[RP-PPPoE] Server dies under PADT flood
Spinov Evgeniy
spinov_evgeniy at intalisan.com
Sun Dec 26 06:23:51 EST 2010
Hi all, I have server with rp-pppoe-3.10-6 and pppd-2.4.5-15, meaning
the latest stable releases. Strange behavior of server was found while
one of the SOHO routers send PADT flood to server:
Dec 26 10:03:03 nas5 pppoe-server[13954]: PADT for session 17 received
from 00:1A:70:9E:98:0D; should be from 00:C0:26:69:5F:7F
Dec 26 10:03:04 nas5 last message repeated 96 times
Dec 26 10:03:04 nas5 pppoe-server[13954]: PADT for session 1 received
from 00:1A:70:9E:98:0D; should be from 00:13:D4:8D:C5:58
Dec 26 10:03:04 nas5 pppoe-server[13954]: PADT for session 17 received
from 00:1A:70:9E:98:0D; should be from 00:C0:26:69:5F:7F
Dec 26 10:03:05 nas5 last message repeated 28 times
Dec 26 10:03:06 nas5 pppoe-server[13954]: PADT for session 1 received
from 00:1A:70:9E:98:0D; should be from 00:13:D4:8D:C5:58
Dec 26 10:03:06 nas5 last message repeated 46 times
Dec 26 10:03:06 nas5 pppoe-server[13954]: PADT for session 17 received
from 00:1A:70:9E:98:0D; should be from 00:C0:26:69:5F:7F
Dec 26 10:03:07 nas5 pppoe-server[13954]: PADT for session 1 received
from 00:1A:70:9E:98:0D; should be from 00:13:D4:8D:C5:58
Dec 26 10:03:07 nas5 last message repeated 14 times
Dec 26 10:03:07 nas5 pppoe-server[13954]: PADT for session 17 received
from 00:1A:70:9E:98:0D; should be from 00:C0:26:69:5F:7F
Dec 26 10:03:07 nas5 last message repeated 2 times
Dec 26 10:03:08 nas5 pppoe-server[13954]: PADT for session 1 received
from 00:1A:70:9E:98:0D; should be from 00:13:D4:8D:C5:58
Dec 26 10:03:08 nas5 pppoe-server[13954]: PADT for session 17 received
from 00:1A:70:9E:98:0D; should be from 00:C0:26:69:5F:7F
Dec 26 10:03:08 nas5 last message repeated 2 times
under heavy flood server dies. Time differs. May be 30 minutes, may be
10:
Dec 26 09:13:01 nas5 last message repeated 772 times
Dec 26 09:13:01 nas5 pppoe-server[14903]: Terminating on signal 15 --
killing all PPPoE sessions
It's obvious, that flood could be filtered, but problem is that server
falling, without any reason. And who sends signal 15 in this case?
Please advice.
Thanks.
More information about the RP-PPPoE
mailing list