Snort mailing list archives

Re: ICMP PING speedera


From: "Bruno Gimenes Pereti" <pereti () ump edu br>
Date: Thu, 18 Oct 2001 14:41:58 -0300


I would look at DNS requests and bind logs.  What bind version are you
using?

I'm using bind-9.1.0-10. Do you know any bug in this version?
I think it's using much memory, it get up to 18M each process. It stoped now
again. This is ps aux output after I restarted the service:

4796 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named
4797 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named
4798 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named
4799 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named
4802 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named

I think it is a DoS I don't know.
Who can I discover what it is?

Thank's again...


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: