Loaded server or syn-flood?
Hi!
Recently, my kernel started print messages like
TCP: drop open request from [ip-number]/44669
TCP: drop open request from [ip-number]/44750
TCP: drop open request from [ip-number]/44668
TCP: drop open request from [ip-number]/44749
TCP: drop open request from [ip-number]/44748
TCP: drop open request from [ip-number]/44667
NET: 120 messages suppressed.
I did a short investigation and found out that
the server's either been syn-flooded or that
it basicaly ran out of resources ...
The machine acts web-server (apache) and serves
about 3,500,000 requests / week.
It's equipped with two p3-600mhz cpu's and 1gb ram.
Vanilla kernel 2.4.21 and debian unstable.
As this problem seems kind of unresolved it's
hard to fix it by bumping up buffers or so.
What's your experience?
--
__
Yours sincerely,
Christofer Algotsson
Reply to: