From: Christopher Faylor <cgf@alum.bu.edu>
To: overseers@sources.redhat.com
Subject: Re: htdig and sources.redhat.com loadavg
Date: Wed, 07 Apr 2004 02:58:00 -0000 [thread overview]
Message-ID: <20040407025825.GD15576@coc.bosbc.com> (raw)
In-Reply-To: <m37jwt9iar.fsf@gossamer.airs.com>
On Tue, Apr 06, 2004 at 12:34:36PM -0400, Ian Lance Taylor wrote:
>Jonathan Larmour <jifl@eCosCentric.com> writes:
>
>> From a brief poke myself (and I'm no overseer) I'd hazard a guess it
>> may be more to do with the 17 simultaneous cvs checkouts as well as 2
>> rsyncs and a couple of ftps. netstat also seems to be reporting a TCP
>> SYN attack from tproxy1.NTCU.net (62 sockets in SYN_RECV state).
>>
>> I don't know about the "supervise" thingy but I know xinetd has a
>> "max_load" parameter that could be used to e.g. deny anonymous (not
>> logged in) cvs over a certain load (since having 10 cvs operations
>> complete two times is better than 20 cvs operations taking nearly
>> forever).
>
>We only permit 10 simultaneous anonymous CVS connections. However,
>there is no limit on the number of CVS operations performed via ssh,
>and there are several hundred people with ssh access.
>
>The number of connections from 211.76.240.245 is interesting. I count
>39 connections at the moment, all to port 80. Looking at the HTTP
>logs, though, I don't think it is a TCP_SYN attack. I think somebody
>is downloading the cygwin.com web site, including all the mailing list
>messages.
That's usually a sign of a spammer grabbing email addresses. I've been
turning off access when I notice that. I have a script
"/home/cgf/bin/wwwstat" which shows connections by IP address that
I run periodically, looking for this type of thing.
cgf
next prev parent reply other threads:[~2004-04-07 2:58 UTC|newest]
Thread overview: 54+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-04-05 18:50 David Edelsohn
2004-04-05 19:36 ` Hans-Peter Nilsson
2004-04-05 19:46 ` Phil Edwards
2004-04-05 19:56 ` Frank Ch. Eigler
2004-04-05 20:03 ` Phil Edwards
2004-04-05 20:36 ` Hans-Peter Nilsson
2004-04-05 21:15 ` Phil Edwards
2004-04-05 21:23 ` Hans-Peter Nilsson
2004-04-05 21:46 ` Phil Edwards
2004-04-05 22:11 ` Hans-Peter Nilsson
2004-04-05 22:26 ` Phil Edwards
2004-04-05 20:48 ` Benjamin Kosnik
2004-04-05 20:52 ` Ian Lance Taylor
2004-04-05 20:57 ` Zack Weinberg
2004-04-08 21:18 ` Gerald Pfeifer
2004-04-05 21:12 ` Hans-Peter Nilsson
2004-04-05 20:51 ` Christopher Faylor
2004-04-05 21:21 ` Matthew Galgoci
2004-04-05 23:36 ` Zack Weinberg
2004-04-06 0:06 ` Matthew Galgoci
2004-04-06 0:17 ` Matthew Galgoci
2004-04-06 0:29 ` Zack Weinberg
[not found] ` <cgf@alum.bu.edu>
2004-04-05 21:03 ` David Edelsohn
2004-04-05 21:08 ` Ian Lance Taylor
[not found] ` <ian@airs.com>
2004-04-05 21:14 ` David Edelsohn
2004-04-05 22:51 ` Jason Molenda
2004-04-05 23:39 ` GCC snapshot generation (was Re: htdig and sources.redhat.com loadavg) Zack Weinberg
2004-04-06 14:49 ` htdig and sources.redhat.com loadavg David Edelsohn
2004-04-06 16:18 ` Jonathan Larmour
2004-04-06 16:25 ` David Edelsohn
2004-04-06 16:34 ` Ian Lance Taylor
2004-04-06 16:39 ` Phil Edwards
2004-04-07 2:58 ` Christopher Faylor [this message]
2004-04-06 16:41 ` Ian Lance Taylor
2004-04-07 2:59 ` Christopher Faylor
2004-04-06 17:40 ` David Edelsohn
2004-04-06 18:00 ` Jonathan Larmour
2004-04-06 19:43 ` Hans-Peter Nilsson
2004-04-06 19:52 ` Ian Lance Taylor
2004-04-06 19:52 ` Frank Ch. Eigler
2004-04-06 23:24 ` Hans-Peter Nilsson
2004-04-08 14:48 ` gcc.gnu.org CVS meta-data corrupt? David Edelsohn
2004-04-08 14:53 ` Frank Ch. Eigler
2004-04-08 15:18 ` Christopher Faylor
2004-05-02 11:32 ` sourceware load problem again? David Edelsohn
2004-04-08 4:04 gcc.gnu.org CVS meta-data corrupt? David Edelsohn
2004-04-08 13:20 ` Christopher Faylor
2004-04-08 13:42 ` Frank Ch. Eigler
2004-04-08 13:54 ` system rebooted (was Re: gcc.gnu.org CVS meta-data corrupt?) Christopher Faylor
2004-04-08 13:42 ` gcc.gnu.org CVS meta-data corrupt? Frank Ch. Eigler
2004-04-08 14:13 ` David Edelsohn
2004-04-08 14:21 ` Christopher Faylor
2004-04-29 19:40 sourceware load problem again? David Edelsohn
2004-04-29 19:45 ` Christopher Faylor
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040407025825.GD15576@coc.bosbc.com \
--to=cgf@alum.bu.edu \
--cc=overseers@sources.redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).