blocking Multicast packets

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello,

	We seem to have a problem with multi-cast packets, our develop team was testing some kind of load balancer which is
causing about 100 packets a second to be sent out continuously:


05:35:44.864029 IP X.X.X.9128 > 230.0.0.1.9128: UDP, length: 1000

So this drives up the network card IRQ request I believe using anywhere from 10%-80% of the CPU:

    4 root      19  19     0    0     0 SWN  17.1  0.0 225:28   1 ksoftirqd_CPU1
    3 root      19  19     0    0     0 SWN  14.5  0.0 228:31   0 ksoftirqd_CPU0

So I thought about adding in a iptables rule to block all the traffic but it is not working. I have added the following
rules with out effect:

iptables -I INPUT -i eth1 -s X.X.X.X -j DROP
iptables -I FORWARD -i eth1 -s X.X.X.X -j DROP

I never see the byte counters increment at all .. they are staying at zero ??

-- 
Michael Gale


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux