need help with staros

[bbronco]

ok little back ground.
I have a wireless network that is all routed. 2 back bones going to 4
towers. and 2 star boxes and the end of each.

now the problem, on the ip's that Im not using I have it set as unused.
and that lets them run at 4k. every one that is unused has data going
across it????? some more than others. one tower has around 300k on them
in an 24 hour period??? how can this be?

what can I do to stop it? how can I see where it is coming from?

any help would be great!!!!

[lonnie]

A further step would be to block the unused IP's with a firewall rule.

[georgew]

Sounds like you have some sort of DOS condition, it could be an attack, or a routing loop problem.

Do you have a default route so that unroutable traffic actually exits your network?

I have seen configurations where simple ping scans turn into massive amounts of local traffic because BGP was unable to route the traffic, so it just bounces around untill the packets die of old age. One packet turns into dozens of packets. I have no idea if this is your problem, but it could be...

Use the tcpdump feature... advanced:network utilities:tcpdump.

I'm not a bgp expert, but I can look at the traffic for you and offer a guess as to what it is...

[bbronco]

can i set unused (my unused ip's) to 0kb? will that not let them pass data?

[lonnie]

0K is not allowed. Set them to 5K and they are are like a 4800 baud modem - not exactly usable, and you get to keep an eye on them.

[bbronco]

i set them to 1k and they still use it!!! still down loading a meg a night!! it runs at a 1k all the time!!!

can you tell me how to turn them off in the firewall?

[georgew]

5k is the lowest setting.

[bbronco]

if i set it to 5k they get 600b
if i set it to 1k they get 500b
so i would think that 1k is the smallest?

[georgew]

I'm really curious what the traffis is that you are seeing...

Send me a PM, and I'll discuss taking a look at it for you to see what's up with your bogus traffic...

[bbronco]

pmed you!!!