[Dshield] BIND 9.2.2 croaking...

Jon R. Kibler Jon.Kibler at aset.com
Wed Sep 10 18:59:10 GMT 2003


John Hardin wrote:
> 
> On Tue, 2003-09-09 at 20:43, Jon R. Kibler wrote:
> > Here is what syslog has to say... (edited, of course)
> > > Sep  9 16:03:05 ABC named[4152]: shutting down
> > > Sep  9 16:03:05 ABC named[4152]: stopping command channel on 127.0.0.1#xxxx
> > > Sep  9 16:03:05 ABC named[4152]: no longer listening on 127.0.0.1#53
> > > Sep  9 16:03:05 ABC named[4152]: no longer listening on 10.5.2.101#53
> > > Sep  9 16:03:05 ABC named[4152]: no longer listening on a.b.c.d#53
> > > Sep  9 16:03:05 ABC named[4152]: no longer listening on a.b.c.e#53
> > > Sep  9 16:03:05 ABC named[4152]: no longer listening on a.b.c.f#53
> > > Sep  9 16:03:05 ABC named[4152]: no longer listening on a.b.c.g#53
> > > Sep  9 16:03:06 ABC named[4152]: exiting
> 
> That doesn't look like an ABEND. How many DoS exploits cause the service
> to gracefully exit (vs. die quietly/messily) ?
> 
>

That's what REALLY got me bugged. I'm just capturing data, waiting for it to happen again.

(Naturally, Murphy is working against me. We had three crashes over two days -- but now that I am running tons of logging, none so far today. Hopefully, Murphy will keep up the good work. Actually, he will probably bite me about 0.002ms after the logs fill up the 10GB partition I have allocated for them!)

Jon Kibler
A.S.E.T., Inc.
Charleston, SC  USA




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



More information about the list mailing list