Re: (PM) PPP user causing broadcast storms

Mark Radabaugh (mark@woodville.net)
Wed, 19 Nov 1997 07:54:34 -0500

I think this is caused by a user leaving the netbeui protocol enabled in the
dial-up networking setup. I think it is even worse if they have netbeui
protocol as the default protocol since that is what it tries to negotiate
before it fails and reverts to TCP/IP.

mark@woodville.net

-----Original Message-----
From: Mark Morley <mark@islandnet.com>
To: portmaster-users@livingston.com <portmaster-users@livingston.com>
Date: Wednesday, November 19, 1997 3:32 AM
Subject: (PM) PPP user causing broadcast storms

>Today I noticed that when certain users establish a PPP session on one
>of our PM3's, I often see a massive flood of UDP broadcast packets. These
>packets number anywhere from a few hundred to fifteen thousand, and they
>all get sent within a 60-90 second period shortly after the user connects..
>
>A little packet sniffing shows they are netbios name service packets..
>They come from the user's IP and are sent to the Class C's broadcast
>address. When this occurs, the whole network freezes for a minute or
>two..
>
>This does not appear to be a deliberate "attack" by the user. I suspect
>that the wrong combination of settings on the user end causes this. Has
>anyone else seen this? I have been unable to duplicate the problem so
far..
>
>Tomorrow I'll call them all and audit their settings to see if I can
>see a pattern, but if you've seen this and know what's causing it please
>let me know - thanks..
>
>Mark
>-
>To unsubscribe, email 'majordomo@livingston.com' with
>'unsubscribe portmaster-users' in the body of the message..
>
>
>

-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.