On Fri, Jun 21, 2013 at 10:27:07AM +1200, Hugh Davenport wrote: > The "attack" lasted around 4 minutes, in which there was 1161 lines > in the log for a > single attacker ip, and no other similar logs previously. > > Would this be enough to kill not only the VM running dovecot, but > the underlying host > machine? Have you checked logs on the host? Specifically /var/log/messages for seg fault messages or Out-of-Memory Killer messages. It's also worth checking /var/log/libvirt/qemu/<domain>.log if you are using libvirt. That file contains the QEMU stderr output. Stefan -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
