LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 01-28-2005, 09:49 AM   #1
jamiguel77
LQ Newbie
 
Registered: May 2004
Distribution: red hat
Posts: 24

Rep: Reputation: 15
Probelm "Neighbour Table overflow"


Probelm "Neighbour Table overflow"

sometimes in console mode i get these error:

Feb 25 12:25:23 XXX kernel: NET: 270 messages suppressed.
Feb 25 12:25:23 XXX kernel: Neighbour table overflow.
Feb 25 12:25:27 XXX kernel: NET: 209 messages suppressed.
Feb 25 12:25:27 XXX kernel: Neighbour table overflow.
Feb 25 12:25:32 XXX kernel: NET: 313 messages suppressed.
Feb 25 12:25:32 XXX kernel: Neighbour table overflow.
Feb 25 12:25:37 XXX kernel: NET: 307 messages suppressed.


if i type: arp -a

? (192.168.194.28) at <incomplete> on eth0
? (192.168.149.180) at <incomplete> on eth0
? (192.168.173.58) at <incomplete> on eth0
? (192.168.54.94) at <incomplete> on eth0
? (192.168.163.16) at <incomplete> on eth0
? (192.168.208.99) at <incomplete> on eth0
? (192.168.55.123) at <incomplete> on eth0
? (192.168.130.234) at <incomplete> on eth0
? (192.168.31.62) at <incomplete> on eth0
? (192.168.75.35) at <incomplete> on eth0
? (192.168.9.186) at <incomplete> on eth0
? (192.168.94.237) at <incomplete> on eth0
? (192.168.242.247) at <incomplete> on eth0
? (192.168.250.0) at <incomplete> on eth0
? (192.168.232.128) at <incomplete> on eth0
? (192.168.71.244) at <incomplete> on eth0
? (192.168.193.224) at <incomplete> on eth0

(i get more lines ......)

my network are: 192.168.0.x not know these ips(arp table)....

i use eth0 for my lan and ppp0 for get internet.....

my linux internet server is not working properly, and not share internet.... no WWW no MAIL....

thanks any advice?
 
Old 01-28-2005, 11:43 AM   #2
peter_robb
Senior Member
 
Registered: Feb 2002
Location: Szczecin, Poland
Distribution: Gentoo, Debian
Posts: 2,458

Rep: Reputation: 47
You may have someone on your network scanning for other pcs, eg a kazaa client
Also check if your net card is in promiscuous mode or not.
do ifconfig to read the setup information.
Do you have a net monitor running, eg arpwatch, nessus?
 
Old 01-28-2005, 01:04 PM   #3
jamiguel77
LQ Newbie
 
Registered: May 2004
Distribution: red hat
Posts: 24

Original Poster
Rep: Reputation: 15
again.....

i checked some pcs and 3 have emule connection....


my ifconfig:

[root@ServerWB root]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:08:54:23:81:F9
inet addr:192.168.102.5 Bcast:192.168.255.255 Mask:255.255.0.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:829302 errors:0 dropped:0 overruns:0 frame:0
TX packets:6600354 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:526447909 (502.0 Mb) TX bytes:646197510 (616.2 Mb)
Interrupt:10 Base address:0x5f00

eth1 Link encap:Ethernet HWaddr 00:08:54:23:81A
inet addr:192.168.0.1 Bcast:192.168.0.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:8731046 errors:0 dropped:0 overruns:0 frame:0
TX packets:976644 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:752723371 (717.8 Mb) TX bytes:447384199 (426.6 Mb)
Interrupt:10 Base address:0x7e00

eth1:1 Link encap:Ethernet HWaddr 00:08:54:23:81A
inet addr:192.168.102.6 Bcast:192.168.102.255 Mask:255.255.255.0
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Interrupt:10 Base address:0x7e00

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:187664 errors:0 dropped:0 overruns:0 frame:0
TX packets:187664 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:37315899 (35.5 Mb) TX bytes:37315899 (35.5 Mb)

ppp0 Link encap:Point-to-Point Protocol
inet addr:200.67.xxx.xxx P-t-P:148.235.xxx.xxx Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1492 Metric:1
RX packets:675123 errors:0 dropped:0 overruns:0 frame:0
TX packets:2356000 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:3
RX bytes:439757647 (419.3 Mb) TX bytes:279195037 (266.2 Mb)

[root@ServerWB root]#



in 1 pc i running ethereal, but after the errors... for check the traffic....


Thanks

Last edited by peter_robb; 01-28-2005 at 01:14 PM.
 
Old 01-28-2005, 01:20 PM   #4
peter_robb
Senior Member
 
Registered: Feb 2002
Location: Szczecin, Poland
Distribution: Gentoo, Debian
Posts: 2,458

Rep: Reputation: 47
So it looks like just the emule scanning traffic when it first starts up, randomly trying every possible ip number..
Lots of network traffic..
Once they have learnt the local network, they tend to be quiet..

I'll have a look and see if there are any /proc settings that will allow you to ignore them safely..
 
Old 01-28-2005, 02:00 PM   #5
jamiguel77
LQ Newbie
 
Registered: May 2004
Distribution: red hat
Posts: 24

Original Poster
Rep: Reputation: 15
emule and arp....

ok i wait:
I'll have a look and see if there are any /proc settings that will allow you to ignore them safely..



how block emule, kazza ????
iptables?


thanks
 
Old 02-12-2005, 09:50 PM   #6
injected
LQ Newbie
 
Registered: Feb 2005
Posts: 2

Rep: Reputation: 0
Just wanted to note that I've had the same problems recently. Only one PC on the LAN but it sometimes is running emule, which could account for the large network traffic.

Then again, it has also happened with emule turned off

 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Neighbour table Overflow myguest Linux - Security 5 08-19-2010 12:44 AM
neighbour table overflow hammadrs Linux - Software 4 02-24-2006 03:48 PM
"Neighbour table overflow." blocking internet Riddick Linux - Networking 5 11-17-2005 02:40 PM
kernel: Neighbour table overflow basbosco Linux - Software 0 06-19-2004 03:24 AM
"neighbor table overflow" error on 9.2 network install jordan0 Mandriva 0 04-08-2004 02:53 PM


All times are GMT -5. The time now is 05:51 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration