topic Re: stop the log.. in Operating System - Linux

stop the log..

mw_4 — Mon, 10 Jun 2002 01:20:01 GMT

/var/log/messages file has been logged like that..
'Happy Meal MAX Packet size error...'
I heard that is kind of DOS(Denial Of Service)
it is continuously logged and I have been searched the way stoping DOS
How can I stop the attack

Re: stop the log..

I_M — Mon, 10 Jun 2002 02:35:41 GMT

Hi,

I am not sure if this is a DOS attack or not.
If it is so, can you tell the source IP of the packet?
Can you block the packets' IP using ipchains / iptables?

The other possibility is, checkout the negotiation between hub/switch and your server. One report on the web said this error message happened when autonegotiation failed.

check your dmesg and /sbin/mii-tool to find the speed and duplex of the LAN.

good luck

Re: stop the log..

mw_4 — Mon, 10 Jun 2002 23:31:29 GMT

how can i know Linux is on the auto-negotiation
I think what you said , and I am sure your reply is right but this is not only auto nego.. but also ip aliasing problem .
'Linux redhat 2.2.14-5.0 sparc64' that is my platform
Linux on sparc is not common
and I have tested ip aliasing
but results is bad.

I post kernet routing table we have configured.

see that attaced file

Re: stop the log..

I_M — Tue, 11 Jun 2002 01:15:26 GMT

Hello again,

I am not familiar with RH on Sparc. All I can say is , on IA32.

For example, my NIC on the server, Intel EtherPro100 have 2 drivers.
eepro100 and e100.
Their default is auto-nego. But I can configure it as "FIXed Speed" ,if I pass some options.
I guess your driver for NIC has something like that.
eepro100 never show the connection speed on dmesg. But e100 shows current connection spped and duplex mode.
How about yours?

Checkout inside of driver source or developer's web page would be good idea to find auto-nego info.

Regards,

Re: stop the log..

Hal Rottenberg — Tue, 11 Jun 2002 14:11:57 GMT

Moving this thread to the Networking category. "secure OS software for Linux" is the category to discuss HP's hardended Linux platform. Details on it are available here:

http://www.hp.com/security/products/linux/

Thanks

-hal

Re: stop the log..

mw_4 — Tue, 11 Jun 2002 22:40:24 GMT

'Happy Meal.. packet..' logs are no longer generated.
I noticed that full duplex mode on the switch was fixed
change the mode half first then 'Happy Meal .. packet error..' disappear thanks

Re: stop the log..

mw_4 — Tue, 11 Jun 2002 22:44:08 GMT

masanari iida..!!

I mistake the assingning points.
my problem is solved because of you ,so reply again masanari
I will give you magical answer points.