Гора ARP-запросов на VDS

вопросы по устройству ВДС, ресурсам, предустановленному софту и т.д.

Модераторы: Art.i, garry

Гора ARP-запросов на VDS

Сообщение Mindkiller » Вт окт 14, 2014 6:21 am

Доброго времени суток!

Взял погонять виртуалку (KVM). Смутило, что через сутки на счетчике фаервола появилось 250+ мегабайт трафика, хотя на виртуалке был запущен только SSH, да и тот на нестандартном порту. Решил посмотреть, что бы это могло быть, и увидел шквал ARP-запросов.

02:39:24.001320 ARP, Request who-has 82.146.42.95 tell 82.146.40.254, length 46
02:39:24.005296 ARP, Request who-has 92.63.102.35 tell 92.63.96.254, length 46
02:39:24.019667 ARP, Request who-has 149.154.70.1 tell 149.154.71.254, length 46
02:39:24.021273 ARP, Request who-has 82.146.44.146 tell 82.146.40.254, length 46
02:39:24.022767 ARP, Request who-has 94.250.248.144 tell 94.250.249.254, length 46
02:39:24.026385 ARP, Request who-has 92.63.103.52 tell 92.63.96.254, length 46
02:39:24.030653 ARP, Request who-has 62.109.28.31 tell 188.120.247.2, length 46
02:39:24.055526 ARP, Request who-has 188.120.229.31 tell 188.120.239.254, length 46
02:39:24.056129 ARP, Request who-has 78.24.217.145 tell 78.24.223.254, length 46
02:39:24.056626 ARP, Request who-has 62.109.10.137 tell 62.109.15.254, length 46
02:39:24.056974 ARP, Request who-has 82.146.58.191 tell 82.146.59.254, length 46
02:39:24.057577 ARP, Request who-has 188.120.235.38 tell 188.120.239.254, length 46
02:39:24.057855 ARP, Request who-has 188.120.247.190 tell 188.120.247.254, length 46
02:39:24.058569 ARP, Request who-has 94.250.253.139 tell 94.250.253.254, length 46
02:39:24.058681 ARP, Request who-has 62.109.5.46 tell 62.109.0.254, length 46
02:39:24.059001 ARP, Request who-has 92.63.107.6 tell 92.63.104.254, length 46
02:39:24.059649 ARP, Request who-has 94.250.253.173 tell 94.250.253.254, length 46
02:39:24.060168 ARP, Request who-has 82.146.44.54 tell 82.146.40.254, length 46
02:39:24.060574 ARP, Request who-has 82.146.58.248 tell 82.146.59.254, length 46
02:39:24.060821 ARP, Request who-has 188.120.235.39 tell 188.120.239.254, length 46
02:39:24.061049 ARP, Request who-has 82.146.63.12 tell 82.146.59.254, length 46
02:39:24.061408 ARP, Request who-has 94.250.255.137 tell 94.250.255.254, length 46
02:39:24.061692 ARP, Request who-has 94.250.252.131 tell 94.250.253.254, length 46
02:39:24.062142 ARP, Request who-has 188.120.246.185 tell 188.120.247.254, length 46
02:39:24.062690 ARP, Request who-has 188.120.224.138 tell 188.120.239.254, length 46
02:39:24.063057 ARP, Request who-has 94.250.253.239 tell 94.250.253.254, length 46
02:39:24.063730 ARP, Request who-has 82.146.41.83 tell 82.146.40.254, length 46
02:39:24.064297 ARP, Request who-has 82.146.56.2 tell 82.146.59.254, length 46
02:39:24.064651 ARP, Request who-has 62.109.2.128 tell 62.109.0.254, length 46
02:39:24.064999 ARP, Request who-has 62.109.2.171 tell 62.109.0.254, length 46
02:39:24.065219 ARP, Request who-has 82.146.62.156 tell 82.146.59.254, length 46
02:39:24.065681 ARP, Request who-has 62.109.2.219 tell 62.109.0.254, length 46
02:39:24.065971 ARP, Request who-has 94.250.255.134 tell 94.250.255.254, length 46
02:39:24.066168 ARP, Request who-has 82.146.59.66 tell 82.146.59.254, length 46
02:39:24.066411 ARP, Request who-has 62.109.0.62 tell 62.109.0.254, length 46
02:39:24.072070 ARP, Request who-has 82.146.61.185 tell 82.146.59.254, length 46
02:39:24.087714 ARP, Request who-has 37.230.116.207 tell 37.230.116.254, length 46
02:39:24.096838 ARP, Request who-has 82.146.43.144 tell 82.146.40.254, length 46
02:39:24.098101 ARP, Request who-has 94.250.254.221 tell 94.250.255.254, length 46
02:39:24.108728 ARP, Request who-has 94.250.254.252 tell 94.250.255.254, length 46
02:39:24.119071 ARP, Request who-has 62.109.4.174 tell 62.109.0.254, length 46
02:39:24.121055 ARP, Request who-has 62.109.22.199 tell 62.109.23.254, length 46
02:39:24.138616 ARP, Request who-has 188.120.240.214 tell 188.120.245.108, length 46
02:39:24.154998 ARP, Request who-has 92.63.101.119 tell 92.63.96.254, length 46
02:39:24.157231 ARP, Request who-has 82.146.62.132 tell 82.146.59.254, length 46
02:39:24.157575 ARP, Request who-has 188.120.224.110 tell 188.120.239.254, length 46
02:39:24.157868 ARP, Request who-has 188.120.235.37 tell 188.120.239.254, length 46
02:39:24.161767 ARP, Request who-has 82.146.58.228 tell 82.146.59.254, length 46
02:39:24.161783 ARP, Request who-has 62.109.14.81 tell 62.109.15.254, length 46
02:39:24.161792 ARP, Request who-has 92.63.104.71 tell 92.63.104.254, length 46
02:39:24.161801 ARP, Request who-has 94.250.255.165 tell 94.250.255.254, length 46
02:39:24.161813 ARP, Request who-has 94.250.249.35 tell 94.250.249.254, length 46
02:39:24.161828 ARP, Request who-has 62.109.7.183 tell 62.109.0.254, length 46
02:39:24.161843 ARP, Request who-has 62.109.12.227 tell 62.109.15.254, length 46
02:39:24.161857 ARP, Request who-has 62.109.12.9 tell 62.109.15.254, length 46
02:39:24.161871 ARP, Request who-has 188.120.249.170 tell 188.120.249.254, length 46
02:39:24.165252 ARP, Request who-has 94.250.253.189 tell 94.250.253.254, length 46
02:39:24.165264 ARP, Request who-has 94.250.248.25 tell 94.250.249.254, length 46
02:39:24.165273 ARP, Request who-has 62.109.6.207 tell 62.109.0.254, length 46
02:39:24.165282 ARP, Request who-has 62.109.11.180 tell 62.109.15.254, length 46
02:39:24.165290 ARP, Request who-has 92.63.97.124 tell 92.63.96.254, length 46
02:39:24.165298 ARP, Request who-has 94.250.251.72 tell 94.250.251.254, length 46
02:39:24.165307 ARP, Request who-has 37.230.115.168 tell 37.230.115.254, length 46
02:39:24.165314 ARP, Request who-has 82.146.63.38 tell 82.146.59.254, length 46
02:39:24.165326 ARP, Request who-has 82.146.40.146 tell 82.146.40.254, length 46
02:39:24.165334 ARP, Request who-has 37.230.116.212 tell 37.230.116.254, length 46
02:39:24.165342 ARP, Request who-has 188.120.237.70 tell 188.120.239.254, length 46
02:39:24.165350 ARP, Request who-has 62.109.13.161 tell 62.109.15.254, length 46
02:39:24.165359 ARP, Request who-has 188.120.226.163 tell 188.120.239.254, length 46
02:39:24.165367 ARP, Request who-has 94.250.254.210 tell 94.250.255.254, length 46
02:39:24.165375 ARP, Request who-has 188.120.236.188 tell 188.120.239.254, length 46
02:39:24.165383 ARP, Request who-has 78.24.216.115 tell 78.24.223.254, length 46
02:39:24.165391 ARP, Request who-has 62.109.12.3 tell 62.109.15.254, length 46
02:39:24.165399 ARP, Request who-has 62.109.2.4 tell 62.109.0.254, length 46
02:39:24.167332 ARP, Request who-has 92.63.103.112 tell 92.63.96.254, length 46
02:39:24.182111 ARP, Request who-has 92.63.97.153 tell 92.63.96.254, length 46
02:39:24.199624 ARP, Request who-has 82.146.56.10 tell 82.146.59.254, length 46
02:39:24.208166 ARP, Request who-has 62.109.0.225 tell 62.109.0.254, length 46
02:39:24.214879 ARP, Request who-has 94.250.255.254 tell 94.250.254.185, length 46
02:39:24.217032 ARP, Request who-has 78.24.218.14 tell 78.24.223.254, length 46
02:39:24.224884 ARP, Request who-has 62.109.3.236 tell 62.109.0.254, length 46
02:39:24.227470 ARP, Request who-has 92.63.104.115 tell 92.63.104.254, length 46
02:39:24.238940 ARP, Request who-has 62.109.10.135 tell 62.109.15.254, length 46
02:39:24.255258 ARP, Request who-has 94.250.254.251 tell 94.250.255.254, length 46
02:39:24.255519 ARP, Request who-has 62.109.9.55 tell 62.109.15.254, length 46
02:39:24.263101 ARP, Request who-has 94.250.255.36 tell 94.250.255.254, length 46


И это все за 0.2 сек. Это нормально или есть повод для паники? Я как бы совсем в другой подсети нахожусь. Зачем мне эти запросы летят? :o
Mindkiller
 
Сообщений: 2
Зарегистрирован: Вт окт 14, 2014 5:48 am

Re: Гора ARP-запросов на VDS

Сообщение ls » Вт окт 14, 2014 8:55 am

Вообще паниковать не нужно, как я понял они на той же ноде, что и вы и следовательно запросы эти бегают внутри, то есть даже не внешних серверов
* FirstVDS в twitter в facebook и в вконтакте *
ls
Support team
 
Сообщений: 6405
Зарегистрирован: Чт мар 01, 2007 10:36 am
Откуда: FirstVDS

Re: Гора ARP-запросов на VDS

Сообщение Mindkiller » Вт окт 14, 2014 10:06 am

Т.е. все эти 254-ые IP-шники висят на одном интерфейсе какой-то железки? Жестоко!

Спасибо за разъяснения.
Mindkiller
 
Сообщений: 2
Зарегистрирован: Вт окт 14, 2014 5:48 am


Вернуться в Вопросы о работе сервера

Кто сейчас на форуме

Сейчас этот форум просматривают: нет зарегистрированных пользователей и гости: 7