Re: DoS attack against TCP services

[christos%zoulas.com@localhost (Christos Zoulas)]

On Feb 28,  8:26pm, 6bone%6bone.informatik.uni-leipzig.de@localhost (6bone%6bone.informatik.uni-leipzig.de@localhost) wrote:
-- Subject: Re: DoS attack against TCP services

| On Sat, 28 Feb 2015, Christos Zoulas wrote:
| >
| > Yes, that's a good start but we need to find which process that
| > lwp belongs to.
| 
| I'm not sure what the best course of action is. The machine is still 
| running. Should you try to get the information from the current system or 
| force a dump and analyze this?
| 
| On Sat, 28 Feb 2015, J. Hannken-Illjes wrote:
| >
| > Looks unlocked -- what about a backtrace of thread 0.5,
| > bt /a 0xfffffe882df11860
| 
| https://www.ipv6.uni-leipzig.de/bt_0xfffffe882df11860.png

So who else is holding the sysmon sme_mtx?

christos