Messages in this thread | | | Date | Thu, 8 Apr 1999 18:15:31 +0300 (EEST) | From | Denis Chapligin <> | Subject | Re: ip_rt_advice |
| |
Hi
On Thu, 8 Apr 1999, Richard B. Johnson wrote:
> > > > > > I have a strange messages at /var/log/debug: > > > > Apr 7 19:25:00 hurricane kernel: ip_rt_advice: redirect to 194.186.140.201/00 dropped > > > > Apr 7 19:25:14 hurricane kernel: ip_rt_advice: redirect to 194.186.140.201/00 dropped > > > > > > > > But this addresses are really exist in my network. During this messages, > > > > machines with this ip are not available. What does this mean? > > > > > > Someone sent you a ICMP redirect for these IPs. The kernel installed > > > a temporary route for it. Because these hosts didn't answer it concludes > > > after some time that the redirect was bad and removes the temporary route. > > > If it bothers you feel free to comment it out, but it would be better to > > > fix the routing so that no ICMP redirect is needed. > > > > > I don't need routing for this machines, because they all are in one > > ehternet segment. So, i can't understand, where the problem with > > routing? May be this is an hacker attack? > > Denis Chapligin > > > > Check to see if any of the machines are running the routed daemon. This > is running by default on Sun machines. This causes them to advertise > routes (even though they share the same wire as everybody else). This > results in strange routing-table entries on cooperating machines and > duplicate packets on the physical link. > > Physically removing the routed daemon on our Suns (about 15 to 20 of > them), and rebooting dropped the LAN traffic to about 1/10th its > previous. We had Suns routing to Suns which were routing to Suns, > etc., eventually going to somewhere local. > I don't have routed and any software of this class. Denis Chapligin
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |