possible SYN flooding on port 80

[k-h]

دقیقا چه مشکلی داره سرورتون که این خطا میده ؟

[moein-a]

دقیقا چه مشکلی داره سرورتون که این خطا میده ؟

یکی از مشکلاتش

Nov 9 20:47:22 server kernel: igb 0000:01:00.1: eth1: Reset adapter
Nov 9 20:47:26 server kernel: igb 0000:01:00.1: eth1: igb: eth1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
Nov 9 20:47:36 server kernel: Firewall: *UDP_IN Blocked* IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:d4:ca:6d:74:0d:49:08:00 SRC=ip DST=255.255.255.255 LEN=148 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=UDP SPT=58575 DPT=5678 LEN=128 
Nov 9 20:47:36 server kernel: igb 0000:01:00.1: eth1: Reset adapter
Nov 9 20:47:40 server kernel: igb 0000:01:00.1: eth1: igb: eth1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
Nov 9 20:47:50 server kernel: igb 0000:01:00.1: eth1: Reset adapter
Nov 9 20:47:54 server kernel: igb 0000:01:00.1: eth1: igb: eth1 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX
Nov 9 20:48:03 server kernel: possible SYN flooding on port 80. Sending cookies.

ریست شدن کارت شبکه هست که تعویض هم شده، ولی باز همین مشکل هست

البته قبل از شروع به ریست شدن کارت شبکه این لاگ ثبت میشه

Nov 9 20:25:37 server kernel: ------------[ cut here ]------------
Nov 9 20:25:37 server kernel: WARNING: at net/sched/sch_generic.c:265 dev_watchdog+0x26b/0x280() (Not tainted)
Nov 9 20:25:37 server kernel: Hardware name: X10SLD-F/HF
Nov 9 20:25:37 server kernel: NETDEV WATCHDOG: eth1 (igb): transmit queue 2 timed out
Nov 9 20:25:37 server kernel: Modules linked in: xt_owner xt_connlimit xt_recent ip6t_LOG nf_nat_ftp ipt_REDIRECT xt_conntrack iptable_mangle nf_conntrack_ftp ipt_LOG xt_limit xt_multiport iptable_nat nf_nat ipt_REJECT nf_conntrack_ipv4 nf_defrag_ipv4 iptable_filter ip_tables ip6t_REJECT nf_conntrack_ipv6 nf_defrag_ipv6 xt_state nf_conntrack ip6table_filter ip6_tables ipv6 ipmi_si ipmi_msghandler acpi_pad iTCO_wdt iTCO_vendor_support joydev i2c_i801 sg lpc_ich mfd_core shpchp igb dca i2c_algo_bit i2c_core ptp pps_core ext4 jbd2 mbcache sd_mod crc_t10dif ahci xhci_hcd video output dm_mirror dm_region_hash dm_log dm_mod [last unloaded: scsi_wait_scan]
Nov 9 20:25:37 server kernel: Pid: 0, comm: swapper Not tainted 2.6.32-642.6.1.el6.x86_64 #1
Nov 9 20:25:37 server kernel: Call Trace:
Nov 9 20:25:37 server kernel: <IRQ> [<ffffffff8107c6f1>] ? warn_slowpath_common+0x91/0xe0
Nov 9 20:25:37 server kernel: [<ffffffff8107c7f6>] ? warn_slowpath_fmt+0x46/0x60
Nov 9 20:25:37 server kernel: [<ffffffff8149bd2b>] ? dev_watchdog+0x26b/0x280
Nov 9 20:25:37 server kernel: [<ffffffff810684be>] ? scheduler_tick+0x11e/0x260
Nov 9 20:25:37 server kernel: [<ffffffff8149bac0>] ? dev_watchdog+0x0/0x280
Nov 9 20:25:37 server kernel: [<ffffffff8108f907>] ? run_timer_softirq+0x197/0x340
Nov 9 20:25:37 server kernel: [<ffffffff8108f166>] ? update_process_times+0x76/0x90
Nov 9 20:25:37 server kernel: [<ffffffff81085275>] ? __do_softirq+0xe5/0x230
Nov 9 20:25:37 server kernel: [<ffffffff8100c38c>] ? call_softirq+0x1c/0x30
Nov 9 20:25:37 server kernel: [<ffffffff8100fca5>] ? do_softirq+0x65/0xa0
Nov 9 20:25:37 server kernel: [<ffffffff81085105>] ? irq_exit+0x85/0x90
Nov 9 20:25:37 server kernel: [<ffffffff81552cea>] ? smp_apic_timer_interrupt+0x4a/0x60
Nov 9 20:25:37 server kernel: [<ffffffff8100bc13>] ? apic_timer_interrupt+0x13/0x20
Nov 9 20:25:37 server kernel: <EOI> [<ffffffff812fc07e>] ? intel_idle+0xfe/0x1b0
Nov 9 20:25:37 server kernel: [<ffffffff812fc061>] ? intel_idle+0xe1/0x1b0
Nov 9 20:25:37 server kernel: [<ffffffff81014ac9>] ? sched_clock+0x9/0x10
Nov 9 20:25:37 server kernel: [<ffffffff810addad>] ? sched_clock_cpu+0xcd/0x110
Nov 9 20:25:37 server kernel: [<ffffffff81441cca>] ? cpuidle_idle_call+0x7a/0xe0
Nov 9 20:25:37 server kernel: [<ffffffff81009fe6>] ? cpu_idle+0xb6/0x110
Nov 9 20:25:37 server kernel: [<ffffffff81541f49>] ? start_secondary+0x2c0/0x316
Nov 9 20:25:37 server kernel: ---[ end trace aa8e50bbc34b67cd ]---
Nov 9 20:25:37 server kernel: igb 0000:01:00.1: eth1: Reset adapter

یکی هم سرور ترافیک بالایی داره ثبت میکنه ( حتی در ساعت خلوت سرور )!!

-------------

یکی میگه حمله هست و فایروال داره دفع میکنه

یکی میگه کانفیگ اشتباه سرور هست

لطفاً نظر خودتون رو بگید