Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Extreme + Nachi = ipfdb overflow

  • From: Joshua Coombs
  • Date: Mon Aug 25 15:42:15 2003

After battling Nachi and it's flood of icmp traffic, I've discovered
that it's not the Cisco gear that gets hit hard by it, it was the
Extreme gear.  Nachi generates enough 'random' traffic to flood and
subsequently thrash the ip forwarding DB on the Summit 1i we were using
so badly as to drop it from gigabit capible to barely eeking out
6mb/sec.  Before I redeploy the switch, I need to find a way to keep the
ipfdb from flodding while allowing it to be the primary carrier of
traffic.  ACLs blocking ICMP on the Extreme act too late, by the time
the cpu sees the packet to drop it, it's already horned its way into the
ipfdb.  Does anyone have any suggestions on ways to allow the switch to
participate as an L3 router while minimizing the chances of a worm
taking it out so easily again?

Joshua Coombs
GWI Networking




Discussion Communities


About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home


Merit Network, Inc.