Re: Attack on UDP 101

2012-07-21 Thread Christopher Morrow
On Sat, Jul 21, 2012 at 3:12 PM, Shahab Vahabzadeh wrote: > Can hardware problem make something happen? > a CEF corruption could, but really... I'd start with on both devices: show ip route and see if perhaps they both point to each other... then resolve that problem. > On Sat, Jul 21, 2012

Re: Attack on UDP 101

2012-07-21 Thread Shahab Vahabzadeh
Can hardware problem make something happen? On Sat, Jul 21, 2012 at 11:38 PM, Christopher Morrow < morrowc.li...@gmail.com> wrote: > On Sat, Jul 21, 2012 at 2:41 PM, Shahab Vahabzadeh > wrote: > > Dear Stefan, > > I have an 7206VXR Router with this design: > > > > int gig 0/1: directly connected

Re: Attack on UDP 101

2012-07-21 Thread Christopher Morrow
On Sat, Jul 21, 2012 at 2:41 PM, Shahab Vahabzadeh wrote: > Dear Stefan, > I have an 7206VXR Router with this design: > > int gig 0/1: directly connected to 3750 switch (uplink to internet) > int gig 0/2: vlan termination from PSTN centers > int virtual-template1: xdsl users > > Its about 4 days t

Re: Attack on UDP 101

2012-07-21 Thread Christopher Morrow
On Sat, Jul 21, 2012 at 1:57 PM, Shahab Vahabzadeh wrote: > Dear Christopher, > There is no route for this host, but my users connect to this router via $ p 76.164.199.86 PING 76.164.199.86 (76.164.199.86) 56(84) bytes of data. 64 bytes from 76.164.199.86: icmp_seq=1 ttl=250 time=89.9 ms seems l

Re: Attack on UDP 101

2012-07-21 Thread Scott Morris
A packet doesn't make a loop. A device would create that. So if you are sending the packet out, but something else is sending it back, I'd go take a look at where that's occurring on your devices. If you disconnected the user in question, then what else has either taken over that address, or wha

Re: Attack on UDP 101

2012-07-21 Thread Shahab Vahabzadeh
Dear Stefan, I have an 7206VXR Router with this design: int gig 0/1: directly connected to 3750 switch (uplink to internet) int gig 0/2: vlan termination from PSTN centers int virtual-template1: xdsl users Its about 4 days that I see near 300Mpbs outbound traffic in int gig0/1 that there is no su

Re: Attack on UDP 101

2012-07-21 Thread Stefan Fouant
Can you give us more information? What do you mean it is causing Layer 3 loops? Stefan Fouant Sent from my HTC on the Now Network from Sprint! - Reply message - From: "Shahab Vahabzadeh" Date: Sat, Jul 21, 2012 10:50 am Subject: Attack on UDP 101 To: Hi there, Does any body know any

Re: Attack on UDP 101

2012-07-21 Thread Shahab Vahabzadeh
Dear Christopher, There is no route for this host, but my users connect to this router via virtual-template interface, and in the uplink interface of the same router automatically near 300Mbps traffic is generating (output) and its looping in the same interface (no broadcast in other interfaces). I

Re: Attack on UDP 101

2012-07-21 Thread Christopher Morrow
On Sat, Jul 21, 2012 at 10:50 AM, Shahab Vahabzadeh wrote: > 76.164.199.86 is this host perhaps a bcast/network address or routed oddly at the destination? (/32 route to something that is redirecting to another place? or redirecting back toward 0/0?) also: versaweb should fix their rwhois server