The Question and Answer Board

[Bob Zumbrunnen]

We're still not sure just what the heck happened this afternoon, but something happened with one of our machines that took out the whole ISP for about half an hour. At first we suspected Slammer on SI's new database box, which I was still in the middle of reconstructing (so it would recognize its new hard drives and include them as part of the C drive), but it wasn't found on it and now that box is finished and has the latest patches.

A possible DoS attack against iHub was also suggested as a possibility.

When the ISP initially got flooded, they yanked the connection to all of our machines. The flooding started to slow down. They turned off the new DB box and plugged us back in and the flooding started again. They rebooted the 3 webservers, waited a while, plugged us back in, and everything was working fine.

So we're all still scratching our heads and trying to figure out what happened and how to prevent it happening again. Hopefully the answer will also answer why IIS has been dying about once a day on the new webserver.