18 May
2017
18 May
'17
2:46 a.m.
The volume did not change (some 10-15 packets per minute), just the type.
I suspected at some point that there is a network using 44 addresses
internally, had some leaks on them and that the garbage (DNS replies,
ICM rejects, IP fragments and such stuff) were the replies from hosts on
the internet receiving that traffic and sending replies back via the
ampr-gw.
These are gone at the moment.
On 18.05.2017 09:41, Brian Kantor wrote:
(Please trim inclusions from previous messages)
_______________________________________________
Interesting. I've not analyzed the crud to that level of detail as there
is simply too much of it for manual inspection and I haven't written
any automation to do it.
However, the accepted/rejected ratio didn't change much around that
moment, so I don't think we're suddenly exempt from inbound crud.
There's no sudden large change in the graph.
It's interesting that you're not seeing as much as usual, but I think
that amprgw is.
- Brian