May it be you are under attack (Denial of Service)?

You should check your network statistics (netstat) and eventually filter the attacker ip from your firewall.

Stefano

Nathan Cheng wrote:
Meanwhile, the "connections" log is going nuts, writing the same set of "Maximum number of open connections exceeded - refusing connection" messages over and over at a rate of 10MB per 3 minutes or so:

-rw-r--r-- 1 root root 10485738 Apr 22 12:38 connections-2006-04-22-12-28.log -rw-r--r-- 1 root root 10485901 Apr 22 12:42 connections-2006-04-22-12-38.log -rw-r--r-- 1 root root 10485974 Apr 22 12:46 connections-2006-04-22-12-42.log -rw-r--r-- 1 root root 10485856 Apr 22 12:49 connections-2006-04-22-12-46.log -rw-r--r-- 1 root root 10485895 Apr 22 12:53 connections-2006-04-22-12-49.log -rw-r--r-- 1 root root 10485957 Apr 22 12:56 connections-2006-04-22-12-53.log -rw-r--r-- 1 root root 10485832 Apr 22 12:58 connections-2006-04-22-12-56.log -rw-r--r-- 1 root root 10485985 Apr 22 13:01 connections-2006-04-22-12-58.log -rw-r--r-- 1 root root 10485979 Apr 22 13:03 connections-2006-04-22-13-01.log -rw-r--r-- 1 root root 10485818 Apr 22 13:04 connections-2006-04-22-13-03.log -rw-r--r-- 1 root root 10485955 Apr 22 13:06 connections-2006-04-22-13-04.log -rw-r--r-- 1 root root 10485911 Apr 22 13:08 connections-2006-04-22-13-06.log -rw-r--r-- 1 root root 10485815 Apr 22 13:11 connections-2006-04-22-13-08.log -rw-r--r-- 1 root root 8468986 Apr 22 13:13 connections-2006-04-22-13-11.log

Time now is Apr 22 13:13.

I've got netstat dumps if anyone wants to take a look.

I was right about it taking 10 more minuts or so, as I type, James just woke up.

Anybody got any clue?

Thanks,

Nathan


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to