My server is being attacked (SYN flood attack) and what I see in
/var/log/messages is a ton of:
r8169: eth0: link up r8169: eth0: link up r8169: eth0: link up
1. What does this mean?
I can't access the server during the attack, but I also can't access it after the flood has stopped, I have to restart the server.
2. Is it possible to avoid this restart? Is it possible to "autoreset" the connection without restarting the server manually?
Additional information: Ubuntu server 10.04 64 bits 8GB RAM, dual core. Firewall: CSF (IPTables)
SYN flood attack against port 80 (apache2) with up to 50-70Mbps traffic
EDIT: @TimHaegele was right, it is a driver problem, once Ubuntu was upgraded the problem gone.