RE: significant increase in ipfw pullup failed

From: Daniel Eriksson <daniel_k_eriksson_at_telia.com>
Date: Fri, 22 Apr 2005 19:34:59 +0200
Randy Bush wrote:

> previously i got an ipfw pullup failed a couple of times a day
> now i get them every few minutes

I've gone from naver having seen one to 5-10 per day over the last week.
Intel Pro/1000 (em) network card in one of the servers, VIA Rhine II (vr) in
the other. They seem to happen at the same time on both servers even though
they are hooked up to a switch, so that means some sort of broadcast.

Could be the result of some new virus perhaps? At least one machine on the
local segment is spamming snmp-trap broadcasts, possibly indicating some
sort of virus propagation.

/Daniel Eriksson
Received on Fri Apr 22 2005 - 15:35:04 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:32 UTC