1832084 Members
3223 Online
110037 Solutions
New Discussion

Re: stop the log..

 
mw_4
Frequent Advisor

stop the log..

/var/log/messages file has been logged like that..
'Happy Meal MAX Packet size error...'
I heard that is kind of DOS(Denial Of Service)
it is continuously logged and I have been searched the way stoping DOS
How can I stop the attack
Step by step
6 REPLIES 6
I_M
Honored Contributor

Re: stop the log..

Hi,

I am not sure if this is a DOS attack or not.
If it is so, can you tell the source IP of the packet?
Can you block the packets' IP using ipchains / iptables?

The other possibility is, checkout the negotiation between hub/switch and your server. One report on the web said this error message happened when autonegotiation failed.

check your dmesg and /sbin/mii-tool to find the speed and duplex of the LAN.

good luck

mw_4
Frequent Advisor

Re: stop the log..

how can i know Linux is on the auto-negotiation
I think what you said , and I am sure your reply is right but this is not only auto nego.. but also ip aliasing problem .
'Linux redhat 2.2.14-5.0 sparc64' that is my platform
Linux on sparc is not common
and I have tested ip aliasing
but results is bad.

I post kernet routing table we have configured.

see that attaced file

Step by step
I_M
Honored Contributor

Re: stop the log..

Hello again,

I am not familiar with RH on Sparc. All I can say is , on IA32.

For example, my NIC on the server, Intel EtherPro100 have 2 drivers.
eepro100 and e100.
Their default is auto-nego. But I can configure it as "FIXed Speed" ,if I pass some options.
I guess your driver for NIC has something like that.
eepro100 never show the connection speed on dmesg. But e100 shows current connection spped and duplex mode.
How about yours?

Checkout inside of driver source or developer's web page would be good idea to find auto-nego info.

Regards,

Hal Rottenberg
Frequent Advisor

Re: stop the log..

Moving this thread to the Networking category. "secure OS software for Linux" is the category to discuss HP's hardended Linux platform. Details on it are available here:

http://www.hp.com/security/products/linux/

Thanks

-hal
If at first you don't succeed, then skydiving isn't for you.
mw_4
Frequent Advisor

Re: stop the log..

'Happy Meal.. packet..' logs are no longer generated.
I noticed that full duplex mode on the switch was fixed
change the mode half first then 'Happy Meal .. packet error..' disappear thanks
Step by step
mw_4
Frequent Advisor

Re: stop the log..

masanari iida..!!

I mistake the assingning points.
my problem is solved because of you ,so reply again masanari
I will give you magical answer points.
Step by step