interesting problem

I have a repeater site where it looks like a customer is using to much PPS.

using ethereal i havnt found anything odd. no bit torrents,no icmp, no igmp…

I had 1 subscriber doing a lot of arp so i disabled him…same thing.

any other suggestions of programs or protocols to watch for?

New Worm… check the NAT table if using NAT or the route table if routing, see if it’s in a sequential order or something.


AH, forgot check the multicast on packet filter.