Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Router Crashes with ICMP to bogus address

Has anyone experienced router crashes say when traffic is sent from the client network to an ip address such as 173.173.173.173?

We noticed that on several routers, regardless of IOS! Any feedback would be appreciated!

1 REPLY
Gold

Re: Router Crashes with ICMP to bogus address

Are you talking about specific traffic, to a specific bogus IP address? Or, are you seeing high volumes of ICMP pings to addresse not on your network?

Maybe you have one of those worms that's been going around the Internet, Blaster or Nachi. Symptoms are high number of pings, to sequential IP addresses; also connection attempts to other machines on TCP port 135 (Microsoft uses this port for Remote Procedure Calls), again with sequential IP addreses. I had a customer with just a handful of infected machines in their enterprise; traffic from them essentially shut down all routing between VLANs at their core.

Had to use a Sniffer and do some packet captures to identify the offending machines, then isolated them; and then cleaned them with utilities downloadable from the Internet.

Hope this helps.

154
Views
0
Helpful
1
Replies