TCLUG Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [TCLUG:2438] Somethings going to cost me a zillion dollars unless you help



> -----Original Message-----
> From: Andrew McCulloh [mailto:mcculloh@2z.net]
> Sent: Tuesday, December 01, 1998 11:32 PM
> To: tclug-list@listserv.real-time.com
> Subject: [TCLUG:2438] Somethings going to cost me a zillion dollars
> unless you help
>
>
> You might try running netstat or looking in /proc/net to see what is
> happening. It might give you a clue.
>
> Andrew


	Good advice.  Also, /var/log/messages, /var/log/maillog, and really
/var/log/* should hold some clues.  If you can get the system to hangup and
then figure out what's happening at the exact moment that it reestablishes
connection (via "netstat -c" or "tail -f /var/log/messages", etc.) you'll
have it.
	The culprits I'd be suspecting initially are smbd/nmbd (samba), snmpd,
sendmail (check if there's a message "stuck" in the queue) or some inetd
process like nntpd.  Obviously a cron job might do it, but I can't think of
one you'd have set up by default that would run every minute or so...
	If you're not using samba on your system, I'd recommend disabling it.  The
same goes for snmpd -- that one can be a real security hazard if it's
misconfigured.  You might also want to comb through /etc/inetd/conf and
comment out all the services you think you can live without.