Solved

Excessive network traffic - Packets with other destinations

Posted on 2008-06-19
7
316 Views
Last Modified: 2010-04-21
Hi,

Yesterday the flooding control on the cisco 2950t switch kicked in so I had a look at the bandwidth graphs using CNA. Usually we get around 1-2mbit/s of our own traffic, but it was up to 18mbit/s.

Port statistics shows that the switch is mostly receiving unicast traffic, none of which is transmitted of the fabric.

Adding an ACL to the port with our providers uplink to block all but traffic coming from my home IP shows that all of the incoming traffic was not destined for any of our servers as it still kept coming.

Spanning the port to a machine on the net and using tcpdump showed that every packet had a destination IP which was not in our block but was rather destined or sourced from an IP somewhere else on our providers network.

Contacting our provider, they said that there's not much they can do short of allocating our own VLAN (which would involved renumbering).

My question really is that how are unicast packets with a different destination still ending up at my switch. I can understand multicast and broadcast. Also, would this be a routing issue within my providers network or is this just something everyone has to live with?

Thanks,

T. Ballantine
0
Comment
Question by:Alcedema
  • 3
  • 3
7 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
ID: 21821775
This is normal behavior as they are running multiple IP subnets on the same physical network (VLAN) so you will receive broadcast, multicast and unicast flooded traffic for every subnet that resides on the same VLAN.  This is why they are telling you that they can put you in your own VLAN to isolate you from other subnets.  There isn't anything you can do on your end.  My Internet connection at home is the same way.
0
 
LVL 32

Expert Comment

by:harbor235
ID: 21821783

Is your service provider routing that traffic to you? If they have a looking glass/route server you can lookup up the prefix in question and see how they route that traffic. If is hitting your edge then your service provider has to route it to you. Who is your service provider and what is the destination?

harbor235 ;}
0
 

Author Comment

by:Alcedema
ID: 21822108
JF:
Thanks. Would you know if there's a down side to them setting me up on my own vlan? They do all of our routing for us, we've just got a switch and a range of their IPs.  The way they gave the VLAN as an option was seemingly "at last resort".

harbor:
As above, they do all of the routing, we just use them as our uplink. I must admit I'm not a whiz when it comes to layer 3. Another above or below I'm fine with ;) We're currently with Poundhost (.com) and the destinations (and/or sources) are IPs also belonging to them. It's not just a couple of the same IPs, it's loads.

Thanks.
0
Network it in WD Red

There's an industry-leading WD Red drive for every compatible NAS system to help fulfill your data storage needs. With drives up to 8TB, WD Red offers a wide array of solutions for customers looking to build the biggest, best-performing NAS storage solution.  

 
LVL 43

Expert Comment

by:JFrederick29
ID: 21822130
Actually, being in your own isolated VLAN would be a benefit technically with the only downside being that they may charge you for this "option".
0
 
LVL 43

Expert Comment

by:JFrederick29
ID: 21822135
Well, the other downside being what you already know....your IP address block will change but that's what DNS is for :)
0
 

Author Comment

by:Alcedema
ID: 21827089
Going ahead and changing over to an isolated vlan for a one-off fee. Hopefully have next to nothing encroaching on our network afterwards.

Thanks for your help.
0
 

Author Closing Comment

by:Alcedema
ID: 31468703
Thank you :)
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Backup UPS - email alert 3 116
Communication between VMs on the same Vstwitch 7 63
gns3 with layer 3 switch 6 46
Converting TV to Network (Muli-User) Web front. 8 41
The worst thing when starting a new job is when the previous Network Administrator left behind no documentation. How do you get into the devices? If you've been in this situation or just accidently mistyped your password, this article will hopefully…
Hello All, I have been training on Multicast for a while now and whenever I start the topic , I find out that my friends /  Colleagues mention that they do not know how to test Multicast Joins. As most of the multicast would be video traffic and …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now