SYN attacks from nagios

Donnell Lewis donnell.lewis at icoretechnology.com
Thu Sep 14 19:41:34 CEST 2006


Did the 'ping' command check itself change from the 2 different
versions ?  Check in checkcommands.cfg, see if the command definition is
the same between the two.

-DL

On Thu, 2006-09-14 at 17:07 +0100, rob.moss at uk.bnpparibas.com wrote:
> nagios-users-bounces at lists.sourceforge.net wrote on 14/09/2006 17:00:29:
> 
> > Good morning,
> >
> > I have 2 nagios servers.  One is running 1.2 and the other is running
> > 2.5.  Both are running in parallel while I migrate to the 2.5 machine.
> >  Our content switch is detecting that the 2.5 machine is SYN attacking
> > hosts.  Both servers have very similar monitoring sets and similar
> > configurations.  I have gone through the config and nothing stands
> > out.  Obviously, the 2.5 machine is pounding the servers more heavily
> > but I can't figure out why.  Below is my config.
> >
> 
> Good evening!
> 
> <config snipped>
> 
> What checks are you running against the server that is detecting the SYN
> attacks?
> 
> The config you posted is the general nagios config, we would need to see
> the services.cfg portions for the affected host(s)
> 
> Cheers
> 
> 
> This message and any attachments (the "message") is 
> intended solely for the addressees and is confidential. 
> If you receive this message in error, please delete it and
> immediately notify the sender. Any use not in accord with
> its purpose, any dissemination or disclosure, either whole
> or partial, is prohibited except formal approval. The internet
> can not guarantee the integrity of this message.
> BNP PARIBAS (and its subsidiaries) shall (will) not
> therefore be liable for the message if modified. 
> 
> **********************************************************************************************
> 
> BNP Paribas Private Bank London Branch is authorised
> by CECEI & AMF and is regulated by the Financial Services
> Authority for the conduct of its investment business in
> the United Kingdom.
> 
> BNP Paribas Securities Services London Branch is authorised 
> by CECEI & AMF and is regulated by the Financial Services 
> Authority for the conduct of its investment business in 
> the United Kingdom.
>   
> BNP Paribas Fund Services UK Limited is authorised and 
> regulated by the Financial Services Authority
> 
> 
> -------------------------------------------------------------------------
> Using Tomcat but need to do more? Need to support web services, security?
> Get stuff done quickly with pre-integrated technology to make your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
> _______________________________________________
> Nagios-users mailing list
> Nagios-users at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nagios-users
> ::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list