On Mon, 20 Jan 2003, Holt Grendal wrote:
>
> Hello all,
>
> I'm having a strage problem with our mrtg bandwidth graphs when
> sudden spikes (DoS attacks) occur.
>
> Logging into the Cisco switch during the DoS attack and doing
> a "show int" on the involved ports clearly shows the attack going
> into port 1 and out of port 10, in bits/sec and packets/sec.
>
> I'm beginning to think there is some kind of problem with
> SNMP. Does anyone have any ideas or have seen this type of
> behavior before?
SNMP is discardable UDP traffic. It is not unusual to see SNMP packets
discarded when a network device becomes overloaded.
Merton Campbell Crockett
--
BEGIN: vcard
VERSION: 3.0
FN: Merton Campbell Crockett
ORG: General Dynamics Advanced Information Systems;
Intelligence Solutions
N: Crockett;Merton;Campbell
EMAIL;TYPE=internet: [EMAIL PROTECTED]
TEL;TYPE=work,voice,msg,pref: +1(805)497-5045
TEL;TYPE=pager,msg: +1(877)528-0049
TEL;TYPE=fax,work: +1(805)497-5050
TEL;TYPE=cell,voice,msg: +1(805)377-6762
END: vcard
--
Unsubscribe mailto:[EMAIL PROTECTED]
Archive http://www.ee.ethz.ch/~slist/mrtg
FAQ http://faq.mrtg.org Homepage http://www.mrtg.org
WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi
