Hello all,

I've experienced an unusual (at least for me) network problem for a couple
of weeks.
Our server is an IBM 346 with
3 GHz. Xeon processor,
two Broadcom gigabit ethernet,
1 GB RAM,
72 GB SCSI HDD
etc.

Server runs with NetBSD 3.1. Applications we are using is Apache 2, MySQL,
SpamAssassin,
ClamAV and mail and DNS services. It was working nearly 2 years without
problem.

I'm observing a network problem. Server doesn't permit network connections
until reboot.
I can access server console and doesn't appear any error or warning.
"netstat -w 3" produced this output below: (We are using 512K bandwith)

 bge0 in       bge0 out              total in      total out
 packets  errs  packets  errs colls   packets  errs  packets  errs colls
 1797220  1884  2941122     0     0   1850096  2954  2990324     0     0
       0    11        0     0     0         0    17        2     0     0
       0     8        2     0     0         0    10        3     0     0
       0    12        3     0     0         0    15        3     0     0
       0    11        1     0     0         0    14        1     0     0
       0     7        1     0     0         0     8        1     0     0
       0     9        0     0     0         0    10        0     0     0
       0     7        2     0     0         0     9        2     0     0
       0     8        6     0     0         0    12        7     0     0
       0    13        3     0     0         0    14        3     0     0
       0     3        1     0     0         0     5        1     0     0
       0     6        1     0     0         0     9        1     0     0
       0     6        0     0     0         0    17        0     0     0
       0    10        0     0     0         0    16        0     0     0
       0     6        2     0     0         0    12        2     0     0
       0    10        3     0     0         0    10        3     0     0

I replaced ethernet cables, changed ethernet which server used for
connection, even changed server itself.
Results are the same.

Is this a serious problem, or any ideas? Is there any known DoS attack for
this result?

TIA
Mustafa Dogan