Apache down

Apache, Lighttpd, nginx, Cherokee
dohǃ
Posts: 23
Joined: 2005-09-15 23:52

Apache down

Post by dohǃ » 2008-12-27 15:48

Hallo,

seit einigen Tagen macht Apache mindestens einmal pro Tag schlapp (der Rechner ist anpingbar), erst nach einen Neustart kann ich mich wieder via SSH einloggen. Bin mir nicht sicher, woran´s liegt und wie ich mit der Warnung "Treason uncloaked!" umgehen soll. Die message-Log-Datei zeigt an, dass Scans durchgeführt werden und es mögliche SYN Floods geben kann. Vl. erzeugen ja diese den Speicherüberlauf...

Tcp_syncookies: echo 1 > /proc/sys/net/ipv4/tcp_syncookies
Linux System mit aktuellster Software: Linux localhost 2.6.24-etchnhalf.1-amd64 #1 SMP Tue Dec 2 17:21:26 UTC 2008 x86_64 GNU/Linux
Munin swap: http://img244.imageshack.us/img244/2840 ... swaku2.png
Munin entropy: http://img166.imageshack.us/img166/886/ ... iosfe5.png
Munin iostat: http://img355.imageshack.us/img355/4787 ... iospi0.png

Sehr auffallend sind die folgenden Einträge in der debug-Logdatei:

Code: Select all

Dec 21 09:17:10 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 62.x.x.x:1504/80 shrinks window 778759316:778759317. Repaired.
Dec 21 09:17:17 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 62.x.x.x:1789/80 shrinks window 798298466:798298467. Repaired.
Dec 21 09:17:17 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 62.x.x.x:3471/80 shrinks window 790425174:790425175. Repaired.
Dec 21 15:10:32 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 84.x.x.x:1883/80 shrinks window 1701932449:1701941161. Repaired.
Dec 21 15:10:32 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 84.x.x.x:1883/80 shrinks window 1701932449:1701941161. Repaired.
Dec 22 16:49:38 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:9526/80 shrinks window 425085647:425085648. Repaired.
Dec 22 18:05:23 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 62.x.x.x:17196/80 shrinks window 925880726:925900216. Repaired.
Dec 23 14:51:48 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 83.x.x.x:54007/80 shrinks window 2580778532:2580788752. Repaired.
Dec 23 14:51:48 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 83.x.x.x:54007/80 shrinks window 2580778532:2580788752. Repaired.
Dec 23 15:45:19 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:43517/80 shrinks window 1687619226:1687619227. Repaired.
Dec 23 15:45:20 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:43517/80 shrinks window 1687619226:1687619227. Repaired.
Dec 23 16:14:53 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:6542/80 shrinks window 3555723764:3555723765. Repaired.
Dec 23 16:14:53 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:6542/80 shrinks window 3555723764:3555723765. Repaired.
Dec 24 13:36:12 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:47991/80 shrinks window 1732493035:1732493036. Repaired.
Dec 24 15:57:31 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 213.x.x.x:36789/80 shrinks window 2119047946:2119047947. Repaired.
Dec 24 15:57:33 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 213.x.x.x:36793/80 shrinks window 2110464570:2110464571. Repaired.
Dec 24 15:57:34 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 213.x.x.x:36793/80 shrinks window 2110464570:2110464571. Repaired.
Dec 25 14:56:23 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:15181/80 shrinks window 2033508682:2033508683. Repaired.
Dec 25 18:17:44 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 79.x.x.x:59831/80 shrinks window 1890610928:1890622608. Repaired.
Dec 25 18:17:45 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 79.x.x.x:59831/80 shrinks window 1890610928:1890622608. Repaired.
Dec 25 18:17:48 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 79.x.x.x:59831/80 shrinks window 1890642420:1890647428. Repaired.
Dec 25 18:17:48 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 79.x.x.x:59831/80 shrinks window 1890642420:1890647428. Repaired.
Dec 25 18:46:14 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:39650/80 shrinks window 3709796403:3709796404. Repaired.
Dec 25 18:46:21 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:39765/80 shrinks window 3724824216:3724824217. Repaired.
Dec 25 18:46:22 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:39765/80 shrinks window 3724824216:3724824217. Repaired.
Dec 25 18:47:44 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:40761/80 shrinks window 3818172821:3818172822. Repaired.
Dec 26 09:11:54 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:14694/80 shrinks window 2960015309:2960015310. Repaired.
Dec 26 10:40:53 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:1558/80 shrinks window 797506177:797506178. Repaired.
Dec 26 10:41:00 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:1691/80 shrinks window 909075209:909075210. Repaired.
Dec 26 10:41:01 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:1691/80 shrinks window 909075209:909075210. Repaired.
Dec 26 10:41:20 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:1943/80 shrinks window 1204492957:1204492958. Repaired.
Dec 26 10:42:04 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:2492/80 shrinks window 1894954262:1894954263. Repaired.
Dec 26 11:03:28 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:17946/80 shrinks window 551856809:551856810. Repaired.
Dec 26 11:03:50 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:18249/80 shrinks window 887409600:887409601. Repaired.
Dec 26 11:04:02 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:18478/80 shrinks window 1080094182:1080094183. Repaired.
Dec 26 11:05:02 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:19242/80 shrinks window 2030572399:2030572458. Repaired.
Dec 26 13:06:34 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:7991/80 shrinks window 416509397:416509398. Repaired.
Dec 26 13:06:46 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:8174/80 shrinks window 591597307:591597308. Repaired.
Dec 26 13:07:31 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:9008/80 shrinks window 1295149236:1295149237. Repaired.
Dec 26 13:07:45 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:9226/80 shrinks window 1520411146:1520411147. Repaired.
Dec 26 13:14:08 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:16889/80 shrinks window 3240028258:3240028259. Repaired.
Dec 26 13:14:09 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:16889/80 shrinks window 3240028258:3240028259. Repaired.
Dec 26 13:14:58 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:17700/80 shrinks window 4021252216:4021252217. Repaired.
Dec 26 13:14:58 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:17700/80 shrinks window 4021252216:4021252217. Repaired.
Dec 26 13:15:21 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:18242/80 shrinks window 82182168:82182169. Repaired.
Dec 26 13:15:47 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:18659/80 shrinks window 490936480:490936481. Repaired.
Dec 26 13:23:35 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:25573/80 shrinks window 3517048142:3517048143. Repaired.
Dec 26 13:23:50 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:25852/80 shrinks window 3771756139:3771756140. Repaired.
Dec 26 15:18:06 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:6736/80 shrinks window 3902873668:3902873669. Repaired.
Dec 26 15:18:18 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:6914/80 shrinks window 4081435627:4081435628. Repaired.
Dec 26 15:22:46 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:10548/80 shrinks window 3971232077:3971232078. Repaired.
Dec 26 15:22:47 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:10548/80 shrinks window 3971232077:3971232078. Repaired.
Dec 26 20:06:06 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:32339/80 shrinks window 4291052095:4291052096. Repaired.
Dec 26 20:44:28 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:9950/80 shrinks window 1722538694:1722538695. Repaired.
Dec 26 20:46:54 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:12284/80 shrinks window 3999756180:3999756181. Repaired.
Dec 26 20:47:53 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:13571/80 shrinks window 624875945:624875946. Repaired.


Die messages-Log:

Code: Select all

Dec 23 00:00:17 Debian-40-etch-64-minimal kernel: oom-killer: gfp_mask=0x201d2, order=0
Dec 23 00:00:18 Debian-40-etch-64-minimal kernel:
Dec 23 00:00:18 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff802a6691>] out_of_memory+0x33/0x216
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8020e00e>] __alloc_pages+0x220/0x2a9
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80210db1>] __do_page_cache_readahead+0x95/0x206
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80226841>] sync_page+0x0/0x42
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8025cab3>] io_schedule+0x28/0x33
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80226841>] sync_page+0x0/0x42
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8025cd4a>] __wait_on_bit_lock+0x5b/0x66
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8023d72f>] __lock_page+0x5e/0x64
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff802116ed>] filemap_nopage+0x148/0x314
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80208718>] __handle_mm_fault+0x375/0x91a
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8020a69c>] do_page_fault+0x39d/0x706
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80218b5c>] remove_vma+0x55/0x5c
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8020fe40>] do_munmap+0x258/0x27a
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8022e0ab>] __up_write+0x21/0x10d
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff802588a5>] error_exit+0x0/0x84
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Mem-info:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA per-cpu:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 0, batch 1 used:0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 0, batch 1 used:0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 0, batch 1 used:0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 0, batch 1 used:0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA32 per-cpu:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 186, batch 31 used:31
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 62, batch 15 used:14
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 186, batch 31 used:8
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 62, batch 15 used:51
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 Normal per-cpu:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 186, batch 31 used:26
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 62, batch 15 used:14
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 186, batch 31 used:6
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 62, batch 15 used:47
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 HighMem per-cpu: empty
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Free pages:       42380kB (0kB HighMem)
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Active:1056530 inactive:936672 dirty:0 writeback:0 unstable:0 free:10595 slab:7586 mapped:102 pagetables:20350
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA free:12580kB min:8kB low:8kB high:12kB active:0kB inactive:0kB present:6524kB pages_scanned:0 all_unreclaimable? yes
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 3480 8025 8025
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA32 free:23120kB min:4968kB low:6208kB high:7452kB active:2718448kB inactive:765052kB present:3563552kB pages_scanned:4252526 all_unreclaimable? yes
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 4545 4545
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 Normal free:6740kB min:6488kB low:8108kB high:9732kB active:1770820kB inactive:2718340kB present:4654080kB pages_scanned:57408 all_unreclaimable? no
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 0 0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 HighMem free:0kB min:128kB low:128kB high:128kB active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 0 0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA: 5*4kB 6*8kB 4*16kB 3*32kB 3*64kB 3*128kB 2*256kB 2*512kB 0*1024kB 1*2048kB 2*4096kB = 12580kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA32: 14*4kB 1*8kB 3*16kB 1*32kB 1*64kB 1*128kB 1*256kB 0*512kB 0*1024kB 1*2048kB 5*4096kB = 23120kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 Normal: 88*4kB 12*8kB 5*16kB 0*32kB 0*64kB 1*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB 1*4096kB = 6800kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 HighMem: empty
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Swap cache: add 37570223, delete 37570220, find 42581899/46967136, race 19+784
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Free swap  = 4kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Total swap = 2097140kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Free swap:            0kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 2228224 pages of RAM
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 190259 reserved pages
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 1472 pages shared
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 3 pages swap cached
Dec 23 00:00:34 Debian-40-etch-64-minimal kernel: oom-killer: gfp_mask=0x200d2, order=0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802a6691>] out_of_memory+0x33/0x216
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8020e00e>] __alloc_pages+0x220/0x2a9
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802303c7>] read_swap_cache_async+0x49/0xe6
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802aae8e>] swapin_readahead+0x60/0xd3
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802089e4>] __handle_mm_fault+0x641/0x91a
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8020a69c>] do_page_fault+0x39d/0x706
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802588a5>] error_exit+0x0/0x84
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8025b7c0>] __put_user_4+0x20/0x30
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80232d58>] mm_release+0x66/0x8e
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8023dc69>] exit_mm+0x16/0xf5
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8021353d>] do_exit+0x220/0x8ae
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80244f8a>] cpuset_exit+0x0/0x6c
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80229578>] get_signal_to_deliver+0x46e/0x49d
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80227fdf>] do_signal+0x55/0x751
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8027c991>] default_wake_function+0x0/0xe
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8028fa95>] autoremove_wake_function+0x0/0x2e
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8025c33e>] thread_return+0x0/0xe7
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80292fc9>] sys_futex+0x102/0x124
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80257c5f>] sysret_signal+0x1c/0x27
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80257ee3>] ptregscall_common+0x67/0xac
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Mem-info:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA per-cpu:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 0, batch 1 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 0, batch 1 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 0, batch 1 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 0, batch 1 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA32 per-cpu:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 186, batch 31 used:30
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 62, batch 15 used:52
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 186, batch 31 used:30
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 62, batch 15 used:61
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 Normal per-cpu:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 186, batch 31 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 62, batch 15 used:31
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 186, batch 31 used:30
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 62, batch 15 used:3
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 HighMem per-cpu: empty
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Free pages:       42356kB (0kB HighMem)
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Active:998973 inactive:994111 dirty:0 writeback:0 unstable:0 free:10589 slab:7524 mapped:56 pagetables:20377
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA free:12580kB min:8kB low:8kB high:12kB active:0kB inactive:0kB present:6524kB pages_scanned:0 all_unreclaimable? yes
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 3480 8025 8025
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA32 free:23172kB min:4968kB low:6208kB high:7452kB active:1744736kB inactive:1738212kB present:3563552kB pages_scanned:53668 all_unreclaimable? no
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 4545 4545
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 Normal free:6480kB min:6488kB low:8108kB high:9732kB active:2250264kB inactive:2239548kB present:4654080kB pages_scanned:567007 all_unreclaimable? no
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 0 0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 HighMem free:0kB min:128kB low:128kB high:128kB active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 0 0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA: 5*4kB 6*8kB 4*16kB 3*32kB 3*64kB 3*128kB 2*256kB 2*512kB 0*1024kB 1*2048kB 2*4096kB = 12580kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA32: 27*4kB 3*8kB 2*16kB 1*32kB 1*64kB 1*128kB 1*256kB 0*512kB 0*1024kB 1*2048kB 5*4096kB = 23172kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 Normal: 0*4kB 20*8kB 3*16kB 0*32kB 0*64kB 1*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB 1*4096kB = 6480kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 HighMem: empty
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Swap cache: add 37570723, delete 37570608, find 42581931/46967227, race 19+787
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Free swap  = 0kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Total swap = 2097140kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Free swap:            0kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 2228224 pages of RAM
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 190259 reserved pages
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 738 pages shared
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 115 pages swap cached
Dec 23 00:21:57 Debian-40-etch-64-minimal -- MARK --
Dec 23 00:41:57 Debian-40-etch-64-minimal -- MARK --
Dec 23 01:01:57 Debian-40-etch-64-minimal -- MARK --
Dec 23 01:21:57 Debian-40-etch-64-minimal -- MARK --
Dec 23 01:41:58 Debian-40-etch-64-minimal -- MARK --
Dec 23 02:01:58 Debian-40-etch-64-minimal -- MARK --
Dec 23 02:18:50 Debian-40-etch-64-minimal kernel: vhcs2-vrl-traff[25165]: segfault at 0000000000000019 rip 00002b5350f5a1a5 rsp 00007fff5a29fc40 error 4
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: ----------- [cut here ] --------- [please bite here ] ---------
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: CPU 1
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Modules linked in: xt_tcpudp iptable_filter ip_tables x_tables cpufreq_ondemand button ac battery ipv6 loop i2c_piix4 serio_raw i2c_core psmouse shpchp pci_hotplug evdev pcspkr dm_mirror dm_snapshot dm_mod raid10 raid456 xor multipath linear ide_generic ehci_hcd r8169 ohci_hcd sd_mod thermal fan powernow_k8 freq_table processor raid1 raid0 md_mod atiixp ahci sata_nv sata_sil sata_via libata via82cxxx ide_core 3w_9xxx 3w_xxxx scsi_mod xfs ext3 jbd ext2 mbcache reiserfs
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Pid: 25165, comm: vhcs2-vrl-traff Not tainted 2.6.18-5-amd64 #1
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RIP: 0010:[<ffffffff8020aa18>]  [<ffffffff8020aa18>] page_remove_rmap+0x13/0x2c
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RSP: 0018:ffff81010b171c30  EFLAGS: 00010286
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RAX: 00000000ffffffff RBX: ffff81021f72d760 RCX: 000000000000003f
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RDX: 0000000000000001 RSI: 80000001f7ab4067 RDI: ffff81021f72d760
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RBP: 00000000f7ab4020 R08: ffff81021d614f58 R09: ffff810000012800
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 000000015eaea000
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: R13: ffff810192410750 R14: ffff81000103c2a0 R15: 000000015ec00000
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: FS:  00002b5351260ae0(0000) GS:ffff810218894ac0(0000) knlGS:0000000000000000
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: CR2: 000000000041c410 CR3: 00000002004e0000 CR4: 00000000000006e0
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Process vhcs2-vrl-traff (pid: 25165, threadinfo ffff81010b170000, task ffff8101bd28d040)
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Stack:  ffffffff80207a3f 0000000000000000 ffff81010b171d08 ffffffffffffffff
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  0000000000000000 ffff8101629c5c38 ffff81010b171d10 0000000000000000
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  00000001165f3500 00000001bb172000 ffff8101ee94e000 ffff8101629c3028
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80207a3f>] unmap_vmas+0x3f4/0x713
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff802378d8>] exit_mmap+0x76/0xf1
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff8023998f>] mmput+0x28/0x98
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff8021353d>] do_exit+0x220/0x8ae
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80244f8a>] cpuset_exit+0x0/0x6c
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80229578>] get_signal_to_deliver+0x46e/0x49d
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80227fdf>] do_signal+0x55/0x751
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80288678>] signal_wake_up+0x1e/0x2d
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80289171>] specific_send_sig_info+0xa1/0xac
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff802893ea>] force_sig_info+0xa7/0xb1
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff8025c33e>] thread_return+0x0/0xe7
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff8025c33e>] thread_return+0x0/0xe7
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80258198>] retint_signal+0x3d/0x79
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Code: 0f 0b 68 47 92 40 80 c2 0a 02 8b 77 18 83 f6 01 83 e6 01 e9
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  RSP <ffff81010b171c30>
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  <1>Fixing recursive fault but reboot is needed!
[...]
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: CPU 1
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Modules linked in: xt_TCPMSS iptable_mangle ipt_LOG nf_conntrack_ipv4 xt_state xt_connlimit nf_conntrack xt_limit xt_tcpudp iptable_filter ip_tables x_tables cpufreq_ondemand ac battery ipv6 loop snd_hda_intel snd_pcm snd_timer snd soundcore snd_page_alloc shpchp i2c_piix4 k8temp button pci_hotplug i2c_core pcspkr evdev dm_mirror dm_snapshot dm_mod raid10 raid456 async_xor async_memcpy async_tx xor multipath linear ide_generic ehci_hcd ohci_hcd r8169 sd_mod thermal fan powernow_k8 freq_table processor raid1 raid0 md_mod atiixp ahci sata_nv sata_sil sata_via libata via82cxxx ide_core 3w_9xxx 3w_xxxx scsi_mod xfs ext3 jbd ext2 mbcache reiserfs
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Pid: 16641, comm: apache2 Not tainted 2.6.24-etchnhalf.1-amd64 #1
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RIP: 0010:[<ffffffff80286828>]  [<ffffffff80286828>] page_remove_rmap+0x104/0x120
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RSP: 0000:ffff8101b65c1c28  EFLAGS: 00010246
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RAX: 0000000000000000 RBX: ffff81021dcc2538 RCX: 00000000000128c6
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RDX: 00000000ffffff01 RSI: ffff81019783b750 RDI: ffffffff804e0a60
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RBP: ffff8101a3921e48 R08: 0000000000000000 R09: 0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: R10: 0000000000004000 R11: 000001007fffffff R12: 00002b2fc36ea000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: R13: ffff81019783b750 R14: ffff81000103b640 R15: 00002b2fc3786000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: FS:  00002b2fc5dd65c0(0000) GS:ffff8102178809c0(0000) knlGS:0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: CR2: 00002b2fc9504000 CR3: 0000000000201000 CR4: 00000000000006e0
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Process apache2 (pid: 16641, threadinfo ffff8101b65c0000, task ffff810215266580)
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Stack:  ffff8102089c1b80 ffff81021dcc2538 000000007ee61020 ffffffff8027f469
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  0000000000000000 ffff8101b65c1d18 ffffffffffffffff 0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  ffff8101a3921e48 ffff8101b65c1d20 0000000000041f57 0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff8027f469>] unmap_vmas+0x420/0x743
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80282dd2>] exit_mmap+0x76/0xeb
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80233491>] mmput+0x2c/0x9d
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80238bc0>] do_exit+0x25f/0x796
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80239176>] sys_exit_group+0x0/0xe
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff802413a0>] get_signal_to_deliver+0x433/0x461
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff8020b399>] do_notify_resume+0xa8/0x725
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80414c0b>] thread_return+0x3d/0xab
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff8029b99c>] sys_newlstat+0x28/0x31
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff804164b4>] paranoid_userspace1+0x3b/0x3e
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Code: 0f 0b eb fe 8b 77 18 41 58 5b 5d 83 e6 01 f7 de 83 c6 04 e9
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  RSP <ffff8101b65c1c28>
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: ---[ end trace f1cc226fbf9a24e6 ]---
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel: Pid: 17154, comm: apache2 Tainted: G      D 2.6.24-etchnhalf.1-amd64 #1
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff802757db>] bad_page+0x63/0x8d
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff80276d91>] get_page_from_freelist+0x3ed/0x5d1
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff80277145>] __alloc_pages+0x66/0x309
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff8027ff06>] handle_mm_fault+0x211/0x6d8
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff802235ea>] do_page_fault+0x358/0x702
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff80283c01>] vma_merge+0x147/0x1f4
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff802841cc>] do_brk+0x1d6/0x288
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff80312f7b>] __up_write+0x21/0x10e
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff804162c9>] error_exit+0x0/0x51
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:
Dec 26 18:29:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 18:31:48 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=785 TOS=0x00 PREC=0x00 TTL=118 ID=11597 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK PSH URGP=0
Dec 26 18:31:53 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=11621 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK URGP=0
Dec 26 18:31:55 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=785 TOS=0x00 PREC=0x00 TTL=118 ID=11628 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK PSH URGP=0
Dec 26 18:31:59 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=11642 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK URGP=0
Dec 26 18:32:05 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=785 TOS=0x00 PREC=0x00 TTL=118 ID=11679 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK PSH URGP=0
Dec 26 18:32:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=11708 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK URGP=0
Dec 26 18:32:29 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=785 TOS=0x00 PREC=0x00 TTL=118 ID=11812 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK PSH URGP=0
Dec 26 18:49:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 19:09:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 19:13:25 Debian-40-etch-64-minimal kernel: possible SYN flooding on port 80. Sending cookies.
Dec 26 19:14:31 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13026 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:14:31 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13027 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:14:32 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13028 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:14:33 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=13035 PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 19:14:34 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=13036 PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 19:14:34 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=13037 PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 19:14:36 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13039 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:14:39 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13042 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:14:40 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=13043 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 19:19:13 Debian-40-etch-64-minimal kernel: possible SYN flooding on port 80. Sending cookies.
Dec 26 19:19:14 Debian-40-etch-64-minimal kernel: TCPv6: dropping request, synflood is possible
Dec 26 19:19:17 Debian-40-etch-64-minimal kernel: TCPv6: dropping request, synflood is possible
Dec 26 19:20:37 Debian-40-etch-64-minimal kernel: possible SYN flooding on port 80. Sending cookies.
Dec 26 19:20:39 Debian-40-etch-64-minimal kernel: TCPv6: dropping request, synflood is possible
Dec 26 19:44:03 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=91.x.x.x DST=88.x.x.x LEN=439 TOS=0x00 PREC=0x00 TTL=114 ID=12052 DF PROTO=TCP SPT=63763 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0
Dec 26 19:44:03 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=91.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=12057 DF PROTO=TCP SPT=63763 DPT=80 WINDOW=17520 RES=0x00 ACK URGP=0
Dec 26 19:44:05 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=91.x.x.x DST=88.x.x.x LEN=439 TOS=0x00 PREC=0x00 TTL=114 ID=12144 DF PROTO=TCP SPT=63763 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0
Dec 26 19:44:07 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=91.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=12198 DF PROTO=TCP SPT=63763 DPT=80 WINDOW=17520 RES=0x00 ACK URGP=0
Dec 26 19:59:00 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=901 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:59:01 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=902 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:59:02 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=903 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:59:03 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=905 PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 19:59:04 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=906 PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 19:59:05 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=907 PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 19:59:07 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=910 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:59:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=930 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:59:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=940 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 19:59:17 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=986 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 19:59:22 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=1009 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 20:09:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 20:29:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 20:49:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 21:08:12 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=859 TOS=0x00 PREC=0x00 TTL=115 ID=14475 DF PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 21:08:13 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=859 TOS=0x00 PREC=0x00 TTL=115 ID=14476 DF PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 21:08:15 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=859 TOS=0x00 PREC=0x00 TTL=115 ID=14477 DF PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 21:08:17 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=14494 PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 21:08:18 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=14502 PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 21:08:21 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=14529 PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 21:08:23 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=14542 PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0
Dec 26 21:08:24 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=859 TOS=0x00 PREC=0x00 TTL=115 ID=14548 DF PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0
Dec 26 21:20:07 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=194.x.x.x DST=88.x.x.x LEN=792 TOS=0x00 PREC=0x00 TTL=121 ID=749 DF PROTO=TCP SPT=1152 DPT=80 WINDOW=32850 RES=0x00 ACK PSH URGP=0
Dec 26 21:20:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=194.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=819 DF PROTO=TCP SPT=1152 DPT=80 WINDOW=32850 RES=0x00 ACK URGP=0
Dec 26 21:20:14 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=194.x.x.x DST=88.x.x.x LEN=792 TOS=0x00 PREC=0x00 TTL=121 ID=873 DF PROTO=TCP SPT=1152 DPT=80 WINDOW=32850 RES=0x00 ACK PSH URGP=0
Dec 26 21:20:17 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=194.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=946 DF PROTO=TCP SPT=1152 DPT=80 WINDOW=32850 RES=0x00 ACK URGP=0
Dec 26 21:49:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 22:05:57 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40546 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0
Dec 26 22:06:01 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=116 ID=40549 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK URGP=0
Dec 26 22:06:04 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40550 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0
Dec 26 22:06:13 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=116 ID=40551 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK URGP=0
Dec 26 22:06:16 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40552 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0
Dec 26 22:06:40 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40557 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0
Dec 26 22:07:28 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40599 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0
Dec 26 22:29:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 22:49:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 23:09:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 23:29:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 23:38:09 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15887 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0
Dec 26 23:38:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15892 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0
Dec 26 23:38:11 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15906 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0
Dec 26 23:38:12 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=15925 PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0
Dec 26 23:38:13 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=15930 PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0
Dec 26 23:38:14 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=15940 PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0
Dec 26 23:38:15 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15966 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0
Dec 26 23:38:18 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15973 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0
Dec 26 23:38:19 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=15974 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0
Dec 26 23:38:27 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15976 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0
Dec 26 23:38:31 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=16078 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0

Roger Wilco
Administrator
Administrator
Posts: 6001
Joined: 2004-05-23 12:53

Re: Apache down

Post by Roger Wilco » 2008-12-27 16:05

Doh! wrote:

Code: Select all

Dec 23 00:00:17 Debian-40-etch-64-minimal kernel: oom-killer: gfp_mask=0x201d2, order=0
[...]
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff802a6691>] out_of_memory+0x33/0x216
[...]
Dec 23 00:00:34 Debian-40-etch-64-minimal kernel: oom-killer: gfp_mask=0x200d2, order=0

Deinem System geht der Speicher aus und der Kernel (bzw. der OOM-Killer) beginnt, Prozesse nach ihrem Score zu beenden. Irgendein Programm läuft bei dir Amok und reserviert allmählich den gesamten Speicher.

dohǃ
Posts: 23
Joined: 2005-09-15 23:52

Re: Apache down

Post by dohǃ » 2008-12-27 16:36

Diese vielen "TCP: Treason uncloaked!"-Meldungen können auf eine Tar-Pit-Attacke hinweisen. Hab soeben versucht, window scaling zu deaktivieren, vl. hilfts:

Code: Select all

echo 0 > /proc/sys/net/ipv4/tcp_window_scaling 


This is problem someone is running some sort of "tar-pit" system that is
designed to keep sockets in a bad state and run you out of kernel memory.

https://www.redhat.com/archives/redhat- ... 00311.html

oxygen
RSAC
Posts: 2179
Joined: 2002-12-15 00:10
Location: Bergheim

Re: Apache down

Post by oxygen » 2008-12-28 20:40

Eine einfache Möglichkeit solchen out-of-memory kills entgegenzuwirken ist es den swap zu vergrößern und vm.oom_kill_allocating_task auf 1 zu setzten. Das verhindert zwar nicht DoS Angriffe auf deinen Server, aber sorgt dafür dass er länger durchhält.