Got it

Routing loop

Created: Jan 27, 2019 12:47:22Latest reply: Feb 12, 2019 11:11:25 3314 11 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi,


 %%01ADPIPV4/4/CPCAR_TTL1_DROP(l)[5]:The number of packets sent to the CPU exceed the threshold 20000.(SLOT=0, CPCAR TYPE=CPCAR_TTL1, DiscardPacketCount=209482, Reason="A routing loop may occur")


How to prevent this problem

  • x
  • convention:

Featured Answers
chenhui
Admin Created Jan 27, 2019 15:20:52

@Skynet_india hi,
you'd better check if the routing loop occured, if the no routing loop existed, you may under the attack of ttl-expired, please find out the attack address and ban the attack IP. please refer to https://support.huawei.com/enter ... 7960?idPath=7919710|21782164|21782167|22322826|21962538

chapter ADPIPV4
View more
  • x
  • convention:

All Answers
chenhui
chenhui Admin Created Jan 27, 2019 15:20:52

@Skynet_india hi,
you'd better check if the routing loop occured, if the no routing loop existed, you may under the attack of ttl-expired, please find out the attack address and ban the attack IP. please refer to https://support.huawei.com/enter ... 7960?idPath=7919710|21782164|21782167|22322826|21962538

chapter ADPIPV4
View more
  • x
  • convention:

galaxy_22
galaxy_22 Created Jan 27, 2019 15:48:04

Posted by chenhui at 2019-01-27 15:20@Skynet_india hi,you'd better check if the routing loop occured, if the no routing loop existed, you ...


How to check whether it is routing loop ? it keeps coming every 5  minutes.
View more
  • x
  • convention:

galaxy_22
galaxy_22 Created Jan 27, 2019 16:14:20

Hi captured the packets for ttl-expired protocol and transfered it to wireshark

wireshark display 5 packets in red color and says malformed packet: tcp

View more
  • x
  • convention:

chenhui
chenhui Admin Created Jan 28, 2019 00:48:31

Posted by galaxy_22 at 2019-01-27 16:14 Hi captured the packets for ttl-expired protocol and transfered it to wiresharkwireshark display 5 p ...
are the ttl-expired packets keeping increasing? if the number of the ttl-expired packet keeps increasing, check the capture results and find out the source IP address of the ttl-expired packets,
View more
  • x
  • convention:

Skynet_india
Skynet_india Created Jan 28, 2019 05:55:31

Hi,

TTL-Expired keeps increasing, here i attached the screen shot of captured packets
View more

This article contains more resources

You need to log in to download or view. No account? Register

x
  • x
  • convention:

chenhui
chenhui Admin Created Jan 28, 2019 07:29:10

Posted by Skynet_india at 2019-01-28 05:55 Hi,TTL-Expired keeps increasing, here i attached the screen shot of captured packets
are the packets, which with source ip address 23.32.28.xx, received or sent out on your device?
View more
  • x
  • convention:

chenhui
chenhui Admin Created Jan 28, 2019 07:33:37

Posted by Skynet_india at 2019-01-28 05:55 Hi,TTL-Expired keeps increasing, here i attached the screen shot of captured packets
it seem like a tcp syn attack,
View more
  • x
  • convention:

chenhui
chenhui Admin Created Jan 28, 2019 07:37:34

Posted by Skynet_india at 2019-01-28 05:55 Hi,TTL-Expired keeps increasing, here i attached the screen shot of captured packets
you can check the malformed packets statistics by command display anti-attack statistics abnormal
View more
  • x
  • convention:

galaxy_22
galaxy_22 Created Feb 12, 2019 11:11:10 (0) (0)
Packets Statistic Information:
-------------------------------------------------------------------------------
AntiAtkType TotalPacketNum DropPacketNum PassPacketNum
(H) (L) (H) (L) (H) (L 
WheatGrass
WheatGrass Created Jan 28, 2019 08:32:33

You may refer to this case sharing:
https://support.huawei.com/enterprise/en/knowledge/ETC0001085033
View more
  • x
  • convention:

12
Back to list

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.
Information Protection Guide
Thanks for using Huawei Enterprise Support Community! We will help you learn how we collect, use, store and share your personal information and the rights you have in accordance with Privacy Policy and User Agreement.