Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753837AbcCMAMF (ORCPT ); Sat, 12 Mar 2016 19:12:05 -0500 Received: from violet.fr.zoreil.com ([92.243.8.30]:42129 "EHLO violet.fr.zoreil.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752932AbcCMAL5 (ORCPT ); Sat, 12 Mar 2016 19:11:57 -0500 Date: Sun, 13 Mar 2016 01:11:55 +0100 From: Francois Romieu To: Toralf =?utf-8?Q?F=C3=B6rster?= Cc: netdev@vger.kernel.org, Linux Kernel Subject: Re: SYN flooding on port 80 + DMAR:[DMA Write] faults Message-ID: <20160313001155.GA21952@electric-eye.fr.zoreil.com> References: <56E4A30A.2060800@gmx.de> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <56E4A30A.2060800@gmx.de> X-Organisation: Land of Sunshine Inc. User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 333 Lines: 9 Toralf Förster : > Today my server (64 bit hardened Gentoo kernel) was faced a SYN-flood attack. > I do wonder if the DMAR events points to an issue in the kernel ? Please send a compressed log including all 'fault addr' lines as well as the (module probe time) XID line from the r8169 driver. -- Ueimor