From owner-freebsd-net Sun Jan 21 11:16:41 2001 Delivered-To: freebsd-net@freebsd.org Received: from mink01.tirloni.co.uk (200-191-83-228-as.acessonet.com.br [200.191.83.228]) by hub.freebsd.org (Postfix) with ESMTP id E10AC37B400 for ; Sun, 21 Jan 2001 11:16:21 -0800 (PST) Received: from mink01 (mink01 [127.0.0.1]) by mink01.tirloni.co.uk (8.11.1/8.9.3) with ESMTP id f0LJ0vR00502; Sun, 21 Jan 2001 17:01:03 -0200 (BRST) (envelope-from tirloni@techie.com) Date: Sun, 21 Jan 2001 17:00:57 -0200 (BRST) From: "Giovanni P. Tirloni" X-Sender: tirloni@mink01.tirloni.co.uk To: freebsd-net@freebsd.org Cc: vev@michvhf.com Subject: Re: icmp-response bandwidth limit? In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Sat, 20 Jan 2001, Vince Vielhaber wrote: > Jan 20 18:44:48 chives /kernel: icmp-response bandwidth limit 230/200 pps > > Is someone trying to pingflood me or something? Someone is sending too many icmp requests to your machine and the kernel isn't answering that cause you've ICMP_BANDLIM enabled in your kernel. This option tells the system not to reply to such requests when it reaches the limit (which is, by default, 200 packets per second). To change it just set the proper variable with sysctl(8), like this: [root@ttyp2:~]# sysctl net.inet.icmp.icmplim net.inet.icmp.icmplim: 200 [root@ttyp2:~]# sysctl -w net.inet.icmp.icmplim=300 net.inet.icmp.icmplim: 200 -> 300 or disable that option in the kernel (which isn't good, BTW). Hope it helps, Giovanni P. Tirloni tirloni@techie.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message