Displaying 3 results from an estimated 3 matches for "listendrop".
Did you mean:
listendrops
2018 Jul 20
2
database node / possible SYN flooding on port 3306
...3306. Sending cookies.
possible SYN flooding on port 3306. Sending cookies.
possible SYN flooding on port 3306. Sending cookies.
I adapted already following:
# sysctl -a |grep -E 'maxconn|syn_backlog'
net.core.somaxconn = 2048
net.ipv4.tcp_max_syn_backlog = 2048
but ListenOverflows and ListenDrops values are still high
# cat /proc/net/netstat | awk '{print $21 "-" $22 }'
ListenOverflows-ListenDrops
13568-13568
any suggestion?
--
Thanks,
LF
2018 Jul 21
1
database node / possible SYN flooding on port 3306
...looding on port 3306. Sending cookies.
>>
>>
>> I adapted already following:
>>
>> # sysctl -a |grep -E 'maxconn|syn_backlog'
>> net.core.somaxconn = 2048
>> net.ipv4.tcp_max_syn_backlog = 2048
>>
>>
>> but ListenOverflows and ListenDrops values are still high
>>
>> # cat /proc/net/netstat | awk '{print $21 "-" $22 }'
>> ListenOverflows-ListenDrops
>> 13568-13568
>>
>> any suggestion?
>
> Use tools like tcpdump/wireshark and further examination of logfiles to
> det...
2018 Jul 20
0
database node / possible SYN flooding on port 3306
...rt 3306. Sending cookies.
> possible SYN flooding on port 3306. Sending cookies.
>
>
> I adapted already following:
>
> # sysctl -a |grep -E 'maxconn|syn_backlog'
> net.core.somaxconn = 2048
> net.ipv4.tcp_max_syn_backlog = 2048
>
>
> but ListenOverflows and ListenDrops values are still high
>
> # cat /proc/net/netstat | awk '{print $21 "-" $22 }'
> ListenOverflows-ListenDrops
> 13568-13568
>
> any suggestion?
Use tools like tcpdump/wireshark? and further examination of logfiles to
determine where your attack is coming from...