<div dir="auto"><div dir="auto">All,</div><div dir="auto"><br></div>For junos.. check the output of <div dir="auto"><br></div><div dir="auto">"show ddos-protection protocols statistics terse"<br></div><div dir="auto"><br></div><div dir="auto">will give you some hints what happened..</div><div dir="auto">It appears ttl, ndpv6 hit via ix?</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, 9 Jun 2021, 2:48 pm Luke Iggleden, <<a href="mailto:luke@iggleden.com">luke@iggleden.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<p>Hi All,</p>
<p>I too would like to see what the traffic was that hit our
Junipers with this issue.<br>
</p>
<p>We changed the default arp policer last time a similar event
happened on Megaport, but still this played havoc on our routing
engines. Is there some other traffic we have to filter to protect
our networks from broadcast storms on this peering fabric?</p>
<p><br>
</p>
<p><br>
</p>
<div>On 9/6/21 2:06 pm, Stavros Patiniotis
wrote:<br>
</div>
<blockquote type="cite">
<div>
<p class="MsoNormal"><span>Hi,<u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span>Does
anyone have a sample pcap of the erroneous traffic seen from
their port that they would be able to share? <u></u><u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<p class="MsoNormal"><span><u></u> <u></u></span></p>
<div>
<div style="border:none;border-top:solid #e1e1e1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> AusNOG
<a href="mailto:ausnog-bounces@lists.ausnog.net" target="_blank" rel="noreferrer"><ausnog-bounces@lists.ausnog.net></a> <b>On Behalf Of
</b>Dave Browning<br>
<b>Sent:</b> Wednesday, 9 June 2021 1:27 PM<br>
<b>To:</b> <a href="mailto:ausnog@lists.ausnog.net" target="_blank" rel="noreferrer">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] Anyone put their hand up?<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The storm came in from
fe80::82e0:1dff:fe27:b440<br>
Which is 80:e0:1d:27:b4:40<br>
Which is 103.26.68.204 in v4 land<br>
Which is AS38858<br>
<br>
:)<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">On 9/06/2021 1:38 pm, Edward Um wrote:<u></u><u></u></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Can anyone confirm an outage at 1pm ish
today?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks in advance!<u></u><u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<p class="MsoNormal">Edward Um<br>
Mobile: +61 449 051 894<br>
<br>
Sent on the run!<u></u><u></u></p>
</div>
<p class="MsoNormal"><br>
<br>
<u></u><u></u></p>
<pre>_______________________________________________<u></u><u></u></pre>
<pre>AusNOG mailing list<u></u><u></u></pre>
<pre><a href="mailto:AusNOG@lists.ausnog.net" target="_blank" rel="noreferrer">AusNOG@lists.ausnog.net</a><u></u><u></u></pre>
<pre><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank" rel="noreferrer">http://lists.ausnog.net/mailman/listinfo/ausnog</a><u></u><u></u></pre>
</blockquote>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<br>
<fieldset></fieldset>
<pre>_______________________________________________
AusNOG mailing list
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank" rel="noreferrer">AusNOG@lists.ausnog.net</a>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank" rel="noreferrer">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
</div>
_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank" rel="noreferrer">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</blockquote></div>