이상한messages로그와 웹다운

안녕하십니까? 오늘과내일의 홍석범입니다.

아래 내용만으로는 정확히 할 수 없지만 syn flooding이라면
sysctl -w net.ipv4.tcp_syncookies=1 을 실행하시기만 하면 됩니다.

좀더 자세한 내용은

http://tt.co.kr/~antihong/documents.html 에서 syn flooding 공격에 대한 분석 문서를 참고하시기 바랍니다.

감사합니다.

이동준 님의 글

안녕하세요.

다름이 아니라 새벽에 갑자기 웹이 다운되면서

무슨일인가 싶어 살펴봤더니 영문을 모르겠습니다.

꼭좀 답변 부탁드립니다.

1.ping은 정상상태

2. 웹페이지 3~5분에 한번씩 접속 클릭하면 바로 역시 다운

3.서버상태 부하없음

4.ssh접속 이상없음

단 messege 로그에 아래와 같이 계속 로그가 누적됩니다.

Net 뒤의 숫자만 바뀌면서 말이죠...-_-

Apr 14 04:14:18 dakku kernel: NET: 3677 messages suppressed.
Apr 14 04:14:23 dero kernel: NET: 4360 messages suppressed.
Apr 14 04:14:28 dero kernel: NET: 4405 messages suppressed.
Apr 14 04:14:33 dero kernel: NET: 3457 messages suppressed.
Apr 14 04:14:38 dero kernel: NET: 5010 messages suppressed.
Apr 14 04:14:43 dero kernel: NET: 4373 messages suppressed.
Apr 14 04:14:48 dero kernel: NET: 4387 messages suppressed.
Apr 14 04:14:53 dero kernel: NET: 5169 messages suppressed.
Apr 14 04:14:58 dero kernel: NET: 3570 messages suppressed.
Apr 14 04:15:03 dero kernel: NET: 4329 messages suppressed.
Apr 14 04:15:08 dero kernel: NET: 5199 messages suppressed.
Apr 14 04:15:13 dero kernel: NET: 3453 messages suppressed.
Apr 14 04:15:18 dero kernel: NET: 4298 messages suppressed.
Apr 14 04:15:23 dero kernel: NET: 4779 messages suppressed.
Apr 14 04:15:28 dero kernel: NET: 4354 messages suppressed.
Apr 14 04:15:33 dero kernel: NET: 4229 messages suppressed.
Apr 14 04:15:38 dero kernel: NET: 4373 messages suppressed.
Apr 14 04:15:43 dero kernel: NET: 4399 messages suppressed.
Apr 14 04:15:48 dero kernel: NET: 3667 messages suppressed.
Apr 14 04:15:53 dero kernel: NET: 4396 messages suppressed.
Apr 14 04:15:58 dero kernel: NET: 4280 messages suppressed.
Apr 14 04:16:03 dero kernel: NET: 3350 messages suppressed.
Apr 14 04:16:08 dero kernel: NET: 5199 messages suppressed.
Apr 14 04:16:13 dero kernel: NET: 4344 messages suppressed.
Apr 14 04:16:18 dero kernel: NET: 4346 messages suppressed.
Apr 14 04:16:23 dero kernel: NET: 3366 messages suppressed.
Apr 14 04:16:28 dero kernel: NET: 4541 messages suppressed.
Apr 14 04:16:33 dero kernel: NET: 4411 messages suppressed.
Apr 14 04:16:38 dero kernel: NET: 3852 messages suppressed.
Apr 14 04:16:43 dero kernel: NET: 3831 messages suppressed.
Apr 14 04:16:48 dero kernel: NET: 3384 messages suppressed.
Apr 14 04:16:53 dero kernel: NET: 4951 messages suppressed.
Apr 14 04:16:58 dero kernel: NET: 4494 messages suppressed.
Apr 14 04:17:03 dero kernel: NET: 4388 messages suppressed.
Apr 14 04:17:08 dero kernel: NET: 4391 messages suppressed.
Apr 14 04:17:14 dero kernel: NET: 4265 messages suppressed.
Apr 14 04:17:18 dero kernel: NET: 5435 messages suppressed.
Apr 14 04:17:23 dero kernel: NET: 4394 messages suppressed.
Apr 14 04:17:28 dero kernel: NET: 4296 messages suppressed.
Apr 14 04:17:33 dero kernel: NET: 4283 messages suppressed.
Apr 14 04:17:38 dero kernel: NET: 4208 messages suppressed.
Apr 14 04:17:44 dero kernel: NET: 3834 messages suppressed.
Apr 14 04:17:48 dero kernel: NET: 4190 messages suppressed.
Apr 14 04:17:53 dero kernel: NET: 4211 messages suppressed.
Apr 14 04:17:58 dero kernel: NET: 4397 messages suppressed.
Apr 14 04:18:03 dero kernel: NET: 4367 messages suppressed.
Apr 14 04:18:08 dero kernel: NET: 4357 messages suppressed.
Apr 14 04:18:13 dero kernel: NET: 4605 messages suppressed.
Apr 14 04:18:18 dero kernel: NET: 4801 messages suppressed.
Apr 14 04:18:23 dero kernel: NET: 4548 messages suppressed.
Apr 14 04:18:28 dero kernel: NET: 4953 messages suppressed.
Apr 14 04:18:33 dero kernel: NET: 4479 messages suppressed.

꼭좀 도움좀 부탁드립니다. 답답해서...휴...