Sascha Hlusiak wrote:
Am Donnerstag 03 Januar 2008 21:59:59 schrieb Vernon A. Fort:
We switched from a cisco router to using a gentoo box with mutiple nics
- all appears to be working very well. However, i ran into a major
problem when one of my PC's went nuts. It flooded the network with
"unknown protocol" which I saw from tcpdump.
What protocol number was is? Maybe you could enable the protocol in the Linux
Kernel and then filter it and apply routing rules.
What is the router doing usually and how did the flooding bring your network
down? Maybe just preventing the router from routing unwanted protocols
already help and you don't actually need a bandwidth limiter.
This was in the heat of the moment - i was able to get a MAC address
from the "unknown protocol" messages from tcpdump. We tracked it down
to a HUNG pc - basically flooding the network. This gentoo box is a
firewall / router. We have three NIC's, one for the internet and one
for each subnet. I've been at this long enough to see bad network
devices HANG an entire network several times but this is the first time
i've used Linux as a router.
Just trying to come up with a solution to prevent this in the future - i
guess i will have to wait until it happens again due to the lack of
debugging logs/information. I was just hoping there was some kernel or
network setting to help with bad devices that i missed when setting this
box up.
Vernon
--
[EMAIL PROTECTED] mailing list
