Страница 1 из 1

ARP и зависание сервера

Добавлено: 2011-06-22 7:45:59
savio
Сегодня утром пришло уведомление, что не доступен сервер.
В консоли следующие записи
...
Jun 22 06:25:29 savio kernel: arp: 0.0.0.0 moved from 00:21:91:8b:50:7e to 00:18:f3:7e:40:fb on ste0
Jun 22 06:25:46 savio kernel: arp: 0.0.0.0 moved from 00:18:f3:7e:40:fb to 00:24:8c:c2:e7:5e on ste0
Jun 22 06:28:37 savio kernel: arp: 0.0.0.0 moved from 00:24:8c:c2:e7:5e to 00:26:22:d2:fc:de on ste0
Jun 22 06:30:43 savio kernel: arp: 0.0.0.0 moved from 00:26:22:d2:fc:de to 00:13:77:38:ce:b1 on ste0
Jun 22 06:31:10 savio kernel: arp: 0.0.0.0 moved from 00:13:77:38:ce:b1 to 00:26:22:d2:fc:de on ste0
Jun 22 06:32:13 savio kernel: arp: 0.0.0.0 moved from 00:26:22:d2:fc:de to 48:5b:39:96:ae:de on ste0
Jun 22 06:33:20 savio kernel: arp: 0.0.0.0 moved from 48:5b:39:96:ae:de to 60:eb:69:57:63:a5 on ste0
Jun 22 06:34:02 savio kernel: arp: 0.0.0.0 moved from 60:eb:69:57:63:a5 to bc:ae:c5:4e:0d:7e on ste0
Jun 22 06:35:08 savio kernel: arp: 0.0.0.0 moved from bc:ae:c5:4e:0d:7e to 00:26:9e:91:e0:ef on ste0
Jun 22 06:37:04 savio kernel: arp: 0.0.0.0 moved from 00:26:9e:91:e0:ef to 94:0c:6d:ca:a8:6f on ste0
Jun 22 06:37:19 savio kernel: arp: 0.0.0.0 moved from 94:0c:6d:ca:a8:6f to 54:e6:fc:ba:33:31 on ste0
Jun 22 06:37:45 savio kernel: arp: 0.0.0.0 moved from 54:e6:fc:ba:33:31 to 2c:81:58:ee:c0:af on ste0
Jun 22 06:39:11 savio kernel: arp: 0.0.0.0 moved from 2c:81:58:ee:c0:af to 00:24:54:d8:82:b5 on ste0
Jun 22 06:39:40 savio kernel: arp: 0.0.0.0 moved from 00:24:54:d8:82:b5 to 00:1f:16:af:f4:e3 on ste0
Jun 22 06:40:19 savio kernel: arp: 0.0.0.0 moved from 00:1f:16:af:f4:e3 to 20:cf:30:c3:25:27 on ste0
Jun 22 06:40:33 savio kernel: arp: 0.0.0.0 moved from 20:cf:30:c3:25:27 to 00:1b:fc:ed:62:4b on ste0
Jun 22 06:40:48 savio kernel: arp: 0.0.0.0 moved from 00:1b:fc:ed:62:4b to 00:22:15:14:c8:b3 on ste0
Jun 22 06:41:02 savio kernel: arp: 0.0.0.0 moved from 00:22:15:14:c8:b3 to 00:1f:c6:c3:de:5d on ste0
Jun 22 06:41:43 savio kernel: arp: 0.0.0.0 moved from 00:1f:c6:c3:de:5d to 00:24:01:01:80:d2 on ste0
Jun 22 06:42:48 savio kernel: arp: 0.0.0.0 moved from 00:24:01:01:80:d2 to 6c:f0:49:d2:97:71 on ste0
Jun 22 06:43:36 savio kernel: arp: 0.0.0.0 moved from 6c:f0:49:d2:97:71 to 00:1d:60:47:5f:9b on ste0
Jun 22 06:43:45 savio kernel: arp: 0.0.0.0 moved from 00:1d:60:47:5f:9b to 00:e0:4c:19:c0:02 on ste0
Jun 22 06:43:46 savio kernel: arp: 0.0.0.0 moved from 00:e0:4c:19:c0:02 to 48:5b:39:93:b1:0f on ste0
Jun 22 06:43:47 savio kernel: arp: 0.0.0.0 moved from 48:5b:39:93:b1:0f to 00:e0:4c:19:c0:02 on ste0
Jun 22 06:43:47 savio kernel: arp: 0.0.0.0 moved from 00:e0:4c:19:c0:02 to 48:5b:39:93:b1:0f on ste0
Jun 22 06:43:48 savio kernel: arp: 0.0.0.0 moved from 48:5b:39:93:b1:0f to 00:e0:4c:19:c0:02 on ste0
Jun 22 06:43:49 savio kernel: arp: 0.0.0.0 moved from 00:e0:4c:19:c0:02 to 48:5b:39:93:b1:0f on ste0
Jun 22 06:43:51 savio kernel: arp: 0.0.0.0 moved from 48:5b:39:93:b1:0f to 00:1d:60:47:5f:9b on ste0
Jun 22 06:44:40 savio kernel: arp: 0.0.0.0 moved from 00:1d:60:47:5f:9b to 00:22:15:54:c2:c9 on ste0
Jun 22 06:45:49 savio kernel: arp: 0.0.0.0 moved from 00:22:15:54:c2:c9 to 00:23:df:83:76:6a on ste0
Jun 22 06:47:05 savio kernel: arp: 0.0.0.0 moved from 00:23:df:83:76:6a to 88:ae:1d:0a:7f:7f on ste0
Jun 22 06:49:23 savio kernel: arp: 0.0.0.0 moved from 88:ae:1d:0a:7f:7f to 00:1e:ec:71:b9:18 on ste0
Jun 22 06:50:15 savio kernel: arp: 0.0.0.0 moved from 00:1e:ec:71:b9:18 to 78:ac:c0:3f:6e:d1 on ste0
Jun 22 06:51:41 savio kernel: arp: 0.0.0.0 moved from 78:ac:c0:3f:6e:d1 to 00:1d:92:09:fb:a1 on ste0
Jun 22 06:53:29 savio kernel: arp: 0.0.0.0 moved from 00:1d:92:09:fb:a1 to 48:5b:39:4f:c6:4f on ste0
Jun 22 06:54:23 savio kernel: arp: 0.0.0.0 moved from 48:5b:39:4f:c6:4f to 00:e0:4d:60:45:c0 on ste0
Jun 22 06:55:40 savio kernel: arp: 0.0.0.0 moved from 00:e0:4d:60:45:c0 to 00:18:f3:7e:40:fb on ste0
Jun 22 06:56:05 savio kernel: arp: 0.0.0.0 moved from 00:18:f3:7e:40:fb to 00:1c:23:aa:ec:c0 on ste0
Jun 22 06:56:18 savio kernel: arp: 0.0.0.0 moved from 00:1c:23:aa:ec:c0 to 00:1d:60:2c:29:7c on ste0
Jun 22 06:56:44 savio kernel: arp: 0.0.0.0 moved from 00:1d:60:2c:29:7c to 00:1d:92:ac:24:ef on ste0
Jun 22 06:57:23 savio kernel: arp: 0.0.0.0 moved from 00:1d:92:ac:24:ef to 1c:75:08:46:ab:f1 on ste0
Jun 22 06:58:28 savio kernel: arp: 0.0.0.0 moved from 1c:75:08:46:ab:f1 to 00:0c:6e:d7:5e:73 on ste0
Jun 22 06:58:47 savio kernel: arp: 0.0.0.0 moved from 00:0c:6e:d7:5e:73 to 00:1f:d0:dd:c9:7f on ste0
Jun 22 07:00:31 savio kernel: arp: 0.0.0.0 moved from 00:1f:d0:dd:c9:7f to 48:5b:39:82:78:c9 on ste0
Jun 22 07:00:51 savio kernel: arp: 0.0.0.0 moved from 48:5b:39:82:78:c9 to e0:cb:4e:10:a8:4d on ste0
Jun 22 07:00:56 savio kernel: arp: 0.0.0.0 moved from e0:cb:4e:10:a8:4d to 20:cf:30:de:81:f9 on ste0
Jun 22 07:00:59 savio kernel: arp: 0.0.0.0 moved from 20:cf:30:de:81:f9 to e0:cb:4e:10:a8:4d on ste0
Jun 22 07:01:06 savio kernel: arp: 0.0.0.0 moved from e0:cb:4e:10:a8:4d to 00:23:54:66:35:70 on ste0
Что это такое? (на arp спуфинг не похоже вроде) Гугл молчит как партизан. И может ли это вызывать зависание сервера?
Система на нажатие клавиатуры никак не реагировала. Помог только reset

Re: ARP и зависание сервера

Добавлено: 2011-06-22 8:42:16
bagas
кто-то снифирит. попробуй привязать ip к маку.

Re: ARP и зависание сервера

Добавлено: 2011-06-22 13:46:33
savio
ste0 смотрит к провайдеру. ip получаю по dhcp. привязать ip к маку проблем нету. Я не могу понять сути этих записей. Все маки в логе левые, у меня таких нету

Re: ARP и зависание сервера

Добавлено: 2011-06-22 22:17:58
mak_v_
если в двух словах: сделайте привязку мака провайдера и его IP у себя на интерфейсе смотрящем на провайдера, таким образом никто не сможет "прикинуться" вашим провайдером