Topic: Strange things happening

[Peter Smit]

Hello everyone,

Since a few days my server is locking up for a reason I can't find.
looked in the log files and there was only one thing I never seen earlyer.
This line repeats and repeats.....

So I only copied one :

Jan  4 12:31:23 smitti kernel: denylog:IN=eth1 OUT= MAC=00:10:a7:12:03:86:00:04:80:36:*:*:*:* SRC=213.*.*.* DST=213.231.223.230 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=13512 DF PROTO=TCP SPT=2885 DPT=135 WINDOW=64240 RES=0x00 SYN URGP=0

I have changed the mac and IP whit stars.

Does someone nows wat this means?
Thanx in advance

Peter Smit

[Peter Smit]

stupid of me forgot to say its a SME 6.0 final server


Peter Smit

[gbl]

DPT=135 ??
It seems to be a Samba Problem. Try to stop samba and repost the results here.


sincerly
Guenter

[Peter Smit]

rebooted again and it won't start up at all Kernel panic just after it should mount local file systems

no rescue disk....... stupid...... lucky for me I have my data on a sec. hdd

Probally I will go back to 5.6... wa smore lucky for me than 6.03 beta and the final (mabey we should call it 6.0 stupid)

Peter Smit

[Pat Erler]

that looks like hardware problem.. check memory, CPU (temperature?)..

PAT

[Chris]

That port 135 stuff is the blaster worm. That should be unrelated to your problems..... I would say it could be a hardware issue.

[Peter Smit]

none of my windowz computers has the blasterworm,

I do think it is hardware now...
trown out al of the memory, pci cards and stil trying to find out wath the problem is,

putting at this moment redhat 9 on the sysytem and we will see......

thanx for the replies......

Peter Smit

[Charlie Brady]

Peter Smit wrote:

> Since a few days my server is locking up for a reason I can't
> find.

Nearly all lockups are hardware related - bad RAM or overheated CPU.

> So I only copied one :
>
> Jan  4 12:31:23 smitti kernel: denylog:IN=eth1 OUT=
> MAC=00:10:a7:12:03:86:00:04:80:36:*:*:*:* SRC=213.*.*.*
> DST=213.231.223.230 LEN=48 TOS=0x00 PREC=0x00 TTL=127 ID=13512
> DF PROTO=TCP SPT=2885 DPT=135 WINDOW=64240 RES=0x00 SYN URGP=0

That's the blaster worm, and everyone connected to the Internet gets hit with those - only those using Windows need worry about them.

Charlie

[Peter Smit]

yes indeed it is hardware releated.....

Trown the compaq 7592 into a corner because the motherboard seems to be the problem.
Mabey its the processor (PIII 600) ? my new server wil be the one I had for my 4 year old.

Gateway system celeron 400 512MB 40GB+80GB HDD 16MBvideo riva128

Going backwards because no money

thanx anyway all who responded

Peter Smit