Safari-RSS is spidering Slashdot is lookupd to blame?
Safari-RSS is spidering Slashdot is lookupd to blame?
- Subject: Safari-RSS is spidering Slashdot is lookupd to blame?
- From: Eric Dahlman <email@hidden>
- Date: Fri, 30 Sep 2005 09:43:00 -0500
Howdy all,
I think that this is related to lookupd and is therefor on topic here
but I may be wrong so any diagnostic help would be helpful. The
short of it is that a huge amount of my http traffic is getting
routed to slashdot's IP when it should not be. I will try to be
succinct but I don't really know what is relevant so I can only cut
so much.
This all started about two weeks ago on Sunday when our office was
banned from Slashdot (there are lots of geeks here and it did cause
some distress.) After contacting them they said that we were banned
for using a bot or spidering the site, there were 3000 hits in an
hour's time. So we went about trying to figure out what windows box
had a virus or linux box had been rooted, well we attached a packet
sniffer right before the NAT box to find the culprit. Lo an behold
it was my mac.
The wacky thing is that it looks like in Safari when loading the RSS
view (I have like 15 rss feeds I read in the combined view) the http
traffic was all going to slashdot and not where it belonged. For
instance an image obviously belonging to the boingboing.net feed was
requested from slashdot's http server. Later in analyzing this I
used dig to look up the IPs and they were not at all similar (so it
is not a case of the same machine hosting different sites).
Now I have always thought the web was kind of flakey and so I don't
even blink when an image link is broken or the like. So I cannot say
if this is a common or recurring thing, although I don't think my
surfing experience is what it should be on this T1.
Now I have read about problems with lookupd having its cache messed
up, could that have the effect of returing the wrong IP for an
address request. Looking in my crash logs lookupd has gone south
three times in the last couple of weeks is that telling or not? I
have attached the most recent crash log in case it might help.
Any suggestions or do I just have to firewall off my machine from the
rest of the company so Slashdot will turn us back on and I won't get
burned at the stake? Productivity is up but moral is hurting a bit...
Thanks a bunch!
-Eric
/Library/Logs/lookupd.crash.log
*********
Host Name: Omppu
Date/Time: 2005-09-26 16:27:41.423 -0500
OS Version: 10.4.2 (Build 8C46)
Report Version: 3
Command: lookupd
Path: /usr/sbin/lookupd
Parent: launchd [1]
Version: ??? (???)
PID: 10013
Thread: 5
Exception: EXC_BAD_ACCESS (0x0001)
Codes: KERN_PROTECTION_FAILURE (0x0002) at 0x00000001
Thread 0:
0 libSystem.B.dylib 0x9000a738 mach_msg_trap + 8
1 libSystem.B.dylib 0x9000a67c mach_msg + 60
2 lookupd 0x00006b28 -[Controller serverLoop] + 116
3 lookupd 0x00021f2c main + 2132
4 lookupd 0x000027c4 _start + 348
5 lookupd 0x00002664 start + 60
Thread 1:
0 libSystem.B.dylib 0x9000a738 mach_msg_trap + 8
1 libSystem.B.dylib 0x9000a67c mach_msg + 60
2 lookupd 0x0001b920 -[Thread usleep:] + 72
3 lookupd 0x00016bc8 -[LUServer gai_parallel:] + 680
4 lookupd 0x00018464 -[MachRPC
process:inData:inLength:outData:outLength:] + 3480
5 lookupd 0x0001feec __lookup_all + 208
6 lookupd 0x00022b74 _X_lookup_all_secure + 152
7 lookupd 0x00022a08 lookup_server + 168
8 lookupd 0x0001758c -[MachRPC process] + 92
9 lookupd 0x00006c58 -[Controller serverLoop] + 420
10 lookupd 0x0001ae34 launchpad + 132
11 libSystem.B.dylib 0x9002c3b4 _pthread_body + 96
Thread 2:
0 libSystem.B.dylib 0x9000a738 mach_msg_trap + 8
1 libSystem.B.dylib 0x9000a67c mach_msg + 60
2 lookupd 0x0001b920 -[Thread usleep:] + 72
3 lookupd 0x00016574 -[LUServer gai_async] + 224
4 lookupd 0x0001ae34 launchpad + 132
5 libSystem.B.dylib 0x9002c3b4 _pthread_body + 96
Thread 3:
0 libSystem.B.dylib 0x9000a738 mach_msg_trap + 8
1 libSystem.B.dylib 0x9000a67c mach_msg + 60
2 lookupd 0x00006b28 -[Controller serverLoop] + 116
3 lookupd 0x0001ae34 launchpad + 132
4 libSystem.B.dylib 0x9002c3b4 _pthread_body + 96
Thread 4:
0 libSystem.B.dylib 0x9000a738 mach_msg_trap + 8
1 libSystem.B.dylib 0x9000a67c mach_msg + 60
2 lookupd 0x0001b920 -[Thread usleep:] + 72
3 lookupd 0x00016574 -[LUServer gai_async] + 224
4 lookupd 0x0001ae34 launchpad + 132
5 libSystem.B.dylib 0x9002c3b4 _pthread_body + 96
Thread 5 Crashed:
0 libSystem.B.dylib 0x90003324 strcmp + 132
1 com.apple.NetInfo 0x94949438 cache_insert_ttl_time + 116
2 lookupd 0x00003c44 -[CacheAgent
addObject:category:key:] + 568
3 lookupd 0x000040f4 -[CacheAgent
addObject:key:category:] + 512
4 lookupd 0x00010ce8 -[LUServer
stamp:key:agent:category:] + 480
5 lookupd 0x00013020 -[LUServer
findItemWithKey:value:category:] + 1424
6 lookupd 0x00013304 -[LUServer
itemWithKey:value:category:] + 248
7 lookupd 0x00014e6c -[LUServer gai_node:port:info:]
+ 1232
8 lookupd 0x00016528 -[LUServer gai_async] + 148
9 lookupd 0x0001ae34 launchpad + 132
10 libSystem.B.dylib 0x9002c3b4 _pthread_body + 96
Thread 6:
0 libSystem.B.dylib 0x9000a738 mach_msg_trap + 8
1 libSystem.B.dylib 0x9000a67c mach_msg + 60
2 lookupd 0x0001b920 -[Thread usleep:] + 72
3 lookupd 0x00016574 -[LUServer gai_async] + 224
4 lookupd 0x0001ae34 launchpad + 132
5 libSystem.B.dylib 0x9002c3b4 _pthread_body + 96
Thread 7:
0 libSystem.B.dylib 0x9000a738 mach_msg_trap + 8
1 libSystem.B.dylib 0x9000a67c mach_msg + 60
2 lookupd 0x00006b28 -[Controller serverLoop] + 116
3 lookupd 0x0001ae34 launchpad + 132
4 libSystem.B.dylib 0x9002c3b4 _pthread_body + 96
Thread 5 crashed with PPC Thread State 64:
srr0: 0x0000000090003324 srr1:
0x000000000200f030 vrsave: 0x0000000000000000
cr: 0x42002224 xer: 0x0000000020000004 lr:
0x0000000094949438 ctr: 0x00000000000003ff
r0: 0x00000000000003ff r1: 0x00000000f060b950 r2:
0x000000000004d000 r3: 0x0000000000328b30
r4: 0x00000000fffffffd r5: 0x00000000fefefeff r6:
0x0000000080808080 r7: 0x00000000686e3a6a
r8: 0x0000000000650000 r9: 0x0000000000000fff r10:
0x0000000000002e00 r11: 0x00000000a49421d8
r12: 0x00000000900032a0 r13: 0x0000000000032a90 r14:
0x0000000000000000 r15: 0x0000000000000000
r16: 0x0000000000000005 r17: 0x0000000000032a90 r18:
0x0000000000000002 r19: 0x0000000000000002
r20: 0x000000000002513c r21: 0x0000000000000000 r22:
0x00000000433867cd r23: 0x000000000000a8c0
r24: 0x0000000000000000 r25: 0x0000000000331de0 r26:
0x0000000000328b30 r27: 0x0000000000000d35
r28: 0x00000000000034d4 r29: 0x00000000003035c0 r30:
0x000000000031edf0 r31: 0x0000000000003a0c
Binary Images Description:
0x1000 - 0x2afff lookupd /usr/sbin/lookupd
0x65000 - 0x67fff com.apple.NetInfo.agent.FF 1.1.0 (???) /
System/Library/PrivateFrameworks/NetInfo.framework/Resources/lookupd/
Agents/FF.bundle/FF
0x6a000 - 0x6cfff com.apple.NetInfo.agent.NI 1.1.0 (???) /
System/Library/PrivateFrameworks/NetInfo.framework/Resources/lookupd/
Agents/NI.bundle/NI
0x6f000 - 0x72fff com.apple.NetInfo.agent.DS 1.1.1 /System/
Library/PrivateFrameworks/NetInfo.framework/Resources/lookupd/Agents/
DS.bundle/DS
0x8fe00000 - 0x8fe51fff dyld 43.1 /usr/lib/dyld
0x90000000 - 0x901a6fff libSystem.B.dylib /usr/lib/libSystem.B.dylib
0x901fe000 - 0x90202fff libmathCommon.A.dylib /usr/lib/system/
libmathCommon.A.dylib
0x90728000 - 0x90801fff com.apple.CoreFoundation 6.4.3 (368.12) /
System/Library/Frameworks/CoreFoundation.framework/Versions/A/
CoreFoundation
0x9084c000 - 0x9094efff libicucore.A.dylib /usr/lib/
libicucore.A.dylib
0x909a8000 - 0x90a2cfff libobjc.A.dylib /usr/lib/libobjc.A.dylib
0x90ae4000 - 0x90af6fff libauto.dylib /usr/lib/libauto.dylib
0x91077000 - 0x91239fff com.apple.security 4.0.1 (223) /System/
Library/Frameworks/Security.framework/Versions/A/Security
0x9134b000 - 0x91372fff com.apple.SystemConfiguration 1.8.0 /
System/Library/Frameworks/SystemConfiguration.framework/Versions/A/
SystemConfiguration
0x9358d000 - 0x935affff com.apple.DirectoryService.Framework 2.0 /
System/Library/Frameworks/DirectoryService.framework/Versions/A/
DirectoryService
0x94942000 - 0x94962fff com.apple.NetInfo 1.0.0 (???) /System/
Library/PrivateFrameworks/NetInfo.framework/Versions/A/NetInfo
0x94c98000 - 0x94cb5fff libresolv.9.dylib /usr/lib/libresolv.9.dylib
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden