38 messages in net.nether.puck.cisco-nsp[c-nsp] VLSM
FromSent OnAttachments
ShaunJan 10, 2005 4:53 pm 
Gert DoeringJan 10, 2005 5:26 pm 
Stephen J. WilcoxJan 10, 2005 5:27 pm 
matthew zeierJan 10, 2005 5:46 pm 
ShaunJan 10, 2005 6:19 pm 
Michael SmithJan 10, 2005 6:26 pm 
Stephen J. WilcoxJan 10, 2005 6:28 pm 
lis...@hojmark.orgJan 10, 2005 6:55 pm 
Brant I. StevensJan 10, 2005 11:25 pm 
Gert DoeringJan 11, 2005 2:33 am 
Stephen J. WilcoxJan 11, 2005 6:11 am 
Mark PersikoJan 11, 2005 10:49 am 
Gert DoeringJan 11, 2005 11:22 am 
Hudson Delbert J Contr 61 CS/SCBNJan 11, 2005 12:11 pm 
Brant I. StevensJan 11, 2005 12:45 pm 
Pete TemplinJan 11, 2005 12:52 pm 
Stephen J. WilcoxJan 11, 2005 1:30 pm 
Stephen J. WilcoxJan 11, 2005 1:39 pm 
Pete TemplinJan 11, 2005 2:09 pm 
Gert DoeringJan 11, 2005 2:47 pm 
Gert DoeringJan 11, 2005 2:48 pm 
matthew zeierJan 11, 2005 3:09 pm 
lis...@hojmark.orgJan 11, 2005 5:22 pm 
Anson RinesmithJan 11, 2005 5:47 pm 
Michael LoftisJan 11, 2005 5:57 pm 
Stephen J. WilcoxJan 11, 2005 7:23 pm 
Stephen J. WilcoxJan 11, 2005 7:37 pm 
ShaunJan 11, 2005 8:31 pm 
Jon LewisJan 11, 2005 9:48 pm 
Majid FaridJan 12, 2005 12:24 am 
matthew zeierJan 12, 2005 1:23 am 
Ted MittelstaedtJan 12, 2005 1:41 am 
Ted MittelstaedtJan 12, 2005 1:44 am 
Ted MittelstaedtJan 12, 2005 1:51 am 
lis...@hojmark.orgJan 12, 2005 1:18 pm 
lis...@hojmark.orgJan 12, 2005 1:30 pm 
ShaunJan 13, 2005 4:05 am 
Ted MittelstaedtJan 14, 2005 12:29 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[c-nsp] VLSMActions...
From:Ted Mittelstaedt (te@toybox.placo.com)
Date:Jan 12, 2005 1:51:07 am
List:net.nether.puck.cisco-nsp

If you have a hierarchical network topology with the gateway of last resort facing one egress point at the core, then I've noticed that "ip classless" has the unfortunate side effect of sending all traffic out that egress pipe, whose destination is for subnets that aren't used within the network.

I would be more interested in finding out where such traffic is originating from. That egress point should have a firewall on it that should have sufficient CPU power to run a set of big access lists. We use a 2 Ghz PC running UNIX that is setup as an ethernet to ethernet router in between the actual egress router and our switches, that does nothing other than screen traffic. I daresay I could probably list every single host IP on our network without introducing significant latency.

You will probably find the bulk of the traffic originating from a handful of misconfigured hosts.

Ted