strange messages

2007-12-25 3:52:00

This is first time I have seen this message recorded under /var/adm/messages:

Aug 19 23:28:28 urchin.nianet.org tcp: [ID 995438 kern.warning] WARNING: High
TCP connect timeout rate! System (port 139) may be under a SYN flood attack!

Is the node "urchin" under attack and where should I look into?

This node is behind firewall, but is open to accept the outside connection.

--
Shouben Zhou
National Institute of Aerospace (NIA)
144 Research Dr., Hampton, VA 23666
Tel: (757) 766-1809 Fax: (757) 766-1401
Cel: (757) 613-2189 Email: zshouben at nianet.org

Comments

Got something to say?

You must be logged in to post a comment.