[Snort-users] ICMP PING speedera

Bruno Gimenes Pereti pereti at ...3411...
Thu Oct 18 09:42:19 EDT 2001


>
> I would look at DNS requests and bind logs.  What bind version are you
> using?

I'm using bind-9.1.0-10. Do you know any bug in this version?
I think it's using much memory, it get up to 18M each process. It stoped now
again. This is ps aux output after I restarted the service:

4796 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named
4797 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named
4798 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named
4799 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named
4802 named      9   0  4288 4288  2236 S     0.0  1.6   0:00 named

I think it is a DoS I don't know.
Who can I discover what it is?

Thank's again...





More information about the Snort-users mailing list