[hobbit] Write error while sending message to bbd
pkc_mls
pkc_mls at yahoo.fr
Fri Jun 15 10:11:35 CEST 2007
Hong James-q19252 a écrit :
> Solaris OS log is all normal.
>
> netstat -a find ten thousand duplicate lines:
>
> 10.192.200.3.6879 10.192.200.8.56524 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.12.38677 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.13.52591 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.11.52936 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.5.43768 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.8.56525 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.12.38678 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.13.52592 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.11.52937 49640 0 49640 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.5.43769 49640 0 49560 0 TIME_WAIT
> 10.192.200.3.6879 10.192.200.8.56526 49640 0 49640 0 TIME_WAIT
>
>
quite strange. this looks like a port scan ...
could you check with an lsof which process runs so many connections ?
More information about the Xymon
mailing list