> your host is sending a high amount of UDP packets port 76
> 126.96.36.199.4363 > 188.8.131.52.talk: udp 76
> to a host on a french network 184.108.40.206 which had saturated our
> US link (GMD-PPL) for hours:
> 09:29:39.067821 220.127.116.11 > 18.104.22.168: icmp: host 22.214.171.124.33.1
> Name: faui01j.informatik.uni-erlangen.de
> Address: 126.96.36.199
> Name: en-0.enss145.t3.nsf.net
> Address: 188.8.131.52
> inetnum: 184.108.40.206
> netname: IMAG-ENS-1
> descr: ENSIMAG, B.P. 53 X, 38041 Grenoble, France
> country: FR
> admin-c: Cathy Cassagne
> tech-c: Pierre Laforgue
> connect: LOCAL
> aut-sys: 1717
> gateway: inr
> changed: <[log in to unmask]> 930514
> source: RIPE
> A a temopary Fix I had setup a filter in our US gateway to discard
> these packets on our US link. (Note this is not gateway to Europe)
> The french network is flagged as LOCAL in the RIPE database and therfore
> not routed within Europe!
> May I ask the responsible persons to
> - stop this UDP storm, and
> - register this network with connect RIPE so that this network
> is routed within Europe.
> Please let me know that you are doing this.
> As soon as I get a reply and these UDP storm are no longer there, I
> will remove the filter to discard packets to network 220.127.116.11
> on our US link.
I wasn't able to find anything wrong on this machine, but I rebooted the host
and found no evidence of any UDP storm (as far as I can see with "etherfind).
I apollogize for any inconviences that this host may has caused. Please let me
know if this or any other machine from our networks put heavy load on inter-
national networks and I will try to find the cause for that.
Erich Meier [log in to unmask]
"Koennt Ihr das nicht abends machen?" - Kommentar eines CIPlers beim faui01-
Umbau nach 104 Tagen Uptime