帮忙看看日志里头是不是有问题？

猪仔很忙

新手，还不太懂，下午机器ping不通，机房重启后进入又正常了，不太看得懂日志，懂的帮忙简单看下，谢谢了噢

ku@pic[/var/log]tail -n 50 messages Jan 16 17:49:16 pic kernel: atapci0: <Intel 63XXESB2 UDMA100 controller> port 0x1f0-0x1f7,0x3f6,0x170-0x177,0x376,0x500-0x50f irq 17 at device 31.1 on pci0 Jan 16 17:49:16 pic kernel: ata0: <ATA channel 0> on atapci0 Jan 16 17:49:16 pic kernel: ata1: <ATA channel 1> on atapci0 Jan 16 17:49:16 pic kernel: acpi_tz0: <Thermal Zone> on acpi0 Jan 16 17:49:16 pic kernel: atkbdc0: <Keyboard controller (i8042)> port 0x60,0x64 irq 1 on acpi0 Jan 16 17:49:16 pic kernel: atkbd0: <AT Keyboard> irq 1 on atkbdc0 Jan 16 17:49:16 pic kernel: kbd0 at atkbd0 Jan 16 17:49:16 pic kernel: atkbd0: [GIANT-LOCKED] Jan 16 17:49:16 pic kernel: psm0: <PS/2 Mouse> irq 12 on atkbdc0 Jan 16 17:49:16 pic kernel: psm0: [GIANT-LOCKED] Jan 16 17:49:16 pic kernel: psm0: model Generic PS/2 mouse, device ID 0 Jan 16 17:49:16 pic kernel: sio0: <Standard PC COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0 Jan 16 17:49:16 pic kernel: sio0: type 16550A Jan 16 17:49:16 pic kernel: pmtimer0 on isa0 Jan 16 17:49:16 pic kernel: orm0: <ISA Option ROMs> at iomem 0xc0000-0xcafff,0xe6000-0xe7fff on isa0 Jan 16 17:49:16 pic kernel: ppc0: parallel port not found. Jan 16 17:49:16 pic kernel: sc0: <System console> at flags 0x100 on isa0 Jan 16 17:49:16 pic kernel: sc0: VGA <16 virtual consoles, flags=0x300> Jan 16 17:49:16 pic kernel: sio1 at port 0x2f8-0x2ff irq 3 on isa0 Jan 16 17:49:16 pic kernel: sio1: type 16550A Jan 16 17:49:16 pic kernel: vga0: <Generic ISA VGA> at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 Jan 16 17:49:16 pic kernel: Timecounters tick every 1.000 msec Jan 16 17:49:16 pic kernel: acd0: CDROM <CD-224E/2.7B> at ata0-master UDMA33 Jan 16 17:49:16 pic kernel: SMP: AP CPU #1 Launched! Jan 16 17:49:16 pic kernel: SMP: AP CPU #2 Launched! Jan 16 17:49:16 pic kernel: SMP: AP CPU #3 Launched! Jan 16 17:49:16 pic kernel: da0 at ciss0 bus 0 target 0 lun 0 Jan 16 17:49:16 pic kernel: da0: <COMPAQ RAID 5  VOLUME OK> Fixed Direct Access SCSI-0 device Jan 16 17:49:16 pic kernel: da0: 135.168MB/s transfers Jan 16 17:49:16 pic kernel: da0: 279964MB (573367600 512 byte sectors: 255H 32S/T 65535C) Jan 16 17:49:16 pic kernel: Trying to mount root from ufs:/dev/da0s1a Jan 16 17:49:17 pic kernel: bce0: link state changed to UP Jan 16 18:07:30 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 18:09:02 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 18:18:35 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 19:52:34 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 19:59:32 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 20:38:51 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 20:53:05 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 21:02:10 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 22:26:54 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 22:31:07 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 22:34:22 pic su: kun to root on /dev/ttyp0 Jan 16 23:05:11 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 23:16:30 pic arp: gethostby*.gethostanswer: asked for "254.218.73.222.in-addr.arpa IN PTR", got type "A" Jan 16 23:27:35 pic mysqld[911]: gethostby*.gethostanswer: asked for "82.80.129.61.in-addr.arpa IN PTR", got type "A" Jan 16 23:30:55 pic kernel: arp: 00:0f:1f:64:c8:07 attempts to modify permanent entry for 222.73.218.254 on bce0 Jan 16 23:31:01 pic last message repeated 2837 times

[ 本帖最后由 猪仔很忙 于 2008-1-16 23:58 编辑 ]

fadongji

帮顶

@念风

还真没看明白！

bestwc

具体有什么表现么？机器运行哪些应用？

猪仔很忙

apache PHP  mysql  就这些了

bestwc

Jan 16 23:30:55 pic kernel: arp: 00:0f:1f:64:c8:07 attempts to modify permanent entry for 222.73.218.254 on bce0
Jan 16 23:31:01 pic last message repeated 2837 times

被ARP攻击至死。
推荐使用arp -s ip:mac 方式防止ARP攻击并将其写入crontab.
简单方式可以这样做：
1,cd /usr/ports/ipguard
2,make install clean
3,man ipguard
4,enjoy~

猪仔很忙

解决了  谢谢bestwc