widynek pisze:
Hm, a jaki progs p2p trzeba zainstalować, żeby to przetestować (tzn jaki będzie działał w sposób opisany przez Ciebie)?
Nie wiem, jaki jest mechanizm takiego p2p działającego po http, ale czemu uważasz, że zniszczy Apache ? Cały ruch na port 80 kierujesz na swój serwer z komunikatem...więc program p2p musiałby być głupi, żeby nawalać pakietami w nieskończoność.
Podaj namiar na takowy program - sprawdzę u siebie.
W jednej sieci miałem już taki przypadek, że musiałem apache'a wypiąć z danego IP, bo ilość połączeń powodowała, że nie można było stron oglądać (konkretnie LMSa).
No ale np. Winamp, reklamy GG, Google Toolbar, Windows Update...
Tu masz najświeższy atak na Apache'a:
192.168.200.61 - - [17/Apr/2008:19:39:52 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:39:53 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:39:54 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:39:55 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:39:56 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:39:57 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:39:58 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:39:59 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:00 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:01 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:02 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:04 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:05 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:06 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:07 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:09 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:10 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.61 - - [17/Apr/2008:19:40:11 +0200] "GET /firefox?client=firefox-a&rls=org.mozilla:pl:official HTTP/1.1" 200 6900 "http://pl.start2.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:pl..." "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13"
I to przez firefoxa :-) Myślisz, że to nie położy Apache'a? A jeśli masz 500 osób...
Tu inny fragment: 192.168.200.58 - - [17/Apr/2008:18:07:00 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:02 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:03 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:05 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:06 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:08 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:09 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:11 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:13 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:14 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:16 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:18 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:19 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13" 192.168.200.58 - - [17/Apr/2008:18:07:21 +0200] "GET / HTTP/1.1" 200 6723 "http://nasza-klasa.pl/" "Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13"
No i co? Olać, czy się martwić? :P Co do P2P to był BitTorrent chyba ... a najgorszy zwierz to Azureus ...
!DSPAM:4808ebd7301531068017541!