SSH DOS?

[Kurt Wall]

Quoth Matthew Carpenter:
> I am monitoring SSH from an OpenNMS box and two of my systems, both
> SuSE8.2pro boxen, are registering outages on SSH.  Normally I'd blame
> either the network or the NMS system (little puny box can hardly keep
> up) but sure enough, they were indeed DOS'd.  The TCP connection was
> established and then it drops.  There appear to be quite a few sshd
> sessions open and not closed, which I am wondering about.  I know that
> the SSH poller doesn't establish a full SSH session but it shouldn't be
> able to cause a DOS...

Was it really DoSed or was it merely an attempt?

> Any thoughts?
> openssh-3.5p1-68

What was the source of the attack?

Kurt
-- 
"First things first -- but not necessarily in that order"
		-- The Doctor, "Doctor Who"