Drew Weaver wrote: > Is this being punted because of the options field? Is there a best > practice to limiting this kind of traffic? This is most likely some > sort of DoS attack I would guess.
tcp options != ip options, which would probably be punted. Is y.y.y.y the IP address of the router, or some downstream device? If it's the router, then you need to install copp and block or rate limit this to nothing at all. If it's a downstream box, this traffic should not be punted. Did you blow the TCAM on this box at any stage? If so, a reboot might solve this. Nick _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
