Brodacasts

[manu_9]

I have a issue , machine is generating lot of broadcast traffic .Why does machines do lot of broadcast .Any bosy has any clue how to trouble shoot.

[G. Vrijhoeven]

Hi,

Could you provide more info, about the network devices in your network ( servers, printers, pc's, HUP, switches)
You can install a sniffer ( nmap on linux) to capture the traffic and find out what servers are generating the traffic and stop processes that generate the traffic. Do you have printers on the network? check for Appletalk protocol, if not needed disable.

Regards,

Gideon

[Fred Ruffet]

Gideon,

nmap will give you what ports are opened on a machine. tcpdump or ethereal will give you the traffic (sniffers).

If Windows machines are doing broadcast, it is normal (i.e. NetBios).
BootP also do brodcast I believe.

Regards,

Fred

[manu_9]

I have a server which is generating lot of broadcast , i want to find out what is causing a braodcast on this unix machine.

[manu_9]

I have got a Unix server(HP 11.11) and its showing up in sniffer that its doing lot of broadcast.I want to find out why its doing so.

[Mobeen_1]

Manu,
Please check your patch levels. I had a similar problem on one of my servers (on a different Unix OS) and we did lot of troubleshooting using sniffers etc and it eventually turned out that it was a known problem and there was a patch available. Once the patch was applied, things were normal

regards
Mobeen

[G. Vrijhoeven]

Thanks for the correction Fred!

If you are able to sniff the packages you should be able to figure out the source port. If so you can use lsof to trace the deamon cousing it.

HTH,

Gideon

[Fabio Ettore]

Hi,

is NTP (Network Time Protocol) configured on your server?
Few months ago I heard a similar problem; it was the option
broadcastclient=yes
in /etc/ntp.conf.

That option does a polling of NTP clients and can be a reason of your broadcast problem.

Best regards,
Ettore

[manu_9]

yes its configured but todat the broadcast is no more existing .