From owner-freebsd-questions Thu Aug 26 12:58:34 1999 Delivered-To: freebsd-questions@freebsd.org Received: from dan.emsphone.com (dan.emsphone.com [199.67.51.101]) by hub.freebsd.org (Postfix) with ESMTP id 349FB14C10 for ; Thu, 26 Aug 1999 12:58:31 -0700 (PDT) (envelope-from dan@dan.emsphone.com) Received: (from dan@localhost) by dan.emsphone.com (8.9.3/8.9.3) id OAA09524; Thu, 26 Aug 1999 14:58:22 -0500 (CDT) (envelope-from dan) Date: Thu, 26 Aug 1999 14:58:22 -0500 From: Dan Nelson To: TrouBle Cc: "freebsd-questions@freebsd.org" Subject: Re: Ummmm ???? HUH ?? Message-ID: <19990826145822.A7036@dan.emsphone.com> References: <64003B21ECCAD11185C500805F31EC0303787062@houston.matchlogic.com> <37C58FA1.37710788@hackfurby.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95.7i In-Reply-To: <37C58FA1.37710788@hackfurby.com> X-OS: FreeBSD 4.0-CURRENT Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In the last episode (Aug 26), TrouBle said: > 1. whats causing it ( i know its icmp based ) > 2. where is it coming from ( i know it is generated by the kernel, what is > prompting the kernel to do this ?) > 3. how do i tell who/what is generating this traffic, causing my kernel to > genrate this message > > Aug 26 11:47:22 ns2 /kernel: icmp-response bandwidth limit 155/100 pps > Aug 26 11:47:22 ns2 /kernel: icmp-response bandwidth limit 155/100 pps > Aug 26 11:47:22 ns2 /kernel: icmp-response bandwidth limit 155/100 pps > Aug 26 11:47:25 ns2 /kernel: icmp-response bandwidth limit 105/100 pps > Aug 26 11:47:25 ns2 /kernel: icmp-response bandwidth limit 105/100 pps > Aug 26 11:47:25 ns2 /kernel: icmp-response bandwidth limit 105/100 pps It's a message saying that the system is receiving more than 100 ICMP messages per second, and is throttling responses. This usually indicates a ping flood. If you have BPF enabled, run "tcpdump icmp" as root to see all the packets. If you really want to respond to all the icmp packets, adjust the systcl variable net.inet.icmp.icmplim. -- Dan Nelson dnelson@emsphone.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message