From owner-freebsd-security Mon Aug 28 11:20:31 2000 Delivered-To: freebsd-security@freebsd.org Received: from wopr.chc-chimes.com (wopr.chc-chimes.com [216.234.105.162]) by hub.freebsd.org (Postfix) with ESMTP id 92E0F37B422 for ; Mon, 28 Aug 2000 11:20:18 -0700 (PDT) Received: from localhost (matta@localhost) by wopr.chc-chimes.com (8.9.3/8.9.3) with ESMTP id OAA30963; Mon, 28 Aug 2000 14:23:30 -0400 (EDT) (envelope-from matta@unixshell.com) Date: Mon, 28 Aug 2000 14:23:30 -0400 (EDT) From: Matt Ayres X-Sender: matta@wopr.chc-chimes.com To: Alfred Perlstein Cc: "Col.Panic" , freebsd-security@FreeBSD.ORG Subject: Re: your mail (fwd) In-Reply-To: <20000828111537.T1209@fw.wintelcom.net> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Well, I read your mail after sending this out and I also agree with you. In my exp when a UDP flood comes in, the kernel will also pump out the message, usually at a smaller pps with UDP floods. As I am not a programmer I do not know the internals as to why, but I would assume it is due to an icmp error as your e-mail stated. I was trying to alert him that in the future he might want to look to see if massive amounts of UDP traffic is coming in when receiving that message :> On Mon, 28 Aug 2000, Alfred Perlstein wrote: > > > Sep 19 00:17:54 shell /kernel: icmp-response bandwidth limit 3491/200 pps > > * Matt Ayres [000828 11:13] wrote: > > FreeBSD will also give the message below when UDP has gone over 100pps. > > Can you explain? Are you saying that any application sending out > more than 100pps of UDP will cause the system to start generating > this message? I doubt that's the case but what you said sounds like > it. > > -Alfred > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message