Home page logo
/

nanog logo nanog mailing list archives

Re: Weird network problems
From: "Geo." <georger () getinfo net>
Date: Thu, 21 Aug 2003 06:15:42 -0400



Is anyone out there tracking down some weird network behavior yesterday
and today? I'm not talking about ping traffic from the worm or anything
like that, I'm seeing TNT MAX boxes go unpingable, arp broadcast storms,
one way traffic blocks on T1's between cisco routers, stuff that I have
not been able to explain yet.

I'm seeing the exact same issues with the TNTs and am in the process of
trying to track down exactly what is causing it. So far no pattern has
emerged.

go here http://www.cisco.com/warp/public/707/cisco-sn-20030820-nachi.shtml

Implement the 92byte ping filter on all interfaces that are allowing the
worm's pings thru, solved our problem perfectly. The problem is when the
worm pings IP addresses that have nothing on them it creates the arp
request, as the number of those requests build some devices can't handle it
and it's crashing them. The TNT is one of the more braindead of those
devices. I'd be interested in knowing what other devices are also failing
from this.

Geo.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]