Ajuda Urgente !! httpd travando
Galera preciso da ajuda de vcs !! meu servidor httpd está parando de reponder... fucei em todos os logs e só achei isso no dmesg
TCP: Treason uncloaked! Peer 200.219.181.51:15215/80 shrinks window 2053716589:2053716590. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.51:15215/80 shrinks window 2053716589:2053716590. Repaired.
TCP: Treason uncloaked! Peer 200.142.160.132:2112/80 shrinks window 1774028403:1774028404. Repaired.
UDP: short packet: From 200.204.97.146:62171 29617/43 to 200.230.93.1:80
TCP: Treason uncloaked! Peer 200.219.181.78:39372/80 shrinks window 3554522802:3554522803. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:39372/80 shrinks window 3554522802:3554522803. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:39499/80 shrinks window 3576071730:3576071731. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:39499/80 shrinks window 3576071730:3576071731. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:39596/80 shrinks window 3595895094:3595895095. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:39596/80 shrinks window 3595895094:3595895095. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.48:27657/80 shrinks window 895297934:895297935. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.48:27723/80 shrinks window 896341736:896341737. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.60:4916/80 shrinks window 2917552692:2917552693. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.60:4916/80 shrinks window 2917552692:2917552693. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.60:4916/80 shrinks window 2917552692:2917552693. Repaired.
TCP: Treason uncloaked! Peer 200.142.162.230:61503/80 shrinks window 2665780067:2665780068. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.50:47086/80 shrinks window 3105498777:3105498778. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.50:47099/80 shrinks window 3113901539:3113901540. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:13605/80 shrinks window 1740218006:1740218007. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:13605/80 shrinks window 1740218006:1740218007. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:14463/80 shrinks window 2326232309:2326232310. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:14507/80 shrinks window 2354094484:2354094485. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.78:14507/80 shrinks window 2354094484:2354094485. Repaired.
e1000: eth1: e1000_watchdog_task: NIC Link is Down
e1000: eth1: e1000_watchdog_task: NIC Link is Up 1000 Mbps Full Duplex
e1000: eth1: e1000_watchdog_task: NIC Link is Down
e1000: eth1: e1000_watchdog_task: NIC Link is Up 1000 Mbps Full Duplex
TCP: Treason uncloaked! Peer 200.219.181.74:32387/80 shrinks window 353448712:353448713. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32389/80 shrinks window 347419669:347419670. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32387/80 shrinks window 353448712:353448713. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32389/80 shrinks window 347419669:347419670. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32389/80 shrinks window 347419669:347419670. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32413/80 shrinks window 356292452:356292453. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32415/80 shrinks window 360192845:360192846. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32413/80 shrinks window 356292452:356292453. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32415/80 shrinks window 360192845:360192846. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32415/80 shrinks window 360192845:360192846. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.74:32422/80 shrinks window 358181919:358181920. Repaired.
printk: 5 messages suppressed.
TCP: Treason uncloaked! Peer 200.219.181.59:49572/80 shrinks window 1977106671:1977106672. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.59:49574/80 shrinks window 1974648593:1974648594. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.59:49572/80 shrinks window 1977106671:1977106672. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.59:49574/80 shrinks window 1974648593:1974648594. Repaired.
UDP: short packet: From 200.204.97.146:61477 210/48 to 200.230.93.1:443
TCP: Treason uncloaked! Peer 200.219.181.42:16393/80 shrinks window 104444764:104444765. Repaired.
TCP: Treason uncloaked! Peer 200.219.181.42:16711/80 shrinks window 160553039:160553040. Repaired.
Andei pesquisando e parece q é uma forma de ataque abrindo um monte de janelas ack minusculas !!
Alguém pode me ajudar ?
Re: Ajuda Urgente !! httpd travando
http://lists.debian.org/debian-isp/2.../msg00192.html
Esse thread na lista menciona sobre o seu problema, mas existem outros resultados no Google.
Como eu desconheço os IP's que você trabalha, eu bloquearia a rede oriunda dos ataques:
Código :
# iptables -t filter -A INPUT -s 200.219.181.0/24 -j DROP
