Skip to Content.
Sympa Menu

wg-multicast - RE: msdp storm?

Please Wait...

wg-multicast@internet2.edu

Subject: All things related to multicast

List archive

RE: msdp storm?


Chronological Thread 
  • From: "John Barlow" <John.Barlow@aarnet.edu.au>
  • To: "Bill Owens" <owens@nysernet.org>, "Alan Crosswell" <alan@columbia.edu>
  • Cc: "wg-multicast" <wg-multicast@internet2.edu>, <noc@aarnet.edu.au>, "Mahmoud Abo El Wafa" <m.aboelwafa@its.uq.edu.au>, "Nigel Armfield" <n.armfield@its.uq.edu.au>, "Anthony Croome" <a.croome@its.uq.edu.au>
  • Subject: RE: msdp storm?
  • Date: Fri, 19 Dec 2003 08:59:38 +1100

Hi - I am a contact in AARNet.

The machine mentioned below is in the University of Queensland.

Mahmoud, Nigel and Anthony - could you please look into this ASAP ?


Ta, John.

John Barlow
GrangeNet
Advanced Communication Services coordinator
ph: +61 (2) 6222 3553
fax: +61 (2) 6222 3535
mob: +61 (413) 880207



> -----Original Message-----
> From: Bill Owens
> [mailto:owens@nysernet.org]
>
> Sent: Friday, 19 December 2003 8:27 AM
> To: Alan Crosswell
> Cc: wg-multicast
> Subject: Re: msdp storm?
>
>
> On Thu, Dec 18, 2003 at 04:06:24PM -0500, Alan Crosswell wrote:
> > Dec 18 16:00:54.767 EST: %MSDP-4-SA_LIMIT: SA from peer
> 199.109.5.6, RP
> > 130.102.0.40 for (130.102.187.15, 225.0.25.133) exceeded
> sa-limit of 10000
> >
> > 15.187.102.130.in-addr.arpa domain name pointer
> gmc001.mbbs.uq.edu.au.
> >
>
> MSDP Source-Active Cache - 13048 entries
>
> Looks like somebody down under, AS 18062 has 9104 entries out
> of that 13048, and 9069 of them have the same source,
> gmc001.mbbs.uq.edu.au. Looks like a scanner going through 225.x.x.x
>
> Anybody have a contact there?
>
> Bill.


Archive powered by MHonArc 2.6.16.

Top of Page