From owner-freebsd-stable Mon Feb 21 17:53:34 2000 Delivered-To: freebsd-stable@freebsd.org Received: from rover.village.org (rover.village.org [204.144.255.49]) by hub.freebsd.org (Postfix) with ESMTP id 5C22B37B67D for ; Mon, 21 Feb 2000 17:53:32 -0800 (PST) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.9.3/8.9.3) with ESMTP id SAA95190 for ; Mon, 21 Feb 2000 18:47:30 -0700 (MST) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.9.3/8.8.3) with ESMTP id SAA24449; Mon, 21 Feb 2000 18:47:27 -0700 (MST) Message-Id: <200002220147.SAA24449@harmony.village.org> To: "D VAN" Subject: Re: strange kernel logs ? Cc: stable@FreeBSD.ORG In-reply-to: Your message of "Sun, 20 Feb 2000 14:45:45 +0200." <000f01bf7ba0$6a62d8f0$0201a8c0@DAVID> References: <000f01bf7ba0$6a62d8f0$0201a8c0@DAVID> Date: Mon, 21 Feb 2000 18:47:27 -0700 From: Warner Losh Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In message <000f01bf7ba0$6a62d8f0$0201a8c0@DAVID> "D VAN" writes: : Feb 20 04:59:25 NYC /kernel: icmp-response bandwidth limit 152/100 pps : Feb 20 04:59:26 NYC /kernel: icmp-response bandwidth limit 114/100 pps : Feb 20 04:59:27 NYC /kernel: icmp-response bandwidth limit 149/100 pps : Feb 20 04:59:28 NYC /kernel: icmp-response bandwidth limit 131/100 pps : Feb 20 04:59:29 NYC /kernel: icmp-response bandwidth limit 136/100 pps : : : Anyone know how to fix this and what is causing it ? Yes. There are more than 100 packets per second being sent out as ICMP or RST. Since these limits are in place to help with flooding. : Also why is this happening only now since ive installed named ? You are handling lots of lookups and there are lots of timeouts happening which means that the udp sockets won't have something listening to it when the response come back, which generates a ICMP port unreachables. Fortunately, it is relatively easy to fix. sysctl -w net.inet.icmp.icmplim=200 which will still give you the flood protection w/o impacting your normal operations. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message