HELP- Netonix Virus?
- boxer2t
- Member
- Posts: 3
- Joined: Tue Dec 13, 2016 6:00 pm
- Has thanked: 0 time
- Been thanked: 0 time
- boxer2t
- Member
- Posts: 3
- Joined: Tue Dec 13, 2016 6:00 pm
- Has thanked: 0 time
- Been thanked: 0 time
-
sirhc - Employee
- Posts: 7610
- Joined: Tue Apr 08, 2014 3:48 pm
- Location: Lancaster, PA
- Has thanked: 1675 times
- Been thanked: 1358 times
Re: HELP- Netonix Virus?
boxer2t wrote:Any expected eta for rc3?
v1.5.17 is released and its fixed.
But even if using old version if you used access control list you were 100% protected.
Support is handled on the Forums not in Emails and PMs.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
-
mhoppes - Associate
- Posts: 677
- Joined: Thu Apr 10, 2014 9:14 pm
- Location: Pennsylvania
- Has thanked: 10 times
- Been thanked: 125 times
Re: HELP- Netonix Virus?
So coming in really late to this thread --- I'm curious on the technical workings.
If the switch core is separate from the main CPU and runs its own thing -- why then would this virus that causes 100% CPU loading cause the switch to drop packets and have loss on the switching fabric?
If the switch core is separate from the main CPU and runs its own thing -- why then would this virus that causes 100% CPU loading cause the switch to drop packets and have loss on the switching fabric?
-
mhoppes - Associate
- Posts: 677
- Joined: Thu Apr 10, 2014 9:14 pm
- Location: Pennsylvania
- Has thanked: 10 times
- Been thanked: 125 times
Re: HELP- Netonix Virus?
So after a client of mine got infected with this we are trying to reset the Netonix switches to defaults using the reset button, but it seems like the boot loader may have been overwritten? No amount of holding the reset button on a WS-6-mini is causing the switch to go into default/reset mode.
-
mayheart - Experienced Member
- Posts: 190
- Joined: Thu Jan 15, 2015 1:42 pm
- Location: Canada
- Has thanked: 48 times
- Been thanked: 59 times
Re: HELP- Netonix Virus?
mhoppes wrote:So coming in really late to this thread --- I'm curious on the technical workings.
If the switch core is separate from the main CPU and runs its own thing -- why then would this virus that causes 100% CPU loading cause the switch to drop packets and have loss on the switching fabric?
The damage the hack does causes vtss_appl to constantly reload.
Every time that process starts up, the current config gets sent over to the switching fabric.
-
sirhc - Employee
- Posts: 7610
- Joined: Tue Apr 08, 2014 3:48 pm
- Location: Lancaster, PA
- Has thanked: 1675 times
- Been thanked: 1358 times
Re: HELP- Netonix Virus?
mayheart wrote:mhoppes wrote:So coming in really late to this thread --- I'm curious on the technical workings.
If the switch core is separate from the main CPU and runs its own thing -- why then would this virus that causes 100% CPU loading cause the switch to drop packets and have loss on the switching fabric?
The damage the hack does causes vtss_appl to constantly reload.
Every time that process starts up, the current config gets sent over to the switching fabric.
Because the Linux shell controls RSTP, LACP, and so on, and so the switch core is constantly talking to the Linux shell and of the Linux shell is compromised, or services stopped that the core needs this can cause issues.
Upgrade and hack goes away.
Support is handled on the Forums not in Emails and PMs.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Before you ask a question use the Search function to see it has been answered before.
To do an Advanced Search click the magnifying glass in the Search Box.
To upload pictures click the Upload attachment link below the BLUE SUBMIT BUTTON.
Who is online
Users browsing this forum: No registered users and 81 guests