Ubuntu server 12.04 creating broadcast on network

Hi all,

I have installed fresh Ubuntu 12.04 server 64Bit and configured network interface with static IP. After allowing Internet access and NAT it to public IP then it is creating broadcast on network and whole network is getting down. Can some one help me with this.

Thanks & regards,
Ravindra
syinfraSenior Deputy ManagerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

matrix8086Commented:
The external interface is in the same switch with the LAN interface?
0
syinfraSenior Deputy ManagerAuthor Commented:
Here I'm providing some more info...
This is a virtual machine running on Vmware. Because of this our internet is getting down not network.
0
Zephyr ICTCloud ArchitectCommented:
You will need to provide some more info, what is the role of the Linux server? How is it's network configured, can you provide screenshots or something? What kind of broadcast are we talking about, what's the traffic, how did you come to the conclusion?
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

sword12Commented:
check the smtp broadcasting and try to stop it or close port

http://unix.stackexchange.com/questions/74722/how-to-close-open-ports
0
Manmeet BhatnagarCommented:
Hi,

Few points you need to check first. This server is on public IP, might be compromised.

1. Check for user accounts, if these have weak passwords/usernames such as test/test123,admin/admin123,root,root@123,etc.

2. What service your are running on this server, like it's apache, squid, mysql, etc.

3. Now look for the current "ESTABLISHED" connection by running below command.
    #netstat -antulp|grep ESTAB
    Check if number of connections are high and Destination IPs are from different   location of the globe means something is wrong there.

4. If 3rd point work then follow this one as well -
   while running netstat you'll be able to see some "PIDs" Process ID.
   #pmap <PID>|less
Now look for the location for file/code put to run these connections.

Once done please update, if it doesn't work and on the same server "LAMP" is running and SMTP is enabled then we can test the other scenario as well.

Thanks,
Manmeet
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
gheistCommented:
By broadcast you mean switching loop?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Linux Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.