Security Incidents mailing list archives
Some kind of DoS killing a fastethernet interface
From: Bjorn Djupvik <Bjorn.Djupvik () GLOBALONE NET>
Date: Mon, 8 Jan 2001 08:55:17 +0100
Hi. I recently received these messages in a syslog (on the machine "somebox"). It's obviously some kind of DoS, but I`m trying to figure out what kind. The syslog port was open so I`m guessing this is some kind of UDP flood to random ports, thereby hitting the syslog port. Comments? Cheers Bjorn ----------------------------------------------------------------------------- Jan 8 02:58:59 somebox kernel: eth0: transmit timed out, status 007b, reset Jan 8 02:58:59 somebox kernel: resetting ledma Jan 8 02:59:10 cs2756-148.austin.rr.com !@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@) Jan 8 03:00:35 24.130.172.19 @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ Jan 8 03:00:24 somebox kernel: eth0: transmit timed out, status 007b, reset Jan 8 03:00:24 somebox kernel: resetting ledma Jan 8 03:01:04 cc849766-a.taylor1.mi.home.com !@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@) Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:00:24 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:01:54 somebox kernel: eth0: transmit timed out, status 007b, reset Jan 8 03:01:54 somebox kernel: resetting ledma Jan 8 03:02:19 somebox kernel: eth0: transmit timed out, status 007b, reset Jan 8 03:02:19 somebox kernel: resetting ledma Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:02:19 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:22 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:02:59 somebox kernel: eth0: transmit timed out, status 007b, reset Jan 8 03:02:59 somebox kernel: resetting ledma Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:02:59 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:03:50 nic-25-c108-026.mn.mediaone.net !@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@)&!^&!*&!%&!%!@#%!^@) Jan 8 03:07:24 somebox kernel: eth0: transmit timed out, status 007b, reset Jan 8 03:07:24 somebox kernel: resetting ledma Jan 8 03:07:24 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:07:24 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:07:24 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:07:24 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:07:25 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:07:28 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:08:19 somebox kernel: eth0: transmit timed out, status 007b, reset Jan 8 03:08:19 somebox kernel: resetting ledma Jan 8 03:08:19 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:08:19 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:08:19 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:08:19 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:14:29 somebox kernel: eth0: transmit timed out, status 007b, reset Jan 8 03:14:29 somebox kernel: resetting ledma Jan 8 03:14:29 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:14:29 somebox kernel: eth0: Carrier Lost, trying TPE Jan 8 03:14:29 somebox kernel: eth0: Carrier Lost, trying AUI Jan 8 03:14:30 somebox kernel: eth0: Carrier Lost, trying TPE
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
Current thread:
- Some kind of DoS killing a fastethernet interface Bjorn Djupvik (Jan 08)
- Re: Some kind of DoS killing a fastethernet interface Valdis Kletnieks (Jan 08)