I've got the same flood here, on port 445, across my LAN. If I block
that port, I get a flood instead via port 139.

There was 1MB/s upload/download between my Windows 10 machine and a
Raspberry Pi 3 (4.9.24-v7+).

I blocked that and had the same flood between two Raspberry Pi 3s.

The same thing happened if I fired up my Lubuntu boxes (I can't remember
if it was the 4.4.0-75-generic or the 4.8.0-29-generic, and I can't re-
enable Samba right now on the network, as it's "live" and I don't want
to disrupt the web service).

Have had to temporarily block all 139/445 Samba traffic on all networked
machines, just allowing 139 and 445 from my Windows 10 machine, which is
tolerable, as I need to be able to access network shared folders.

I've attached a screenshot from Wireshark, and I also have the .pcapng
capture file if needed.

** Attachment added: "Screenshot of Wireshark live capture"
   
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1686099/+attachment/4869996/+files/wireshark-screenshot.png

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1686099

Title:
  connection flood to port 445 on mounting cifs volume under kernel

Status in Linux:
  New
Status in linux package in Ubuntu:
  Confirmed

Bug description:
  This is identical to the bug reported on the Debian kernel list, only
  I'm running 4.4.0, not 4.[89].0

  After about 15 mintues, the cifsd daemon starts flooding echo requests
  on port 445 to the windows server causing a constant 1MB/s load
  (around 10,000 packets per second) that eventually leads to system
  instability that forces a reboot to correct.  This is repeatable and
  as far as I know started about a week ago (possibly with the
  installation of 4.4.0-75).

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=856843

To manage notifications about this bug go to:
https://bugs.launchpad.net/linux/+bug/1686099/+subscriptions

-- 
Mailing list: https://launchpad.net/~kernel-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to