LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 04-16-2002, 02:33 PM   #1
Jon-
Member
 
Registered: Dec 2001
Distribution: RH5.2/6.2/7.0/7.1/7.2/9/ES21/ES31
Posts: 91

Rep: Reputation: 15
Netatalk multicast storm


Hey all,

I'm trying to configure a netatalk box on an ethernet network. Everything works great as long as I plug my server into a hub. But, if I plug it into any of our 3com superstack II or superstack 3 switcher (3300) things get hosed. I've tried 3 different versions of netatalk (1.3, 1.4, 1.5) on Linux 2.2 and 2.4, with same results. My latest is RH7.2, netatalk 1.5.3.1.

When I run atalkd, I see lots o multicasts destined for 090001ffffff (the appletalk multicast). The server is trying to establish a presence (get a unique net and address #). At first, I thought our switches were somehow filtering this out. But, now I'm seeing that the traffic is actually propogating itself onto the network. And, it causes all the macs to freeze up, and sometimes I loose connectivity w/ the slower PCs (p100s, etc). So, it looks like the multicast packets aren't being filtered initially (as I would expect based on the switch config -- a rather plain config -- no vlans, etc) and instead make it to the network. But, something happens and I guess they never make it back to the workstation.

As soon as I kill the atalkd process, which usually requires me bringing down the adapter itself, the storm stops and all returns to normal.

If I plug this station into a hub with other Macs, which in turn is plugged into the same switch, all is fine?? So.. what did I miss? Weird NIC maybe? It's a 3com905b...I doubt it makes a difference but I am looking for my Intel NIC.

Most of our Macs are older units (7200) but we have several G3s and G4s. And, we're running an assortment of system 8,9, and osx.

I really seems more like there is some traffic that the Macs can see, but only if they are plugged into the hubs (so they can communicate freely. But, I also have a G3 plugged into one of those switches and it's fine too, as well as several win2k servers running apple file sharing, and they're visible as well, with not multicast problems.

I'm not specificy anything in particular on the Macs -- they use appletalk autoconfig, w/ no zone specified.

I'd appreciate any input

Jon

Last edited by Jon-; 04-16-2002 at 02:35 PM.
 
Old 04-16-2002, 05:27 PM   #2
Jon-
Member
 
Registered: Dec 2001
Distribution: RH5.2/6.2/7.0/7.1/7.2/9/ES21/ES31
Posts: 91

Original Poster
Rep: Reputation: 15
Well, after doing some more testing and arriving at strange results, I found that the particular port on my switch is funky, somehow. After doing some more tests, the port has completely stopped passing IP traffic now. I still have link lights, activity, and I'm seeing info in the web management software indicating the port is active, and that it's configuration is identicle to that of the other 23. But, i just switched to a different port, and it runs great. what the hell...

During that time, I ran tethereal on things. When plugged into the bad port, I'd see something like this:
14.798230 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
14.798230 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
14.898218 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.14
14.898218 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.14
14.998206 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.15
14.998206 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.15
15.098194 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.16
15.098194 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.16
15.198182 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.17
15.198182 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.17
15.298170 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.18
So, for every address, the server would broadcast twice during 1 second. In fact, it's the EXACT same second ?? down to 1 millionth (sp?) of a second. The starting address is that which I hardcoded in the atalkd.conf file. It would keep going through ALL the nodes and nets.

When plugged into a working port, I see this:
100.508388 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
100.608376 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
100.708365 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
100.808353 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
100.908342 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
101.008330 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
101.108318 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
101.208307 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
101.308295 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
101.408284 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
101.508272 65480.13:6 -> 0.255:6 DDP AppleTalk Zone Information Protocol packet
103.618028 Apple_e0:a9:1c -> 09:00:07:ff:ff:ff AARP Who has 65505.130? Tell 65280.125
110.477233 65480.13:6 -> 0.255:6 DDP AppleTalk Zone Information Protocol packet
120.476073 65480.13:6 -> 0.255:6 DDP AppleTalk Zone Information Protocol packet
130.474913 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
130.574902 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
130.674890 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
130.774879 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
130.874867 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
130.974855 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
131.074844 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
131.174832 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
131.274821 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
131.374809 3Com_71:01:b1 -> 09:00:07:ff:ff:ff AARP Is there a 65480.13
Basically, it sends the requests out 10 times in a second, then sends a zip packet. Then, 10 more times and all is well. So, I still need to find out what's up w/ my switch. Right now that port is effectivly dead. Bad switch maybe? I'll probably reset it tonight and see what happens.

Oh well, learned alot about appletalk in the past couple days...
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
The Midwest Snow Storm ruined my Christmas jaz General 3 12-23-2004 07:00 PM
Before the storm DooFDooF_music_ Linux - Newbie 8 09-03-2003 07:22 AM
anybody using STORM LINUX 2000 kalabaw22b Linux - Distributions 0 10-14-2001 10:18 AM
Creative Labs Pci Modem Installation Help On Storm Linux 2000 kalabaw22b Linux - Software 1 10-14-2001 08:13 AM
storm linux 2000 installation problem kalabaw22b Linux - Software 3 10-13-2001 09:45 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 02:39 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration