ippl failure and strange echo requests
Hello
I have ippl installed and have started it as 'nohup ippl -n' 8 days ago. It
has worked well, but now there are two things I wonder about.
- yesterday there were 47 echo requests from 30 different origins within half
an hour. This hasn't happened the 8 days before. The only way I can explain
that is either that someone sent requests with spoofed sender ip adresses, or
that ippl isn't working correctly. It's strange that all 30 ip's except one
have a valid dns entry.
- Just after this, ippl stopped working: there weren't any more messages even
when I ping'd my machine myself. With 'ps' I saw it still running (4
threads). Another instance 'ippl -n' started in a terminal worked. 'killall
ippl' stopped all of them and led the old ippl instance to write the
'stopped' message to the log:
(...)
Jun 26 13:55:48 ICMP message type echo request from c122s7h5.upc.chello.no
[212.186.118.122]
Jun 26 13:55:48 port 8007 connection attempt from localhost [127.0.0.1]
Jun 26 13:56:06 last message repeated 8 time(s)
Jun 26 13:56:18 ICMP message type echo request from 24-164-142-190.si.rr.com
[24.164.142.190]
Jun 26 13:56:18 port 8007 connection attempt from localhost [127.0.0.1]
Jun 26 13:56:27 ICMP message type echo request from 36-174.engelholm.se
[195.216.36.174]
Jun 26 13:56:27 port 8007 connection attempt from localhost [127.0.0.1]
Jun 26 13:56:48 last message repeated 11 time(s)
Jun 26 13:56:50 ICMP message type echo request from 36-174.engelholm.se
[195.216.36.174]
(... more echo requests...)
Jun 26 14:25:22 ICMP message type echo request from
co3042367-a.rochd1.qld.optushome.com.au [203.164.196.110]
Jun 26 14:25:22 port 8007 connection attempt from localhost [127.0.0.1]
Jun 27 12:39:27 IP Protocols Logger: stopped (signal 15).
So it really seems that ippl hung just after (or while?) these strange echo
requests. Were these 'ping of death' or something that ippl couldn't handle?
Christian.
Reply to: