Re: Excessive network traffic -

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Ed Greshko wrote:
Bob Goodwin wrote:

...
14:48:17.244236 arp who-has 70.41.114.44 tell 70.41.112.1
14:48:19.063647 arp who-has 10.9.226.129 tell 70.41.148.1

The above are ARP broadcast packets.  ARP stands for Address Resolution
Protocol.

It is a bit strange to see these in your network since ARP broadcast packets
aren't supposed to survive past the subnet they are transmitted on.  The
purpose of the ARP request is to get the MAC address of a given IP address.
 Taking one line of your output above...
...
These packets are coming into your network.  They are 42 bytes long.  You'd
have to have a whole heck of a lot of these to drive up your network usage.
 In any case, they are inbound and not associated with any requests from
your side so it is unlikely that the ISP is counting these as your traffic.





This is a clear indication of packet 'flooding' by your ISP. If you watch a dump long enough you will probably see all kinds of traffic.

What happens is that a 'switch' is supposed to look one level deeper into each packet than a bridge does, and determine which interface to copy it to. A bridge simply copies every packet to every interface.

Packet flooding happens when the switch does not have enough memory or CPU to examine every packet. For those packets it cannot examine, it drops them on every interface, like a bridge would do.

Bottom line, your ISP has faulty or overloaded switches. And yes, it does impact you. All switches can flood when necessary, but it should be rare, not constant.

Good Luck!

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux