Reflector Packet Storm

Alan R. Bugos (arb2@gte.com)
Wed, 10 Aug 1994 10:08:26 -0400


Our reflector again experience a packet storm this morning to a site in
Amsterdam (we believe). Apparently it caused some heavy network saturation
on EU.NET and UU.NET. The processes on the reflector were killed however
it still sent packets. Anybody out there have the IP address 192.126.1.15?
We are just trying to look into the problem and understand the phenomenon.
Comments and suggestions are welcome. Thanks for the help.

Alan
GTE Laboratories

>> Subject: URGENT: Packet storm
>> Cc: noc@EU.net, noc@uunet.uu.net
>>
>> skyhawk.gte.com is sending large amounts of traffic to 192.126.1.15;
>> this is for 15 minutes:
>>
>> From To Packets Kbytes
>> ---------------------------------------------------------------------------
>> skyhawk.gte.com 192.126.1.15 62941 53336 K
>>
>>
>> I've blocked traffic both ways, but skyhawk keeps sending; our
>> US line is completely saturated, dropping 50 packets per second.

*****************************************************************************
** ** **
** Alan R. Bugos ** Internet: abugos@gte.com **
** Advanced Transport Tech. Dept. ** Amateur Radio: N1NQI **
** GTE Laboratories, Incorporated ** **
** 40 Sylvan Rd, Waltham,MA 02254 ** Packet Video Reflector **
** (617) 466-2698 Voice ** 132.197.10.74 **
** (617) 890-9320 FAX ** http://www-lanlab.gte.com **
** ** **
*****************************************************************************