Snort mailing list archives
Re: ICMP PING speedera
From: "Bruno Gimenes Pereti" <pereti () ump edu br>
Date: Thu, 18 Oct 2001 14:41:58 -0300
I would look at DNS requests and bind logs. What bind version are you using?
I'm using bind-9.1.0-10. Do you know any bug in this version? I think it's using much memory, it get up to 18M each process. It stoped now again. This is ps aux output after I restarted the service: 4796 named 9 0 4288 4288 2236 S 0.0 1.6 0:00 named 4797 named 9 0 4288 4288 2236 S 0.0 1.6 0:00 named 4798 named 9 0 4288 4288 2236 S 0.0 1.6 0:00 named 4799 named 9 0 4288 4288 2236 S 0.0 1.6 0:00 named 4802 named 9 0 4288 4288 2236 S 0.0 1.6 0:00 named I think it is a DoS I don't know. Who can I discover what it is? Thank's again... _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://www.geocrawler.com/redir-sf.php3?list=snort-users
Current thread:
- Configure MySQL for multiple snort sensors Joe Pampel (Oct 17)
- <Possible follow-ups>
- RE: Configure MySQL for multiple snort sensors Erwin Fok (Oct 18)
- ICMP PING speedera Bruno Gimenes Pereti (Oct 18)
- Re: ICMP PING speedera Chris Green (Oct 18)
- Re: ICMP PING speedera Bruno Gimenes Pereti (Oct 18)
- Re: ICMP PING speedera Byron York (Oct 18)
- ICMP PING speedera Bruno Gimenes Pereti (Oct 18)
- Re: Configure MySQL for multiple snort sensors james (Oct 18)
- Re: Configure MySQL for multiple snort sensors A.J. Weinzettel (Oct 18)
- Re: Configure MySQL for multiple snort sensors roman (Oct 19)