, but without any luck. What
    >> does that mean and how can I correct it (if it's a problem of course).
    >>
    >>
    >> Best regards,
    >> Jesper Wallin
    >
    > It means that we have a bug in the xl driver, probably nothing too
    > serious. Were there any other xl0 related messages, like "watchdog
    > timeout"?
    >
    > My guess is that we have a problem under high traffic conditions, and the
    > DDoS would qualify as that.
    >
    > Mike "Silby" Silbersack
    >
    Hi Mike,

    First of all, thanks for your reply.. Nope, as far as I can see, I only
    got 6 of those lines and nothing more.

    I have a fxp0 in my other server, would you recommend me to switch the
    NICs since the server using the xl0 got higher priority than the fxp0 one?

    Regards,
    Jesper Wallin

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Mike Silbersack: "Re: Strange messages in dmesg after DDoS-attack."

    Relevant Pages

    • Re: sunmanagers Digest, Vol 11, Issue 6
      ... check this e-mail and any attachments for viruses. ... > not an easy way of doing it, since my print server is ... >> Regards, ... > I did a tail on the messages file to get a stop action of the flying ...
      (SunManagers)
    • Re: error in configuring E-mail and Internet wizard
      ... What is your SBS server brand? ... Best regards, ... > Yes I did install the hP smart stuff.Infact I used those to install the ...
      (microsoft.public.windows.server.sbs)
    • Re: Process being launched.. No scheduled tasks
      ... Regards, ... > What is interesting is that this should be a user's workstation. ... > Hank Arnold ... >> server is our first DC. ...
      (microsoft.public.windows.server.general)
    • Re: Two Servers, one AD in one Office
      ... Best regards ... This posting is provided "AS IS" with no warranties, ... I suppose I can add the subnet only when the server will be ... I just come back from my customer where I have installed DNS on the ...
      (microsoft.public.windows.server.active_directory)
    • Re: NIC Changed
      ... I now even recall simillar answer was given by you on simillar ... >> I am going to attend to problem on a win 2003 server and a remote ... > Hi Sharad, lond time, no see in this group. ... > Best regards, ...
      (microsoft.public.windows.server.dns)