> We graph the traffic through out PM3s and some of them have
> ocassional high traffic spikes which are very abnormal. No modem
> has the ability to do that.
>
> I was thinking it could be someone on the internet flood-pinging
> someone on our modem server, but the traffic spikes don't show
> on our connections to upstreams and peers.
>
> http://grounds.midcoast.com/mrtg/nuthercupfull.1.html
>
> It's nothing critical, I just like to know sorta what's happening
> on my network. We run a completely switched ethernet network, and
> the spikes do not show up at identical times for other PM3s
> in the same LAN. Any ideas?
>
> http://grounds.midcoast.com/mrtg/mug.1.html
Most likely it is packets bouncing between your router and your pm3's.
When a dialup is terminated I have seen packets come in for that IP for as
many as 12 minutes. The PM will bounce a packet back to the gateway when
it doesn't have a local connection to that IP. I get around this problem
with a filter in each PM that looks like this
> sh fil e.out
1 deny 0.0.0.0/0 192.168.0.64/27 ip
2 deny 0.0.0.0/0 192.168.0.96/28 ip
3 permit 0.0.0.0/0 0.0.0.0/0 ip
> set ether0 ofilter e.out
Where the Assigned address pool in that PM is 192.168.0.64 and the
poolsize is 48 in this case. This eliminates the bouncing packets. And
yes it is bad behavior on the part of the PM's because they announce
routes to that IP address but then they forward it on to the gateway
address. It would be nice to have this fixed but this is a nearly
painless workaround.
Doug Ingraham You can judge the quality of your life by how often
Rapid City, SD you notice the enjoyment of the little things.
USA
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>