Date: Thu, 26 Aug 1999 14:58:22 -0500 From: Dan Nelson <dnelson@emsphone.com> To: TrouBle <trouble@hackfurby.com> Cc: "freebsd-questions@freebsd.org" <freebsd-questions@FreeBSD.ORG> Subject: Re: Ummmm ???? HUH ?? Message-ID: <19990826145822.A7036@dan.emsphone.com> In-Reply-To: <37C58FA1.37710788@hackfurby.com> References: <64003B21ECCAD11185C500805F31EC0303787062@houston.matchlogic.com> <37C58FA1.37710788@hackfurby.com>
next in thread | previous in thread | raw e-mail | index | archive | help
In the last episode (Aug 26), TrouBle said: > 1. whats causing it ( i know its icmp based ) > 2. where is it coming from ( i know it is generated by the kernel, what is > prompting the kernel to do this ?) > 3. how do i tell who/what is generating this traffic, causing my kernel to > genrate this message > > Aug 26 11:47:22 ns2 /kernel: icmp-response bandwidth limit 155/100 pps > Aug 26 11:47:22 ns2 /kernel: icmp-response bandwidth limit 155/100 pps > Aug 26 11:47:22 ns2 /kernel: icmp-response bandwidth limit 155/100 pps > Aug 26 11:47:25 ns2 /kernel: icmp-response bandwidth limit 105/100 pps > Aug 26 11:47:25 ns2 /kernel: icmp-response bandwidth limit 105/100 pps > Aug 26 11:47:25 ns2 /kernel: icmp-response bandwidth limit 105/100 pps It's a message saying that the system is receiving more than 100 ICMP messages per second, and is throttling responses. This usually indicates a ping flood. If you have BPF enabled, run "tcpdump icmp" as root to see all the packets. If you really want to respond to all the icmp packets, adjust the systcl variable net.inet.icmp.icmplim. -- Dan Nelson dnelson@emsphone.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990826145822.A7036>