Print

Print


The previous crash didnšt write a dump because its working dir was in / (in a singularity container). I have since changed the working dir to a bind mount path so hopefully we will get a dump if this happen again.

--
Wei Yang  |  [log in to unmask]  |  650-926-3338(O)







-----Original Message-----
From: Brian Bockelman <[log in to unmask]>
Date: Monday, April 2, 2018 at 3:48 PM
To: Wei Yang <[log in to unmask]>
Cc: Fabrizio Furano <[log in to unmask]>, Radu Popescu <[log in to unmask]>, xcache-l <[log in to unmask]>
Subject: Re: Xcache for CVMFS crash due to attack

>Hi Wei,
>
>Any chance you got a core dump from this?
>
>I am not tracking any known crashing bugs myself.
>
>RHEL6 or RHEL7?
>
>Brian
>
>Sent from my iPhone
>
>> On Apr 2, 2018, at 5:16 PM, Yang, Wei <[log in to unmask]> wrote:
>> 
>> For the record:
>> 
>> We have an instance of Xcache to serve CVMFS for SLAC batch nodes. It crashed this morning after receiving ~9.5K non-handshake connections from sn160.s02.sjc01.qualys.com in 5 seconds (did our friend Artem Harutyunyan used to work at Qualys? I know he left a long time ago). 
>> 
>> I don?t know if there is a remedy to this. I will setup a firewall rule before I restarting the Xcache.
>> 
>> regards,
>> --
>> Wei Yang  |  [log in to unmask]  |  650-926-3338(O)
>> 
>> ########################################################################
>> Use REPLY-ALL to reply to list
>> 
>> To unsubscribe from the XCACHE-L list, click the following link:
>> https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XCACHE-L&A=1
>

########################################################################
Use REPLY-ALL to reply to list

To unsubscribe from the XCACHE-L list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XCACHE-L&A=1