Re: Neighbour table overflow

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



At 10:12 25/02/2004, Damjan wrote:
> What is the cause for such a message while running kernel 2.6.1 on RH9 ?
>
> Neighbour table overflow.
> NET: 282 messages suppressed.
> Neighbour table overflow.

ARP table overflow,
do you have an interface on your router with a too wide netmask?
/16 (255.255.0.0) maybe?
Do you have a lot of "(incomplete)" entries in "arp -n"?

Check that interface with "tcpdump -i eth? -n arp".

Probably some virus or port sniffer tries to scan your network.

I've seen neighbour table overflow messages on wireless routers where the wireless interface is not working properly, or is not connected to an access point. It just takes a couple of seconds of trying to ping another machine on a wireless network when you're not connected to the access point successfully and neighbour table overflow will start comming up.... I never did get to the bottom of what the message means or whether its something to worry about though. (Never see it when the connection is working, so I didn't worry about it)


Regards,
Simon

_______________________________________________
LARTC mailing list / LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux