Solved

rx_address_match_errors?

Posted on 2012-04-07
4
2,469 Views
Last Modified: 2012-04-11
Hi Experts,

When I execute ethtool -S eth0, I see some values on rx_address_match_errors.
What does this thing means?

no errors found except for the rx_address_match_errors.
0
Comment
Question by:d34dp00l13
  • 2
  • 2
4 Comments
 
LVL 23

Expert Comment

by:Mysidia
Comment Utility
That drop counter is packets that were dropped, because the packet does not pass the Unicast or the Multicast packet filters.     In other words,  it could be a packet 'flooded out the upstream switch'  because the destination MAC address was unknown to the switch,   the Ethernet frame may have arrived at computers that are not destination.

In other words, a frame was received on the Ethernet interface,  that doesn't have a destination MAC address  matching the  computer Network card's unicast MAC address,   and  
the destination MAC address of the packet wasn't a valid multicast Ethernet address for a
multicast group the system was listening on either.
0
 

Author Comment

by:d34dp00l13
Comment Utility
Thanks Mysidia, but why does this thing hapens? And is this a sign of a network issue?
0
 
LVL 23

Accepted Solution

by:
Mysidia earned 500 total points
Comment Utility
This is a low-level NIC statistic.   It's not really anything to be concerned about, unless you see this incrementing at a high rate.
Do you see the counter incrementing much, or does it stay at the same value?

As I mentioned above, it is completely normal for a  NIC to receive Ethernet frames not destined for it occasionally.

If it happens _too_ often,  there may be a problem.    If many non-broadcast packets are getting flooded,  the switch may not have sufficient resources to efficiently switch your LAN,  or you may have a malicious node attempting to fill up switch MAC address tables with fake entries (for example, in order to eavesdrop on other hosts by forcing their traffic to be flooded out).
Path thrashing and other mayhem can also result if there's an unintentional loop in the network.


If a switch receives a raw Ethernet frame  (a network packet) with a destination MAC address that has not been learned yet,  the switch will flood that frame out ALL  switch ports  (except the port that the frame came in on).

For example, if  some computer on your LAN has not sent any network traffic for 5  minutes or so,
its  MAC address may age out of the switch's memory.

Another host on your LAN may suddenly send a packet to that computer, for example a ping or a Netbios UDP query.  Since the destination MAC address is not on the switch's memory,  that one packet will get flooded out.

This is the most likely cause unless you see the counter running a whole lot.
0
 

Author Closing Comment

by:d34dp00l13
Comment Utility
Hi Mysidia, thank you for explaining it further. I learn new things from you today!

Thank you and have a good day ahead!
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Little introduction about CP: CP is a command on linux that use to copy files and folder from one location to another location. Example usage of CP as follow: cp /myfoder /pathto/destination/folder/ cp abc.tar.gz /pathto/destination/folder/ab…
Introduction We as admins face situation where we need to redirect websites to another. This may be required as a part of an upgrade keeping the old URL but website should be served from new URL. This document would brief you on different ways ca…
Learn several ways to interact with files and get file information from the bash shell. ls lists the contents of a directory: Using the -a flag displays hidden files: Using the -l flag formats the output in a long list: The file command gives us mor…
Learn how to get help with Linux/Unix bash shell commands. Use help to read help documents for built in bash shell commands.: Use man to interface with the online reference manuals for shell commands.: Use man to search man pages for unknown command…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now