nanog mailing list archives

RE: Router gets hurt!


From: Jason Weisberger <jweis () softaware com>
Date: Tue, 24 Nov 1998 10:37:13 -0800 (PST)


I should mention that these are not my NT machines, they're all colocated
customers that insist on using NT as a server platform.

It seems simply turning the election off has cleared it all up.


On Tue, 24 Nov 1998, Eric Germann wrote:


You may also wish to implement WINS so it doesn't use broadcast name
resolution techniques.

Also, if you have any WfWg machines, there was a fix years ago where
they wouldn't relinquish a master browser role.  MS issued a fix back
in the 3.51 days.  Similar situation, election wars, although it never
took out Cat 5's or 7206's on the networks we used.

Surely you're not doing broadcast flooding on the Crisco, are you?

Alternatively, you can force one machine to be the master browser and
the others to be backup browsers which pretty much obviates the need
for an election.

I would suggest http://support.microsoft.com and search for Preferred
Master Browser.

Eric





---"James D. Wilson"  wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I think you mean "browse master" and if your switches are falling
apart by browser elections you probably have more serious problems on
your network than NetBios traffic (however odorous it may "smell".) 
I'd take a good look at your spanning tree configuration and
statistics on your switches.  You could also be running into problems
with bdpu traffic confusion in your switches spanning tree if you are
also bridging and your bridge group priority 0 is not on your local
side of your bridge group.

- -----Original Message-----
From: owner-nanog () merit edu [mailto:owner-nanog () merit edu]On Behalf Of
Jason Weisberger
Sent: Monday, November 23, 1998 8:02 PM
To: nanog () merit edu
Subject: Router gets hurt!



Discovered today that NT has the built in ability to drown your
network
and stomp on the routers cpu. Seems if someone sets up 2 NT domain
masters
or whatever that Netbios garbage is called, they attempt to "hold an
election." The election is comprised of slamming every machine it can
find
and then every broadcast address it can think of with udp on port 137.

After a few minutes of it an RSP4 gets real tired and you start losing
packets as well as the switches all falling apart after trying to
forward
the zillion mbits/sec of useless data.

Anyone else seen anything like this?

- --
Jason Weisberger
Chief Technology Officer
SoftAware, Inc. 310/305-0275



-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.5.5 for non-commercial use <http://www.nai.com>
Comment: All Spammers Are Thieves - Jail Them Now

iQA/AwUBNlpUyzAufbtGOmgdEQKO9ACg7UU/L9En2tkEbQkvINeAkGq0m1sAoJZy
YVC8jBkQfTn46xdhNduWEPOo
=fPj2
-----END PGP SIGNATURE-----





_________________________________________________________
DO YOU YAHOO!?
Get your free @yahoo.com address at http://mail.yahoo.com


--
Jason Weisberger
Chief Technology Officer
SoftAware, Inc. 310/305-0275




Current thread: