Chybove hlaseni jadra

[Peter Surda]

On Fri, Jan 30, 2004 at 11:55:10AM +0100, Jirka Kubik wrote:
> Ahoj,
cau

> nevite prosim nekdo co presne mi chce jadro rict timle ?
> 
> Neighbour table overflow.
Co tym chce rict, uz povedali ini, ale ja ti navyse poradim konkretne priciny
a ako to mozes odstranit.

Stane sa to vtedy, ked mas na jednom segmente prilis vela pocitacov, alebo ked
niektore z nich pouzivaju "divne programy", medzi ktore patria hlavne
Widowsovske cervy Blaster/Lovesan a Nachi/Welchia.

Defaultne ma tato tabulka dost velky limit (okolo 1024), zistis ho cez
sysctl net.ipv4.neigh.default.gc_thresh3

Podobne cez sysctl ho mozes zvysit, nezabudni potom aj na gc_thresh2 a
gc_thresh1.

Najlepsie vsak bude zavirene pocitace odvirit (kedze to vsak s linuxom nema
nic spolocne, nebudem to rozoberat). Zistit sa daju nepriamo pozorovanim,
vyznacuju sa velkou frequenciou ARP-requestov (blaster ~ 10/sek, nachi ~
100/sek) na linearne rastuce IP adresy:
tcpdump -n -i eth0 arp

> Jirka
S pozdravom,

Peter Surda (Shurdeek) <shurdeek na routehat.org>, ICQ 10236103, +436505122023

-- 
                    "Where do you want to go to die?"