Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 22 Apr 2005 19:34:59 +0200
From:      "Daniel Eriksson" <daniel_k_eriksson@telia.com>
To:        "'FreeBSD Current'" <freebsd-current@freebsd.org>
Cc:        'Randy Bush' <randy@psg.com>
Subject:   RE: significant increase in ipfw pullup failed
Message-ID:  <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0VcX9IoJqUaXPS8MjT1PdsKAAAAQAAAAh6X89bDXH0iDTdz4LqFEdQEAAAAA@telia.com>
In-Reply-To: <17001.9557.627987.505930@roam.psg.com>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Randy Bush wrote:

> previously i got an ipfw pullup failed a couple of times a day
> now i get them every few minutes

I've gone from naver having seen one to 5-10 per day over the last week.
Intel Pro/1000 (em) network card in one of the servers, VIA Rhine II (vr) in
the other. They seem to happen at the same time on both servers even though
they are hooked up to a switch, so that means some sort of broadcast.

Could be the result of some new virus perhaps? At least one machine on the
local segment is spamming snmp-trap broadcasts, possibly indicating some
sort of virus propagation.

/Daniel Eriksson




Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAA0VcX9IoJqUaXPS8MjT1PdsKAAAAQAAAAh6X89bDXH0iDTdz4LqFEdQEAAAAA>