Re: SYN flooding on port 80 + DMAR:[DMA Write] faults

From: Toralf FÃrster
Date: Sun Mar 13 2016 - 06:20:52 EST


Francois Romieu:
> Toralf FÃrster <toralf.foerster@xxxxxx> :
>> Today my server (64 bit hardened Gentoo kernel) was faced a SYN-flood attack.
>> I do wonder if the DMAR events points to an issue in the kernel ?
>
> Please send a compressed log including all 'fault addr' lines as well
> as the (module probe time) XID line from the r8169 driver.




--
Toralf
PGP: C4EACDDE 0076E94E, OTR: 420E74C8 30246EE7

Attachment: kern.log.gz
Description: application/gzip

Attachment: syn.log.gz
Description: application/gzip