Page 1 of 1

Apache down

Posted: 2008-12-27 15:48
by dohǃ
Hallo,

seit einigen Tagen macht Apache mindestens einmal pro Tag schlapp (der Rechner ist anpingbar), erst nach einen Neustart kann ich mich wieder via SSH einloggen. Bin mir nicht sicher, woran´s liegt und wie ich mit der Warnung "Treason uncloaked!" umgehen soll. Die message-Log-Datei zeigt an, dass Scans durchgeführt werden und es mögliche SYN Floods geben kann. Vl. erzeugen ja diese den Speicherüberlauf...

Tcp_syncookies: echo 1 > /proc/sys/net/ipv4/tcp_syncookies
Linux System mit aktuellster Software: Linux localhost 2.6.24-etchnhalf.1-amd64 #1 SMP Tue Dec 2 17:21:26 UTC 2008 x86_64 GNU/Linux
Munin swap: http://img244.imageshack.us/img244/2840 ... swaku2.png
Munin entropy: http://img166.imageshack.us/img166/886/ ... iosfe5.png
Munin iostat: http://img355.imageshack.us/img355/4787 ... iospi0.png

Sehr auffallend sind die folgenden Einträge in der debug-Logdatei:

Code: Select all

Dec 21 09:17:10 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 62.x.x.x:1504/80 shrinks window 778759316:778759317. Repaired.
Dec 21 09:17:17 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 62.x.x.x:1789/80 shrinks window 798298466:798298467. Repaired.
Dec 21 09:17:17 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 62.x.x.x:3471/80 shrinks window 790425174:790425175. Repaired.
Dec 21 15:10:32 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 84.x.x.x:1883/80 shrinks window 1701932449:1701941161. Repaired.
Dec 21 15:10:32 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 84.x.x.x:1883/80 shrinks window 1701932449:1701941161. Repaired.
Dec 22 16:49:38 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:9526/80 shrinks window 425085647:425085648. Repaired.
Dec 22 18:05:23 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 62.x.x.x:17196/80 shrinks window 925880726:925900216. Repaired.
Dec 23 14:51:48 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 83.x.x.x:54007/80 shrinks window 2580778532:2580788752. Repaired.
Dec 23 14:51:48 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 83.x.x.x:54007/80 shrinks window 2580778532:2580788752. Repaired.
Dec 23 15:45:19 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:43517/80 shrinks window 1687619226:1687619227. Repaired.
Dec 23 15:45:20 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:43517/80 shrinks window 1687619226:1687619227. Repaired.
Dec 23 16:14:53 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:6542/80 shrinks window 3555723764:3555723765. Repaired.
Dec 23 16:14:53 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:6542/80 shrinks window 3555723764:3555723765. Repaired.
Dec 24 13:36:12 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:47991/80 shrinks window 1732493035:1732493036. Repaired.
Dec 24 15:57:31 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 213.x.x.x:36789/80 shrinks window 2119047946:2119047947. Repaired.
Dec 24 15:57:33 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 213.x.x.x:36793/80 shrinks window 2110464570:2110464571. Repaired.
Dec 24 15:57:34 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 213.x.x.x:36793/80 shrinks window 2110464570:2110464571. Repaired.
Dec 25 14:56:23 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:15181/80 shrinks window 2033508682:2033508683. Repaired.
Dec 25 18:17:44 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 79.x.x.x:59831/80 shrinks window 1890610928:1890622608. Repaired.
Dec 25 18:17:45 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 79.x.x.x:59831/80 shrinks window 1890610928:1890622608. Repaired.
Dec 25 18:17:48 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 79.x.x.x:59831/80 shrinks window 1890642420:1890647428. Repaired.
Dec 25 18:17:48 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 79.x.x.x:59831/80 shrinks window 1890642420:1890647428. Repaired.
Dec 25 18:46:14 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:39650/80 shrinks window 3709796403:3709796404. Repaired.
Dec 25 18:46:21 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:39765/80 shrinks window 3724824216:3724824217. Repaired.
Dec 25 18:46:22 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:39765/80 shrinks window 3724824216:3724824217. Repaired.
Dec 25 18:47:44 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:40761/80 shrinks window 3818172821:3818172822. Repaired.
Dec 26 09:11:54 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:14694/80 shrinks window 2960015309:2960015310. Repaired.
Dec 26 10:40:53 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:1558/80 shrinks window 797506177:797506178. Repaired.
Dec 26 10:41:00 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:1691/80 shrinks window 909075209:909075210. Repaired.
Dec 26 10:41:01 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:1691/80 shrinks window 909075209:909075210. Repaired.
Dec 26 10:41:20 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:1943/80 shrinks window 1204492957:1204492958. Repaired.
Dec 26 10:42:04 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:2492/80 shrinks window 1894954262:1894954263. Repaired.
Dec 26 11:03:28 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:17946/80 shrinks window 551856809:551856810. Repaired.
Dec 26 11:03:50 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:18249/80 shrinks window 887409600:887409601. Repaired.
Dec 26 11:04:02 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:18478/80 shrinks window 1080094182:1080094183. Repaired.
Dec 26 11:05:02 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:19242/80 shrinks window 2030572399:2030572458. Repaired.
Dec 26 13:06:34 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:7991/80 shrinks window 416509397:416509398. Repaired.
Dec 26 13:06:46 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:8174/80 shrinks window 591597307:591597308. Repaired.
Dec 26 13:07:31 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:9008/80 shrinks window 1295149236:1295149237. Repaired.
Dec 26 13:07:45 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:9226/80 shrinks window 1520411146:1520411147. Repaired.
Dec 26 13:14:08 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:16889/80 shrinks window 3240028258:3240028259. Repaired.
Dec 26 13:14:09 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:16889/80 shrinks window 3240028258:3240028259. Repaired.
Dec 26 13:14:58 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:17700/80 shrinks window 4021252216:4021252217. Repaired.
Dec 26 13:14:58 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:17700/80 shrinks window 4021252216:4021252217. Repaired.
Dec 26 13:15:21 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:18242/80 shrinks window 82182168:82182169. Repaired.
Dec 26 13:15:47 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:18659/80 shrinks window 490936480:490936481. Repaired.
Dec 26 13:23:35 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:25573/80 shrinks window 3517048142:3517048143. Repaired.
Dec 26 13:23:50 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:25852/80 shrinks window 3771756139:3771756140. Repaired.
Dec 26 15:18:06 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:6736/80 shrinks window 3902873668:3902873669. Repaired.
Dec 26 15:18:18 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:6914/80 shrinks window 4081435627:4081435628. Repaired.
Dec 26 15:22:46 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:10548/80 shrinks window 3971232077:3971232078. Repaired.
Dec 26 15:22:47 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:10548/80 shrinks window 3971232077:3971232078. Repaired.
Dec 26 20:06:06 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:32339/80 shrinks window 4291052095:4291052096. Repaired.
Dec 26 20:44:28 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:9950/80 shrinks window 1722538694:1722538695. Repaired.
Dec 26 20:46:54 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:12284/80 shrinks window 3999756180:3999756181. Repaired.
Dec 26 20:47:53 Debian-40-etch-64-minimal kernel: TCP: Treason uncloaked! Peer 88.x.x.x:13571/80 shrinks window 624875945:624875946. Repaired.
Die messages-Log:

Code: Select all

Dec 23 00:00:17 Debian-40-etch-64-minimal kernel: oom-killer: gfp_mask=0x201d2, order=0
Dec 23 00:00:18 Debian-40-etch-64-minimal kernel: 
Dec 23 00:00:18 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff802a6691>] out_of_memory+0x33/0x216
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8020e00e>] __alloc_pages+0x220/0x2a9
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80210db1>] __do_page_cache_readahead+0x95/0x206
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80226841>] sync_page+0x0/0x42
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8025cab3>] io_schedule+0x28/0x33
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80226841>] sync_page+0x0/0x42
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8025cd4a>] __wait_on_bit_lock+0x5b/0x66
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8023d72f>] __lock_page+0x5e/0x64
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff802116ed>] filemap_nopage+0x148/0x314
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80208718>] __handle_mm_fault+0x375/0x91a
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8020a69c>] do_page_fault+0x39d/0x706
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff80218b5c>] remove_vma+0x55/0x5c
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8020fe40>] do_munmap+0x258/0x27a
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff8022e0ab>] __up_write+0x21/0x10d
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff802588a5>] error_exit+0x0/0x84
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Mem-info:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA per-cpu:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 0, batch 1 used:0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 0, batch 1 used:0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 0, batch 1 used:0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 0, batch 1 used:0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA32 per-cpu:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 186, batch 31 used:31
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 62, batch 15 used:14
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 186, batch 31 used:8
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 62, batch 15 used:51
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 Normal per-cpu:
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 186, batch 31 used:26
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 62, batch 15 used:14
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 186, batch 31 used:6
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 62, batch 15 used:47
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 HighMem per-cpu: empty
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Free pages:       42380kB (0kB HighMem)
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Active:1056530 inactive:936672 dirty:0 writeback:0 unstable:0 free:10595 slab:7586 mapped:102 pagetables:20350
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA free:12580kB min:8kB low:8kB high:12kB active:0kB inactive:0kB present:6524kB pages_scanned:0 all_unreclaimable? yes
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 3480 8025 8025
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA32 free:23120kB min:4968kB low:6208kB high:7452kB active:2718448kB inactive:765052kB present:3563552kB pages_scanned:4252526 all_unreclaimable? yes
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 4545 4545
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 Normal free:6740kB min:6488kB low:8108kB high:9732kB active:1770820kB inactive:2718340kB present:4654080kB pages_scanned:57408 all_unreclaimable? no
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 0 0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 HighMem free:0kB min:128kB low:128kB high:128kB active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 0 0
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA: 5*4kB 6*8kB 4*16kB 3*32kB 3*64kB 3*128kB 2*256kB 2*512kB 0*1024kB 1*2048kB 2*4096kB = 12580kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 DMA32: 14*4kB 1*8kB 3*16kB 1*32kB 1*64kB 1*128kB 1*256kB 0*512kB 0*1024kB 1*2048kB 5*4096kB = 23120kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 Normal: 88*4kB 12*8kB 5*16kB 0*32kB 0*64kB 1*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB 1*4096kB = 6800kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Node 0 HighMem: empty
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Swap cache: add 37570223, delete 37570220, find 42581899/46967136, race 19+784
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Free swap  = 4kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Total swap = 2097140kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: Free swap:            0kB
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 2228224 pages of RAM
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 190259 reserved pages
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 1472 pages shared
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel: 3 pages swap cached
Dec 23 00:00:34 Debian-40-etch-64-minimal kernel: oom-killer: gfp_mask=0x200d2, order=0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802a6691>] out_of_memory+0x33/0x216
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8020e00e>] __alloc_pages+0x220/0x2a9
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802303c7>] read_swap_cache_async+0x49/0xe6
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802aae8e>] swapin_readahead+0x60/0xd3
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802089e4>] __handle_mm_fault+0x641/0x91a
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8020a69c>] do_page_fault+0x39d/0x706
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff802588a5>] error_exit+0x0/0x84
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8025b7c0>] __put_user_4+0x20/0x30
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80232d58>] mm_release+0x66/0x8e
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8023dc69>] exit_mm+0x16/0xf5
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8021353d>] do_exit+0x220/0x8ae
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80244f8a>] cpuset_exit+0x0/0x6c
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80229578>] get_signal_to_deliver+0x46e/0x49d
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80227fdf>] do_signal+0x55/0x751
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8027c991>] default_wake_function+0x0/0xe
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8028fa95>] autoremove_wake_function+0x0/0x2e
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff8025c33e>] thread_return+0x0/0xe7
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80292fc9>] sys_futex+0x102/0x124
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80257c5f>] sysret_signal+0x1c/0x27
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel:  [<ffffffff80257ee3>] ptregscall_common+0x67/0xac
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Mem-info:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA per-cpu:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 0, batch 1 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 0, batch 1 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 0, batch 1 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 0, batch 1 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA32 per-cpu:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 186, batch 31 used:30
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 62, batch 15 used:52
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 186, batch 31 used:30
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 62, batch 15 used:61
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 Normal per-cpu:
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 hot: high 186, batch 31 used:0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 0 cold: high 62, batch 15 used:31
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 hot: high 186, batch 31 used:30
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: cpu 1 cold: high 62, batch 15 used:3
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 HighMem per-cpu: empty
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Free pages:       42356kB (0kB HighMem)
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Active:998973 inactive:994111 dirty:0 writeback:0 unstable:0 free:10589 slab:7524 mapped:56 pagetables:20377
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA free:12580kB min:8kB low:8kB high:12kB active:0kB inactive:0kB present:6524kB pages_scanned:0 all_unreclaimable? yes
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 3480 8025 8025
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA32 free:23172kB min:4968kB low:6208kB high:7452kB active:1744736kB inactive:1738212kB present:3563552kB pages_scanned:53668 all_unreclaimable? no
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 4545 4545
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 Normal free:6480kB min:6488kB low:8108kB high:9732kB active:2250264kB inactive:2239548kB present:4654080kB pages_scanned:567007 all_unreclaimable? no
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 0 0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 HighMem free:0kB min:128kB low:128kB high:128kB active:0kB inactive:0kB present:0kB pages_scanned:0 all_unreclaimable? no
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: lowmem_reserve[]: 0 0 0 0
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA: 5*4kB 6*8kB 4*16kB 3*32kB 3*64kB 3*128kB 2*256kB 2*512kB 0*1024kB 1*2048kB 2*4096kB = 12580kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 DMA32: 27*4kB 3*8kB 2*16kB 1*32kB 1*64kB 1*128kB 1*256kB 0*512kB 0*1024kB 1*2048kB 5*4096kB = 23172kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 Normal: 0*4kB 20*8kB 3*16kB 0*32kB 0*64kB 1*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB 1*4096kB = 6480kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Node 0 HighMem: empty
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Swap cache: add 37570723, delete 37570608, find 42581931/46967227, race 19+787
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Free swap  = 0kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Total swap = 2097140kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: Free swap:            0kB
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 2228224 pages of RAM
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 190259 reserved pages
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 738 pages shared
Dec 23 00:00:35 Debian-40-etch-64-minimal kernel: 115 pages swap cached
Dec 23 00:21:57 Debian-40-etch-64-minimal -- MARK --
Dec 23 00:41:57 Debian-40-etch-64-minimal -- MARK --
Dec 23 01:01:57 Debian-40-etch-64-minimal -- MARK --
Dec 23 01:21:57 Debian-40-etch-64-minimal -- MARK --
Dec 23 01:41:58 Debian-40-etch-64-minimal -- MARK --
Dec 23 02:01:58 Debian-40-etch-64-minimal -- MARK --
Dec 23 02:18:50 Debian-40-etch-64-minimal kernel: vhcs2-vrl-traff[25165]: segfault at 0000000000000019 rip 00002b5350f5a1a5 rsp 00007fff5a29fc40 error 4
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: ----------- [cut here ] --------- [please bite here ] ---------
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: CPU 1 
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Modules linked in: xt_tcpudp iptable_filter ip_tables x_tables cpufreq_ondemand button ac battery ipv6 loop i2c_piix4 serio_raw i2c_core psmouse shpchp pci_hotplug evdev pcspkr dm_mirror dm_snapshot dm_mod raid10 raid456 xor multipath linear ide_generic ehci_hcd r8169 ohci_hcd sd_mod thermal fan powernow_k8 freq_table processor raid1 raid0 md_mod atiixp ahci sata_nv sata_sil sata_via libata via82cxxx ide_core 3w_9xxx 3w_xxxx scsi_mod xfs ext3 jbd ext2 mbcache reiserfs
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Pid: 25165, comm: vhcs2-vrl-traff Not tainted 2.6.18-5-amd64 #1
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RIP: 0010:[<ffffffff8020aa18>]  [<ffffffff8020aa18>] page_remove_rmap+0x13/0x2c
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RSP: 0018:ffff81010b171c30  EFLAGS: 00010286
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RAX: 00000000ffffffff RBX: ffff81021f72d760 RCX: 000000000000003f
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RDX: 0000000000000001 RSI: 80000001f7ab4067 RDI: ffff81021f72d760
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: RBP: 00000000f7ab4020 R08: ffff81021d614f58 R09: ffff810000012800
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: R10: 0000000000000000 R11: 0000000000000246 R12: 000000015eaea000
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: R13: ffff810192410750 R14: ffff81000103c2a0 R15: 000000015ec00000
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: FS:  00002b5351260ae0(0000) GS:ffff810218894ac0(0000) knlGS:0000000000000000
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: CR2: 000000000041c410 CR3: 00000002004e0000 CR4: 00000000000006e0
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Process vhcs2-vrl-traff (pid: 25165, threadinfo ffff81010b170000, task ffff8101bd28d040)
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Stack:  ffffffff80207a3f 0000000000000000 ffff81010b171d08 ffffffffffffffff
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  0000000000000000 ffff8101629c5c38 ffff81010b171d10 0000000000000000
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  00000001165f3500 00000001bb172000 ffff8101ee94e000 ffff8101629c3028
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80207a3f>] unmap_vmas+0x3f4/0x713
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff802378d8>] exit_mmap+0x76/0xf1
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff8023998f>] mmput+0x28/0x98
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff8021353d>] do_exit+0x220/0x8ae
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80244f8a>] cpuset_exit+0x0/0x6c
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80229578>] get_signal_to_deliver+0x46e/0x49d
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80227fdf>] do_signal+0x55/0x751
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80288678>] signal_wake_up+0x1e/0x2d
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80289171>] specific_send_sig_info+0xa1/0xac
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff802893ea>] force_sig_info+0xa7/0xb1
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff8025c33e>] thread_return+0x0/0xe7
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff8025c33e>] thread_return+0x0/0xe7
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  [<ffffffff80258198>] retint_signal+0x3d/0x79
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: 
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: 
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel: Code: 0f 0b 68 47 92 40 80 c2 0a 02 8b 77 18 83 f6 01 83 e6 01 e9 
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  RSP <ffff81010b171c30>
Dec 23 02:18:53 Debian-40-etch-64-minimal kernel:  <1>Fixing recursive fault but reboot is needed!
[...]
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: CPU 1 
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Modules linked in: xt_TCPMSS iptable_mangle ipt_LOG nf_conntrack_ipv4 xt_state xt_connlimit nf_conntrack xt_limit xt_tcpudp iptable_filter ip_tables x_tables cpufreq_ondemand ac battery ipv6 loop snd_hda_intel snd_pcm snd_timer snd soundcore snd_page_alloc shpchp i2c_piix4 k8temp button pci_hotplug i2c_core pcspkr evdev dm_mirror dm_snapshot dm_mod raid10 raid456 async_xor async_memcpy async_tx xor multipath linear ide_generic ehci_hcd ohci_hcd r8169 sd_mod thermal fan powernow_k8 freq_table processor raid1 raid0 md_mod atiixp ahci sata_nv sata_sil sata_via libata via82cxxx ide_core 3w_9xxx 3w_xxxx scsi_mod xfs ext3 jbd ext2 mbcache reiserfs
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Pid: 16641, comm: apache2 Not tainted 2.6.24-etchnhalf.1-amd64 #1
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RIP: 0010:[<ffffffff80286828>]  [<ffffffff80286828>] page_remove_rmap+0x104/0x120
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RSP: 0000:ffff8101b65c1c28  EFLAGS: 00010246
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RAX: 0000000000000000 RBX: ffff81021dcc2538 RCX: 00000000000128c6
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RDX: 00000000ffffff01 RSI: ffff81019783b750 RDI: ffffffff804e0a60
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: RBP: ffff8101a3921e48 R08: 0000000000000000 R09: 0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: R10: 0000000000004000 R11: 000001007fffffff R12: 00002b2fc36ea000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: R13: ffff81019783b750 R14: ffff81000103b640 R15: 00002b2fc3786000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: FS:  00002b2fc5dd65c0(0000) GS:ffff8102178809c0(0000) knlGS:0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: CR2: 00002b2fc9504000 CR3: 0000000000201000 CR4: 00000000000006e0
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Process apache2 (pid: 16641, threadinfo ffff8101b65c0000, task ffff810215266580)
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Stack:  ffff8102089c1b80 ffff81021dcc2538 000000007ee61020 ffffffff8027f469
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  0000000000000000 ffff8101b65c1d18 ffffffffffffffff 0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  ffff8101a3921e48 ffff8101b65c1d20 0000000000041f57 0000000000000000
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff8027f469>] unmap_vmas+0x420/0x743
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80282dd2>] exit_mmap+0x76/0xeb
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80233491>] mmput+0x2c/0x9d
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80238bc0>] do_exit+0x25f/0x796
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80239176>] sys_exit_group+0x0/0xe
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff802413a0>] get_signal_to_deliver+0x433/0x461
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff8020b399>] do_notify_resume+0xa8/0x725
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff80414c0b>] thread_return+0x3d/0xab
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff8029b99c>] sys_newlstat+0x28/0x31
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  [<ffffffff804164b4>] paranoid_userspace1+0x3b/0x3e
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: 
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: 
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: Code: 0f 0b eb fe 8b 77 18 41 58 5b 5d 83 e6 01 f7 de 83 c6 04 e9 
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel:  RSP <ffff8101b65c1c28>
Dec 26 18:14:31 Debian-40-etch-64-minimal kernel: ---[ end trace f1cc226fbf9a24e6 ]---
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel: Pid: 17154, comm: apache2 Tainted: G      D 2.6.24-etchnhalf.1-amd64 #1
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel: 
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel: Call Trace:
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff802757db>] bad_page+0x63/0x8d
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff80276d91>] get_page_from_freelist+0x3ed/0x5d1
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff80277145>] __alloc_pages+0x66/0x309
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff8027ff06>] handle_mm_fault+0x211/0x6d8
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff802235ea>] do_page_fault+0x358/0x702
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff80283c01>] vma_merge+0x147/0x1f4
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff802841cc>] do_brk+0x1d6/0x288
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff80312f7b>] __up_write+0x21/0x10e
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel:  [<ffffffff804162c9>] error_exit+0x0/0x51
Dec 26 18:16:02 Debian-40-etch-64-minimal kernel: 
Dec 26 18:29:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 18:31:48 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=785 TOS=0x00 PREC=0x00 TTL=118 ID=11597 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK PSH URGP=0 
Dec 26 18:31:53 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=11621 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK URGP=0 
Dec 26 18:31:55 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=785 TOS=0x00 PREC=0x00 TTL=118 ID=11628 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK PSH URGP=0 
Dec 26 18:31:59 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=11642 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK URGP=0 
Dec 26 18:32:05 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=785 TOS=0x00 PREC=0x00 TTL=118 ID=11679 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK PSH URGP=0 
Dec 26 18:32:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=11708 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK URGP=0 
Dec 26 18:32:29 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=80.x.x.x DST=88.x.x.x LEN=785 TOS=0x00 PREC=0x00 TTL=118 ID=11812 DF PROTO=TCP SPT=1801 DPT=80 WINDOW=8760 RES=0x00 ACK PSH URGP=0 
Dec 26 18:49:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 19:09:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 19:13:25 Debian-40-etch-64-minimal kernel: possible SYN flooding on port 80. Sending cookies.
Dec 26 19:14:31 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13026 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:14:31 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13027 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:14:32 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13028 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:14:33 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=13035 PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 19:14:34 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=13036 PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 19:14:34 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=13037 PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 19:14:36 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13039 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:14:39 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=774 TOS=0x00 PREC=0x00 TTL=115 ID=13042 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:14:40 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=13043 DF PROTO=TCP SPT=64037 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 19:19:13 Debian-40-etch-64-minimal kernel: possible SYN flooding on port 80. Sending cookies.
Dec 26 19:19:14 Debian-40-etch-64-minimal kernel: TCPv6: dropping request, synflood is possible
Dec 26 19:19:17 Debian-40-etch-64-minimal kernel: TCPv6: dropping request, synflood is possible
Dec 26 19:20:37 Debian-40-etch-64-minimal kernel: possible SYN flooding on port 80. Sending cookies.
Dec 26 19:20:39 Debian-40-etch-64-minimal kernel: TCPv6: dropping request, synflood is possible
Dec 26 19:44:03 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=91.x.x.x DST=88.x.x.x LEN=439 TOS=0x00 PREC=0x00 TTL=114 ID=12052 DF PROTO=TCP SPT=63763 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0 
Dec 26 19:44:03 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=91.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=12057 DF PROTO=TCP SPT=63763 DPT=80 WINDOW=17520 RES=0x00 ACK URGP=0 
Dec 26 19:44:05 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=91.x.x.x DST=88.x.x.x LEN=439 TOS=0x00 PREC=0x00 TTL=114 ID=12144 DF PROTO=TCP SPT=63763 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0 
Dec 26 19:44:07 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=91.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=114 ID=12198 DF PROTO=TCP SPT=63763 DPT=80 WINDOW=17520 RES=0x00 ACK URGP=0 
Dec 26 19:59:00 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=901 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:59:01 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=902 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:59:02 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=903 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:59:03 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=905 PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 19:59:04 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=906 PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 19:59:05 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=907 PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 19:59:07 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=910 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:59:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=930 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:59:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=940 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 19:59:17 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=865 TOS=0x00 PREC=0x00 TTL=115 ID=986 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 19:59:22 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=1009 DF PROTO=TCP SPT=49287 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 20:09:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 20:29:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 20:49:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 21:08:12 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=859 TOS=0x00 PREC=0x00 TTL=115 ID=14475 DF PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 21:08:13 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=859 TOS=0x00 PREC=0x00 TTL=115 ID=14476 DF PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 21:08:15 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=859 TOS=0x00 PREC=0x00 TTL=115 ID=14477 DF PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 21:08:17 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=14494 PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 21:08:18 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=14502 PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 21:08:21 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=14529 PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 21:08:23 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=14542 PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK URGP=0 
Dec 26 21:08:24 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=859 TOS=0x00 PREC=0x00 TTL=115 ID=14548 DF PROTO=TCP SPT=53836 DPT=80 WINDOW=4420 RES=0x00 ACK PSH URGP=0 
Dec 26 21:20:07 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=194.x.x.x DST=88.x.x.x LEN=792 TOS=0x00 PREC=0x00 TTL=121 ID=749 DF PROTO=TCP SPT=1152 DPT=80 WINDOW=32850 RES=0x00 ACK PSH URGP=0 
Dec 26 21:20:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=194.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=819 DF PROTO=TCP SPT=1152 DPT=80 WINDOW=32850 RES=0x00 ACK URGP=0 
Dec 26 21:20:14 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=194.x.x.x DST=88.x.x.x LEN=792 TOS=0x00 PREC=0x00 TTL=121 ID=873 DF PROTO=TCP SPT=1152 DPT=80 WINDOW=32850 RES=0x00 ACK PSH URGP=0 
Dec 26 21:20:17 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=194.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=121 ID=946 DF PROTO=TCP SPT=1152 DPT=80 WINDOW=32850 RES=0x00 ACK URGP=0 
Dec 26 21:49:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 22:05:57 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40546 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0 
Dec 26 22:06:01 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=116 ID=40549 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK URGP=0 
Dec 26 22:06:04 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40550 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0 
Dec 26 22:06:13 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=40 TOS=0x00 PREC=0x00 TTL=116 ID=40551 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK URGP=0 
Dec 26 22:06:16 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40552 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0 
Dec 26 22:06:40 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40557 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0 
Dec 26 22:07:28 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=94.x.x.x DST=88.x.x.x LEN=667 TOS=0x00 PREC=0x00 TTL=116 ID=40599 DF PROTO=TCP SPT=1171 DPT=80 WINDOW=17520 RES=0x00 ACK PSH URGP=0 
Dec 26 22:29:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 22:49:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 23:09:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 23:29:45 Debian-40-etch-64-minimal -- MARK --
Dec 26 23:38:09 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15887 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0 
Dec 26 23:38:10 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15892 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0 
Dec 26 23:38:11 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15906 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0 
Dec 26 23:38:12 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=15925 PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0 
Dec 26 23:38:13 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=15930 PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0 
Dec 26 23:38:14 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=576 TOS=0x00 PREC=0x00 TTL=115 ID=15940 PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0 
Dec 26 23:38:15 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15966 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0 
Dec 26 23:38:18 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15973 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0 
Dec 26 23:38:19 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=15974 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0 
Dec 26 23:38:27 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=864 TOS=0x00 PREC=0x00 TTL=115 ID=15976 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK PSH URGP=0 
Dec 26 23:38:31 Debian-40-etch-64-minimal kernel: Stealth ScanIN=eth0 OUT= MAC=00:1d:92:34:51:21:00:02:85:1a:72:e0:08:00 SRC=217.x.x.x DST=88.x.x.x LEN=52 TOS=0x00 PREC=0x00 TTL=115 ID=16078 DF PROTO=TCP SPT=56044 DPT=80 WINDOW=2048 RES=0x00 ACK URGP=0

Re: Apache down

Posted: 2008-12-27 16:05
by Roger Wilco
Doh! wrote:

Code: Select all

Dec 23 00:00:17 Debian-40-etch-64-minimal kernel: oom-killer: gfp_mask=0x201d2, order=0
[...]
Dec 23 00:00:24 Debian-40-etch-64-minimal kernel:  [<ffffffff802a6691>] out_of_memory+0x33/0x216
[...]
Dec 23 00:00:34 Debian-40-etch-64-minimal kernel: oom-killer: gfp_mask=0x200d2, order=0
Deinem System geht der Speicher aus und der Kernel (bzw. der OOM-Killer) beginnt, Prozesse nach ihrem Score zu beenden. Irgendein Programm läuft bei dir Amok und reserviert allmählich den gesamten Speicher.

Re: Apache down

Posted: 2008-12-27 16:36
by dohǃ
Diese vielen "TCP: Treason uncloaked!"-Meldungen können auf eine Tar-Pit-Attacke hinweisen. Hab soeben versucht, window scaling zu deaktivieren, vl. hilfts:

Code: Select all

echo 0 > /proc/sys/net/ipv4/tcp_window_scaling 
This is problem someone is running some sort of "tar-pit" system that is
designed to keep sockets in a bad state and run you out of kernel memory.

https://www.redhat.com/archives/redhat- ... 00311.html

Re: Apache down

Posted: 2008-12-28 20:40
by oxygen
Eine einfache Möglichkeit solchen out-of-memory kills entgegenzuwirken ist es den swap zu vergrößern und vm.oom_kill_allocating_task auf 1 zu setzten. Das verhindert zwar nicht DoS Angriffe auf deinen Server, aber sorgt dafür dass er länger durchhält.