From owner-freebsd-isp Sat Sep 22 21:11: 8 2001 Delivered-To: freebsd-isp@freebsd.org Received: from aurora.sol.net (aurora.sol.net [206.55.65.76]) by hub.freebsd.org (Postfix) with ESMTP id 70DA937B42A for ; Sat, 22 Sep 2001 21:11:06 -0700 (PDT) Received: (from jgreco@localhost) by aurora.sol.net (8.9.3/8.9.2/SNNS-1.02) id XAA43286; Sat, 22 Sep 2001 23:10:57 -0500 (CDT) From: Joe Greco Message-Id: <200109230410.XAA43286@aurora.sol.net> Subject: Re: EMERGENCY - Arp attack? Am I being DOS'd ? To: tom.oneil@tacni.com Date: Sat, 22 Sep 2001 23:10:57 -0500 (CDT) Cc: freebsd-isp@FreeBSD.ORG X-Mailer: ELM [version 2.5 PL3] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org You're probably getting scanned by all the various Microsoft worms out for vulnerabilities in your systems. If you have lots of unused IP space, bound to ethernets, this leads to massive quantities of ARP. Another triumph for OSPF, /30 link nets, and severely size-limited switch networks. I haven't noticed any problems here :-) -- Joe Greco - sol.net Network Services - Milwaukee, WI - http://www.sol.net "We call it the 'one bite at the apple' rule. Give me one chance [and] then I won't contact you again." - Direct Marketing Ass'n position on e-mail spam(CNN) With 24 million small businesses in the US alone, that's way too many apples. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message