My ASL 5.203 box endured a catastrophic failure last night.
All functions stopped: ssh webadmin networking etc... "T-U" as they say.
The logs show memory usage and network traffic (including loopback) all dropping to ZERO while packet filter logs show continued traffic inboundn on the external interface. Webadmin and ssh connections all failed.
Below are the system logs. Please note I was downloading a version of linux and my command shell intrusion protection settings were to report but not block. It's possible that too many alerts caused this failure but there's no way that I can see to check this.
System Logs:
2005:06:20-19:16:18 (none) daemon-watcher[629]: Watching selfmonng.pl - running fine
2005:06:20-19:17:36 (none) ips-reporter[30003]: Intrusion Protection Event
2005:06:20-19:17:36 (none) ips-reporter[30003]: Intrusion Protection Event
2005:06:20-19:17:37 (none) ips-reporter[30003]: Intrusion Protection Event - Event buffering activated
2005:06:20-19:20:00 (none) /USR/SBIN/CRON[12147]: (root) CMD ( /usr/local/bin/reportcontrol.sh)
2005:06:20-19:24:29 (none) dhcpcd[20641]: sending DHCP_REQUEST for 24.41.50.233 to 68.87.66.30
2005:06:20-19:24:30 (none) dhcpcd[20641]: DHCP_ACK received from (68.87.66.30)
2005:06:20-19:25:00 (none) /USR/SBIN/CRON[12195]: (root) CMD ( /usr/local/bin/reportcontrol.sh)
2005:06:20-22:48:24 (none) syslog-ng[217]: syslog-ng version 1.6.0rc4 starting
2005:06:20-22:48:31 (none) /usr/sbin/cron[308]: (CRON) STARTUP (fork ok)
2005:06:20-22:48:31 (none) init: Switching to runlevel: 3
2005:06:20-22:48:54 (none) syslog-ng[217]: Changing permissions on special file /dev/null.syslog
2005:06:20-22:48:59 (none) daemon-watcher[628]: This is daemon-watcher v1.1 2004/02/11 11:56:23 ghansen starting...
2005:06:20-22:48:59 (none) daemon-watcher[628]: Watching selfmonng.pl...
Any Ideas?
This thread was automatically locked due to age.
