BETA6 kern.maxfiles messages

From: freebsd (freebsd_at_paymentonline.net)
Date: 10/06/04

  • Next message: freebsd: "Re: BETA6 kern.maxfiles messages" 
    To: <freebsd-current@freebsd.org>
Date: Tue, 5 Oct 2004 23:04:08 -0700

    I'm suspicious someone was trying to probe or dos this server, but if there
    is some other possible explanation, and since I have only seen this on a 5.3
    BETA box I thought I would post it here. It looks to me like someone was
    trying to do a small dos attack perhaps?

    Today I had these messages in dmesg.today:

    kern.maxfiles limit exceeded by uid 70, please see tuning(7).
    kern.maxfiles limit exceeded by uid 88, please see tuning(7).
    ......................

    The offending processes are:
    # ps 88
      PID TT STAT TIME COMMAND
       88 ?? IL 0:00.00 [nfsiod 3]
    # ps 70
      PID TT STAT TIME COMMAND
       70 ?? WL 0:08.60 [swi3: cambio]

    This is what kern.maxfiles looks like under normal operation. This server
    doesn't vary that much in traffic and these numbers shouldn't go up or down
    too much. I have apache/mod_perl and postgresql running and that is about
    it. Maybe a little bit of variation in maxfiles is normal, but I can't
    think of what would open up almost 12,000 extra files.

    # sysctl kern.maxfiles
    kern.maxfiles: 12328
    # sysctl kern.openfiles
    kern.openfiles: 492

    _______________________________________________
    freebsd-current@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-current
    To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"

  • Next message: freebsd: "Re: BETA6 kern.maxfiles messages"

    Relevant Pages

    • Re: TCP/IP comms problems between WinXP and DOS
      ... I have written client and server versions ... In the instance where I have a problem the DOS system is running as client, ... By simple changing of i/p addresses / network names I have run the client ...
      (microsoft.public.dotnet.languages.vc)
    • Re: DOS Printing from Windows Server 2003 TS?
      ... STAT-NT03 is the TS server name. ... We will see if it works for the 5 remote users over the Internet. ... We have a customer who is still using and old DOS version of software ... could not find anything except a Kixstart script. ...
      (microsoft.public.windows.terminal_services)
    • RE: DOS ATTACK
      ... Subject: DOS ATTACK ... server which I guess is your problem. ... block traffic based on referrer. ...
      (Incidents)
    • NWClient: Was machen vipx.exe und vlmsup.exe? (Probleme mit alter DOS Software)
      ... Alte DOS Software, die gegen 3.2 Server bei div. ... Prog offensichtlich Daten nicht geliefert bekommt ... Laut Error Counter NIC Server, sowie Cisco Switch ist das Netz OK, ...
      (de.comp.sys.novell)
    • Re: Ports that are open on a Server
      ... The server is not an internet server, ... mail server already behind a firewall. ... The DoS that I ...
      (microsoft.public.win2000.security)