osiris kernel: general protection: 0000

Brian Ristuccia (brianr@osiris.ml.org)
Sat, 17 Jan 1998 13:06:18 -0500 (EST)

Warning: possible SYN flood from 77.213.31.2 on 24.128.82.114:25. Sending
cookies.
validated probe(203.14.101.48:1312, 24.128.82.114:25, 259365266)
validated probe(167.16.81.108:1166, 24.128.82.114:25, -1354183415)
validated probe(24.128.82.114:29969, 24.128.82.114:25, 1222240174)
general protection: 0000
CPU: 0
EIP: 0010:[<0013faf1>]
EFLAGS: 00010202
eax: 000005d5 ebx: 004afedc ecx: 0000000e edx: 74207374
esi: 74207374 edi: 056ebee6 ebp: 056ebee6 esp: 056ebe60
ds: 0018 es: 0018 fs: 002b gs: 002b ss: 0018
Process tcpdump (pid: 11525, process nr: 58, stackpage=056eb000)
Stack: 03d3c414 056ebed8 00000000 00000000 056ebee4 00000047 0050fb00
0015097a
03d3c414 056ebf64 0000061c 00000000 00000000 056ebed8 0000061c
0050fb00
0585c550 056ebee4 001369c3 0050fb90 056ebf64 0000061c 00000000
00000000
Call Trace: [<0015097a>] [<001369c3>] [<00180c0c>] [<001826b7>]
[<0017ee6d>] [<001370e3>] [<0010a655>]
Code: ac aa 84 c0 75 f7 f3 aa 66 8b 53 6c 8b 4c 24 10 66 89 51 10
set trigger = 0x0
set trigger = 0x2

Linux osiris 2.0.33 #1 Sat Dec 27 18:41:03 EST 1997 i586 unknown

This was under heavy load using syn4k to synflood my local SMTP port
(qmail) and another host on the local ethernet. I was also using the
ultrasound project Driver Version 2.72a and Tomislav Uzelac v0.7.6 with
realtime scheduling enabled.

I'm not on the list -- CC me of you have any ideas.

--
Brian Ristuccia
brianr@osiris.ml.org
bristucc@baynetworks.com
bristucc@cs.uml.edu