Security Incidents mailing list archives

Re: wired traffic


From: ramez.hanna () gmail com
Date: 30 Jan 2006 07:24:47 -0000

this looks like you have a script or any of that sort that is hogging your bandwidth by sending infinite ACKs to a 
non-existing address
i suggest you run #netstat -naptu this should show you all connections on your box and you should be able to spot the 
process that is generating all these ACKs (it would be the one that shows the most in the output of netstat) and then 
kill the process and find that file and remove
then you have to know how this happened by checking the logs


Current thread: