Netflow/MPLS

gizbri · ‎08-12-2009

I took Netflows off the serial lines on our routers facing our carriers MPLS network. All but 1 of the sites returned traffic I expected (protocols and endpoints were all recognizable) The one site had hosts and protocols not associated to our network.(I listed the protocols below) My thought is the carrier has the MPLS mis-configured and is letting this traffic into our network. Any thoughts on this?

Protocols

CHAOS

ICMP

IGMP

LEAF1

LEAF2

MFE_NSP

MUX

NETBLT

NONE

TCP

TRUNK2

UDP

Peter Paluch · ‎08-13-2009

Hello,

I am afraid I won't tell you anything new here but if you believe that these protocols are unexpected on your serial line and you are sure they are not generated by your own equipment, then by all means, talk to your provider. It might not necessarily be only his MPLS misconfigured, but perhaps other devices somehow leaking into your connection. Certainly your ISP would be interested as well.

Please let us know if there is anything interesting discovered!

Best regards,

Peter