Friday, November 23, 2018

Best way to track down an ARP Storm

I have a Ubiquiti EdgeRouter 6, a WAN + 2 LANS. Each LAN is connected to a separate switch. One for private communication/vpn traffic, the other for public traffic. All the machines connected are public facing LAMP stacks.

The Private Range and Switch act normally, but the public switch, all lights on all devices are constantly blinking in unison. It makes me think there is some sort of ARP packet storm going on.

What's the best way to go about tracking something like this down? Nothing seems really slow on the network or anything like that, but it's probably pretty under-utilized.



No comments:

Post a Comment