From owner-freebsd-questions@FreeBSD.ORG Sat Sep 20 08:12:03 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8582016A4BF for ; Sat, 20 Sep 2003 08:12:03 -0700 (PDT) Received: from webmail.xmission.com (webmail.xmission.com [198.60.22.199]) by mx1.FreeBSD.org (Postfix) with ESMTP id 50F3744003 for ; Sat, 20 Sep 2003 08:12:00 -0700 (PDT) (envelope-from jse@xmission.com) Received: from www by webmail.xmission.com with local (Exim 3.35 #1) id 1A0jOx-0004zv-00 for freebsd-questions@freebsd.org; Sat, 20 Sep 2003 09:11:59 -0600 Received: from 12-209-161-120.client.attbi.com (12-209-161-120.client.attbi.com [12.209.161.120]) by webmail.xmission.com (IMP) with HTTP for ; Sat, 20 Sep 2003 09:11:59 -0600 Message-ID: <1064070719.3f6c6e3f80fdb@webmail.xmission.com> Date: Sat, 20 Sep 2003 09:11:59 -0600 From: jse@xmission.com To: freebsd-questions@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit User-Agent: Internet Messaging Program (IMP) 3.2.1 Subject: Machine stops responding for a minute or so? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 20 Sep 2003 15:12:03 -0000 I have a remote machine running icecast to send an internet radio stream and it also serves the web page. Every now and then it just quits responding for a minute or so. The audio stream stops, it won't dish up the web page, I can't ping it, and the ssh session I keep open doesn't respond either. There is a Linux router on the network connection and it still responds during the bad period so I don't believe it is an external network problem. This morning when it happened as soon as I could get back in I looked at the log files and the only thing that looked unusual was about the time it stopped responding there was this entry in http-access.log: 209.42.72.248 - - [20/Sep/2003:08:28:21 -0600] "GET /scripts/nsiislog.dll" 404 - "-" "-" which I assume was someone looking for a vulnerable IIS server? That shouldn't cause any grief should it? Does anybody have any ideas why it would just go away like that? And is there anything I could look for? Thanks -Scott