strange messages

From: Shouben Zhou (zshouben@nianet.org)
Date: Fri Aug 20 2004 - 09:15:55 EDT


This is first time I have seen this message recorded under /var/adm/messages:

Aug 19 23:28:28 urchin.nianet.org tcp: [ID 995438 kern.warning] WARNING: High
TCP connect timeout rate! System (port 139) may be under a SYN flood attack!

Is the node "urchin" under attack and where should I look into?

This node is behind firewall, but is open to accept the outside connection.

--
Shouben Zhou 
National Institute of Aerospace (NIA)
144 Research Dr., Hampton, VA 23666
Tel: (757) 766-1809   Fax:  (757) 766-1401
Cel: (757) 613-2189 Email: zshouben@nianet.org
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers


This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:29:19 EDT