On 2009-03-18, Mail Lists <[email protected]> wrote: > I'm have some issues setting up a bridge. We recently co-located a > router in a data canter. The machine is a a soekris 5501 running > openbsd4.4. > > The interfaces use the vr drivers. > > A machine belonging to someone in our cabinet is sending out about > 100000 packets/second of udp traffic on port 42. When I try to put my > primary interface into bridge mode my machine locks up. I'm assuming > this is because it can't handle the amount of packets flowing past the > interface. Could anyone indicate whether or not this could indeed be > the problem or if I'm completely off base here. The admin at the data > center seems to think my box should be able to handle that amount of > traffic just fine.
it's pretty much sure to be the problem, the Geode CPU and vr(4) is not a winning combination for handling high packet-per-second. ping -f to my alix results in about 100% cpu use at 15K PPS. > Is there a way to ignore all packets coming from a certain MAC address > on layer 2? maybe this can be done at the switch. > Is there anyway possible that this is 'legitimate' traffic? damned unlikely. I think I'd be looking at a layer-1 solution if the box can't be made to behave... > Is there any other way to create a filtering bridge without putting > interfaces into promiscuous mode? you need promiscuous mode to act as a bridge.
