紧急求助！dst cache overflow！怀疑被攻击！

houshuang

Jul  5 17:54:56 VS kernel: printk: 14677 messages suppressed.
Jul  5 17:54:56 VS kernel: dst cache overflow
Jul  5 17:55:01 VS kernel: printk: 14262 messages suppressed.
Jul  5 17:55:01 VS kernel: dst cache overflow
Jul  5 17:55:06 VS kernel: printk: 14377 messages suppressed.
Jul  5 17:55:06 VS kernel: dst cache overflow
Jul  5 17:55:11 VS kernel: printk: 14628 messages suppressed.
Jul  5 17:55:11 VS kernel: dst cache overflow
Jul  5 17:55:16 VS kernel: printk: 14540 messages suppressed.
Jul  5 17:55:16 VS kernel: dst cache overflow
Jul  5 17:55:21 VS kernel: printk: 14385 messages suppressed.
Jul  5 17:55:21 VS kernel: dst cache overflow

当出现这些提示的时候，服务器负载特别高，然后掉线。

eth0      Link encap:Ethernet  HWaddr 00:0A:EB:4B:5D:82  
                 inet6 addr: fe80::20a:ebff:fe4b:5d83/64 Scopeink
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:65847289 errors:13542501 dropped:24755796 overruns:2278260 frame:0
          TX packets:30654926 errors:0 dropped:0 overruns:4 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1547144953 (1.4 GiB)  TX bytes:4017267325 (3.7 GiB)
          Interrupt:209 Base address:0xb800


eth0的错误包特别多，请高手指教！在线等。

memory

如果你的服务器是网关的话，出现这种情况通常是由内网有病毒造成的。

houshuang

出错误包的网卡，是外网网卡，也是内网攻击吗？

houshuang

顶一下顶一下顶一下

晨想

内网想往外网发送东西嘛。呵呵。

houshuang

route -Cn出现很多下面的路由


64.77.48.40||58.61.32.100||58.61.32.100||l||0||0||1||lo
146.28.122.41||58.61.32.100||58.61.32.100||l||0||0||1||lo
1.66.52.39||58.61.32.100||58.61.32.100||l||0||0||1||lo
145.67.154.100||58.61.32.100||58.61.32.100||l||0||0||1||lo
135.13.200.113||58.61.32.100||58.61.32.100||l||0||0||1||lo
86.66.33.76||58.61.32.100||58.61.32.100||l||0||0||1||lo
207.121.13.3||58.61.32.100||58.61.32.100||l||0||0||0||lo
168.108.59.122||58.61.32.100||58.61.32.100||l||0||0||1||lo
105.100.141.7||58.61.32.100||58.61.32.100||l||0||0||1||lo
181.35.110.40||58.61.32.100||58.61.32.100||l||0||0||0||lo
61.11.141.56||58.61.32.100||58.61.32.100||l||0||0||1||lo
80.51.186.85||58.61.32.100||58.61.32.100||l||0||0||1||lo
73.4.64.21||58.61.32.100||58.61.32.100||l||0||0||0||lo
222.45.195.97||58.61.32.100||58.61.32.100||l||0||0||0||lo
7.3.255.25||58.61.32.100||58.61.32.100||l||0||0||0||lo
26.89.158.68||58.61.32.100||58.61.32.100||l||0||0||0||lo
204.123.254.108||58.61.32.100||58.61.32.100||l||0||0||0||lo
210.26.0.54||58.61.32.100||58.61.32.100||l||0||0||1||lo
59.12.251.7||58.61.32.100||58.61.32.100||l||0||0||1||lo
71.115.211.14||58.61.32.100||58.61.32.100||l||0||0||1||lo
119.70.116.4||58.61.32.100||58.61.32.100||l||0||0||1||lo||



其中58.61.32.100是我外网的IP

houshuang

另外。route -Cn 中的路由，可以删除吗？