Re: Strange messages in dmesg after DDoS-attack.

From: Mike Silbersack (silby_at_silby.com)
Date: 04/05/05

  • Next message: Uwe Doering: "Re: FreeBSD Security Advisory FreeBSD-SA-05:02.sendfile" 
    Date: Mon, 4 Apr 2005 21:47:58 -0500 (CDT)
To: Jesper Wallin <jesper@hackunite.net>

    On Tue, 5 Apr 2005, Jesper Wallin wrote:

    > Hi Mike,
    >
    > First of all, thanks for your reply.. Nope, as far as I can see, I only
    > got 6 of those lines and nothing more.
    >
    > I have a fxp0 in my other server, would you recommend me to switch the
    > NICs since the server using the xl0 got higher priority than the fxp0 one?
    >
    >
    > Regards,
    > Jesper Wallin

    All network cards/drivers have some bugs in them, so as long as the 3com
    card survived the DDoS and didn't require the interface to be restarted,
    I'd stick with it.

    I think I found how those messages appeared, xl_init is called whenever
    the card sets the flag "ADFAIL", whatever that means. Apparently it's bad
    and the network driver resets itself when it happens. So, you're probably
    losing a few packets as a result of the reset, but other than that I don't
    see it causing any real problems.

    Mike "Silby" Silbersack
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Uwe Doering: "Re: FreeBSD Security Advisory FreeBSD-SA-05:02.sendfile"