이상한messages로그와 웹다운
작성자 정보
- 이동준 작성
- 작성일
컨텐츠 정보
- 2,931 조회
- 3 댓글
- 0 추천
- 목록
본문
안녕하세요.
다름이 아니라 새벽에 갑자기 웹이 다운되면서
무슨일인가 싶어 살펴봤더니 영문을 모르겠습니다.
꼭좀 답변 부탁드립니다.
1.ping은 정상상태
2. 웹페이지 3~5분에 한번씩 접속 클릭하면 바로 역시 다운
3.서버상태 부하없음
4.ssh접속 이상없음
단 messege 로그에 아래와 같이 계속 로그가 누적됩니다.
Net 뒤의 숫자만 바뀌면서 말이죠...-_-
Apr 14 04:14:18 dakku kernel: NET: 3677 messages suppressed.
Apr 14 04:14:23 dero kernel: NET: 4360 messages suppressed.
Apr 14 04:14:28 dero kernel: NET: 4405 messages suppressed.
Apr 14 04:14:33 dero kernel: NET: 3457 messages suppressed.
Apr 14 04:14:38 dero kernel: NET: 5010 messages suppressed.
Apr 14 04:14:43 dero kernel: NET: 4373 messages suppressed.
Apr 14 04:14:48 dero kernel: NET: 4387 messages suppressed.
Apr 14 04:14:53 dero kernel: NET: 5169 messages suppressed.
Apr 14 04:14:58 dero kernel: NET: 3570 messages suppressed.
Apr 14 04:15:03 dero kernel: NET: 4329 messages suppressed.
Apr 14 04:15:08 dero kernel: NET: 5199 messages suppressed.
Apr 14 04:15:13 dero kernel: NET: 3453 messages suppressed.
Apr 14 04:15:18 dero kernel: NET: 4298 messages suppressed.
Apr 14 04:15:23 dero kernel: NET: 4779 messages suppressed.
Apr 14 04:15:28 dero kernel: NET: 4354 messages suppressed.
Apr 14 04:15:33 dero kernel: NET: 4229 messages suppressed.
Apr 14 04:15:38 dero kernel: NET: 4373 messages suppressed.
Apr 14 04:15:43 dero kernel: NET: 4399 messages suppressed.
Apr 14 04:15:48 dero kernel: NET: 3667 messages suppressed.
Apr 14 04:15:53 dero kernel: NET: 4396 messages suppressed.
Apr 14 04:15:58 dero kernel: NET: 4280 messages suppressed.
Apr 14 04:16:03 dero kernel: NET: 3350 messages suppressed.
Apr 14 04:16:08 dero kernel: NET: 5199 messages suppressed.
Apr 14 04:16:13 dero kernel: NET: 4344 messages suppressed.
Apr 14 04:16:18 dero kernel: NET: 4346 messages suppressed.
Apr 14 04:16:23 dero kernel: NET: 3366 messages suppressed.
Apr 14 04:16:28 dero kernel: NET: 4541 messages suppressed.
Apr 14 04:16:33 dero kernel: NET: 4411 messages suppressed.
Apr 14 04:16:38 dero kernel: NET: 3852 messages suppressed.
Apr 14 04:16:43 dero kernel: NET: 3831 messages suppressed.
Apr 14 04:16:48 dero kernel: NET: 3384 messages suppressed.
Apr 14 04:16:53 dero kernel: NET: 4951 messages suppressed.
Apr 14 04:16:58 dero kernel: NET: 4494 messages suppressed.
Apr 14 04:17:03 dero kernel: NET: 4388 messages suppressed.
Apr 14 04:17:08 dero kernel: NET: 4391 messages suppressed.
Apr 14 04:17:14 dero kernel: NET: 4265 messages suppressed.
Apr 14 04:17:18 dero kernel: NET: 5435 messages suppressed.
Apr 14 04:17:23 dero kernel: NET: 4394 messages suppressed.
Apr 14 04:17:28 dero kernel: NET: 4296 messages suppressed.
Apr 14 04:17:33 dero kernel: NET: 4283 messages suppressed.
Apr 14 04:17:38 dero kernel: NET: 4208 messages suppressed.
Apr 14 04:17:44 dero kernel: NET: 3834 messages suppressed.
Apr 14 04:17:48 dero kernel: NET: 4190 messages suppressed.
Apr 14 04:17:53 dero kernel: NET: 4211 messages suppressed.
Apr 14 04:17:58 dero kernel: NET: 4397 messages suppressed.
Apr 14 04:18:03 dero kernel: NET: 4367 messages suppressed.
Apr 14 04:18:08 dero kernel: NET: 4357 messages suppressed.
Apr 14 04:18:13 dero kernel: NET: 4605 messages suppressed.
Apr 14 04:18:18 dero kernel: NET: 4801 messages suppressed.
Apr 14 04:18:23 dero kernel: NET: 4548 messages suppressed.
Apr 14 04:18:28 dero kernel: NET: 4953 messages suppressed.
Apr 14 04:18:33 dero kernel: NET: 4479 messages suppressed.
꼭좀 도움좀 부탁드립니다. 답답해서...휴...
관련자료
-
이전
-
다음
이동준님의 댓글
- 이동준
- 작성일
도스공격이면 막을 방법이 없는지요...
이유성님의 댓글
- 이유성
- 작성일
syn을 날리고있다면 신플로딩공격을 의심해볼수도있구요
그럴때 ip_conntrack_max값을 적절히 늘려주시면 어느정도 막을수는 있습니다.
이동준님의 댓글
- 이동준
- 작성일
