- Community Home
- >
- Networking
- >
- Legacy
- >
- Switches, Hubs, Modems
- >
- Re: Storming problems
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО05-21-2009 10:56 PM
тАО05-21-2009 10:56 PM
I have a network with Procurve 2626, 2610 and Cisco 3550/3560 switches.
About 1000 hosts is connected.
The network is divided into several VLANs.
Lately I have problems with what seems to be storming on the network.
I use Cacti to monitor the switches via SNMP, I see that the traffic explodes on all trunks when the problem occur.
This form time to time now, it might be a host with virus etc, sending multicast/broadcast.
What I know is that it is not a loop.
I need some quick tips on how to set up the switches to counteract this kind of trouble..
Regards
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО05-22-2009 01:25 PM
тАО05-22-2009 01:25 PM
Solution- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО05-24-2009 11:31 PM
тАО05-24-2009 11:31 PM
Re: Storming problems
If you have not setup multicast routing also multicasts stay within their vlans.
- look for devices like printservers that have protocols like ipx enabled (by default they have) and disable unused protocols these protocols should not create broadcast "storms" but can create a peak of broadcast traffic.
A hello from one device gets response from all other devices, both are broadcasts.
Above a certain number of devices this can create significant traffic.
- if these protocols are "legally" used on your network you may need to create smaller subnets/vlans so a broadcast within a vlan creates less traffic.
- you can try to configure your trunks only for vlans that really need to pass to other switches. (only tag vlans that do exist on the other side of the link, check both sides have the same vlans tagged)
- if you can route on your uplinks (keep a vlan/subnet within a single switch) broadcasts should not pass your trunks.
- you can use a network packet analyzer (sniffer/netmon/wireshark) to locate the vlan/subnets/devices thats creating the storm.
Pieter
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО05-25-2009 02:48 AM
тАО05-25-2009 02:48 AM
Re: Storming problems
Setting rate limits for storm seems like a good idea.
I see that the limit is in % of the link capacity.
So if there is a wireless bridge behind the port I must use the bridges bandwidth in consideration. If the bridge can carry 30Mbps that would be 30% of a 100Mbps port.
Any idea on what to limit broadcasts, multicast, unicast at...
I have used wireshark for analysing traffic, but only one VLAN at a time, and I have not figured out where it comes from yet.
Any way to listen on all VLANs at the same time?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО05-26-2009 09:12 AM
тАО05-26-2009 09:12 AM
Re: Storming problems
Sure, set the monitoring port tagged in all VLANs, and teach the network driver to speak 802.1Q . http://wiki.wireshark.org/CaptureSetup/VLAN