[squid-users] is it a DOS attack ??
This is a discussion on [squid-users] is it a DOS attack ?? within the Squid Users forums, part of the Web Server and Related Forums category; Hello List! I have been facing this strange problem for last 3 days. I hope some one here will be ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
02-14-2004
|
|||
|
|||
[squid-users] is it a DOS attack ??
Hello List!
I have been facing this strange problem for last 3 days. I hope some one here will be able to shed light on it. I dont know wheather its a bug or a virus or a DOS attack but it is hitting my squid box very hard. in my access log i am seeing a lot of these. 1076806934.151 451 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.163 461 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.170 419 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.173 403 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.182 391 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.184 361 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.191 314 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.236 318 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.282 365 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.285 350 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.325 372 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.454 134 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.784 383 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.862 418 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806934.892 334 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.048 381 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.048 380 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.048 374 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.055 337 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.101 358 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.178 412 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.353 530 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.362 539 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.439 585 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.563 694 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806935.641 751 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.710 784 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806935.730 802 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806935.730 775 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806935.747 786 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806935.789 781 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806935.811 802 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806935.845 746 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806935.854 685 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806935.868 698 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806936.169 653 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806936.169 612 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806936.169 610 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806936.304 707 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806936.407 775 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806937.343 1171 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806937.663 1322 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806937.815 1289 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806937.873 1266 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806937.923 1083 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806938.002 1473 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - NONE/- - 1076806938.080 1279 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806938.090 1178 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - 1076806938.125 725 202.133.44.214 TCP_MISS/000 0 GET http://www.microsoft.com/ - DIRECT/www.microsoft.com - This thing tie up all the 2048 file descriptors and in my cache log i get warnings and at the same time my clients start to complain about the performance. WARNING! Your cache is running out of filedescriptors So can any one help Regards Mahmood Ahmed Senior Network Engineer Buraak Telecommunications --------------------------------------------------------- This mail has been sent using Buraak Net's Mailing System (http://www.buraak.net.pk) 
|
Linear Mode
