Re: SYN flooding on port 80 + DMAR:[DMA Write] faults

2016-03-13 Thread Toralf Förster
Francois Romieu: > Toralf Förster : >> Today my server (64 bit hardened Gentoo kernel) was faced a SYN-flood attack. >> I do wonder if the DMAR events points to an issue in the kernel ? > > Please send a compressed log including all 'fault addr' lines as well > as the (module probe time) XID line

Re: SYN flooding on port 80 + DMAR:[DMA Write] faults

2016-03-12 Thread Francois Romieu
Toralf Förster : > Today my server (64 bit hardened Gentoo kernel) was faced a SYN-flood attack. > I do wonder if the DMAR events points to an issue in the kernel ? Please send a compressed log including all 'fault addr' lines as well as the (module probe time) XID line from the r8169 driver. --

SYN flooding on port 80 + DMAR:[DMA Write] faults

2016-03-12 Thread Toralf Förster
Today my server (64 bit hardened Gentoo kernel) was faced a SYN-flood attack. I do wonder if the DMAR events points to an issue in the kernel ? Mar 12 21:56:51 ms-magpie kernel: [99582.831584] TCP: request_sock_TCP: Possible SYN flooding on port 80. Sending cookies. Check SNMP counters. Mar 12