2004-10-26 17:35:09

by Dominik Karall

[permalink] [raw]
Subject: Neighbour table overflow.

can anybody explain why i get thousands of "Neighbour table overflow."
messages? i didn't get such ones with older kernels (~2.6.6).
here is a dmesg output:

printk: 54050 messages suppressed.
Neighbour table overflow.
printk: 10403 messages suppressed.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
Neighbour table overflow.
printk: 58524 messages suppressed.

this couldn't be ok, or?

best regards,
dominik


Attachments:
(No filename) (599.00 B)
(No filename) (307.00 B)
Download all attachments

2004-10-26 21:24:34

by Chris Wedgwood

[permalink] [raw]
Subject: Re: Neighbour table overflow.

On Tue, Oct 26, 2004 at 07:39:31PM +0200, Dominik Karall wrote:

> can anybody explain why i get thousands of "Neighbour table
> overflow." messages? i didn't get such ones with older kernels
> (~2.6.6).

is loopback down?

2004-10-26 21:52:36

by Ernst Herzberg

[permalink] [raw]
Subject: Re: Neighbour table overflow.

On Tuesday 26 October 2004 19:39, Dominik Karall wrote:
> can anybody explain why i get thousands of "Neighbour table overflow."
> messages? i didn't get such ones with older kernels (~2.6.6).

Do you set a default gateway?

2004-10-26 22:10:55

by Dominik Karall

[permalink] [raw]
Subject: Re: Neighbour table overflow.

On Tuesday 26 October 2004 23:23, Chris Wedgwood wrote:
> On Tue, Oct 26, 2004 at 07:39:31PM +0200, Dominik Karall wrote:
> > can anybody explain why i get thousands of "Neighbour table
> > overflow." messages? i didn't get such ones with older kernels
> > (~2.6.6).
>
> is loopback down?

no, loopback is up.

dominik


Attachments:
(No filename) (320.00 B)
(No filename) (307.00 B)
Download all attachments

2004-10-26 22:13:45

by Dominik Karall

[permalink] [raw]
Subject: Re: Neighbour table overflow.

On Tuesday 26 October 2004 23:52, Ernst Herzberg wrote:
> On Tuesday 26 October 2004 19:39, Dominik Karall wrote:
> > can anybody explain why i get thousands of "Neighbour table overflow."
> > messages? i didn't get such ones with older kernels (~2.6.6).
>
> Do you set a default gateway?

yes, default gateway is set to our server.

dominik


Attachments:
(No filename) (342.00 B)
(No filename) (307.00 B)
Download all attachments

2004-10-26 23:14:38

by David Miller

[permalink] [raw]
Subject: Re: Neighbour table overflow.

On Wed, 27 Oct 2004 00:11:26 +0200
Dominik Karall <[email protected]> wrote:

> On Tuesday 26 October 2004 23:52, Ernst Herzberg wrote:
> > On Tuesday 26 October 2004 19:39, Dominik Karall wrote:
> > > can anybody explain why i get thousands of "Neighbour table overflow."
> > > messages? i didn't get such ones with older kernels (~2.6.6).
> >
> > Do you set a default gateway?
>
> yes, default gateway is set to our server.

Do you use a large subnet mask? For example /16 or /8 or
something like that?

If so, you will need to bump up the neighbour table garbage
collection thresholds under /proc/sys/net/ipv4/neight/default/
Specifically gc_thresh1, gc_thresh2, and gc_thresh3

You probably have a huge number of machines on your subnet.

2004-10-26 23:58:26

by Wichert Akkerman

[permalink] [raw]
Subject: Re: Neighbour table overflow.

Previously David S. Miller wrote:
> You probably have a huge number of machines on your subnet.

I got the same error recently on a router running 5 subnets ranging
from /25 to /26 sizes. More annoyingly the interface stopped working
after that message until I did an ifdown && ifup on it.

Wichert.

--
Wichert Akkerman <[email protected]> It is simple to make things.
http://www.wiggy.net/ It is hard to make things simple.

2004-10-27 00:31:20

by Dominik Karall

[permalink] [raw]
Subject: Re: Neighbour table overflow.

On Wednesday 27 October 2004 01:06, David S. Miller wrote:
> On Wed, 27 Oct 2004 00:11:26 +0200
>
> Dominik Karall <[email protected]> wrote:
> > On Tuesday 26 October 2004 23:52, Ernst Herzberg wrote:
> > > On Tuesday 26 October 2004 19:39, Dominik Karall wrote:
> > > > can anybody explain why i get thousands of "Neighbour table
> > > > overflow." messages? i didn't get such ones with older kernels
> > > > (~2.6.6).
> > >
> > > Do you set a default gateway?
> >
> > yes, default gateway is set to our server.
>
> Do you use a large subnet mask? For example /16 or /8 or
> something like that?
>
> If so, you will need to bump up the neighbour table garbage
> collection thresholds under /proc/sys/net/ipv4/neight/default/
> Specifically gc_thresh1, gc_thresh2, and gc_thresh3
>
> You probably have a huge number of machines on your subnet.

the subnet mask is set to 255.255.0.0, and there are machines from 172.16.0.1
to 172.16.1.254. but not all ips are reserved. there are "only" about 100
machines in the network.
i will try to change the values of gc_thresh*, maybe it helps. thx!

dominik


Attachments:
(No filename) (1.08 kB)
(No filename) (307.00 B)
Download all attachments

2004-10-28 02:26:46

by John Pearson

[permalink] [raw]
Subject: Re: Neighbour table overflow.

You may also be the 'victim' of a poorly configured router.

Out-of-the box, Cisco routers come with proxy ARP enabled;
they will reply to ARP requests for any IP they can route,
that isn't routed via the interface they receive an ARP
request on. This makes them more 'plug-and-playful' for
equipment that talks IP, but doesn't understand routing
(assuming any still exists).

Check the output of
arp -an
and see if there isn't a single MAC accounting for the lion's
share of your ARP cache. If there is, seek and destroy^H^H^H^H^Hfang


On Wed, Oct 27, 2004 at 02:30:32AM +0200, Dominik Karall wrote
> --nextPart2038980.5ceDjSAWoH
> Content-Type: text/plain;
> charset=3D"iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
> Content-Disposition: inline
>
> On Wednesday 27 October 2004 01:06, David S. Miller wrote:
> > On Wed, 27 Oct 2004 00:11:26 +0200
> >
> > Dominik Karall <[email protected]> wrote:
> > > On Tuesday 26 October 2004 23:52, Ernst Herzberg wrote:
> > > > On Tuesday 26 October 2004 19:39, Dominik Karall wrote:
> > > > > can anybody explain why i get thousands of "Neighbour table
> > > > > overflow." messages? i didn't get such ones with older kernels
> > > > > (~2.6.6).
> > > >
> > > > Do you set a default gateway?
> > >
> > > yes, default gateway is set to our server.
> >
> > Do you use a large subnet mask? For example /16 or /8 or
> > something like that?
> >
> > If so, you will need to bump up the neighbour table garbage
> > collection thresholds under /proc/sys/net/ipv4/neight/default/
> > Specifically gc_thresh1, gc_thresh2, and gc_thresh3
> >
> > You probably have a huge number of machines on your subnet.
>
> the subnet mask is set to 255.255.0.0, and there are machines from 172.16=
> .0=3D
> =3D2E1=3D20
> to 172.16.1.254. but not all ips are reserved. there are "only" about 100=
> =3D20
> machines in the network.
> i will try to change the values of gc_thresh*, maybe it helps. thx!
>
> dominik
>
> --nextPart2038980.5ceDjSAWoH
> Content-Type: application/pgp-signature
>
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.5 (GNU/Linux)
>
> iQCVAwUAQX7sKgvcoSHvsHMnAQJXqgP/eFTl/SzsI83Q/WgZmlaJ9xPCXsSxFbQm
> 2UmR4cHDZti6mOzKeAOI/O91S+xTkFvdYmVgm+k+TAaUpy6OHa1Lx84y9H7uMa7P
> 7afLf9+qQ00pi+uUp9srhihpiwt1yEYRWuvc9NaZhYfl9EJdeQmGNy6M7tlSwV07
> mxTCNjVqBBU=3D
> =3DZ8MD
> -----END PGP SIGNATURE-----
>
> --nextPart2038980.5ceDjSAWoH--
> -
> To unsubscribe from this list: send the line "unsubscribe linux-kernel" i=
> n
> the body of a message to [email protected]
> More majordomo info at http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at http://www.tux.org/lkml/
>
>
> --__--__--

--
Voice: +61 8 8202 9040
Email: [email protected]

Pracom Ltd
288 Glen Osmond Road
Fullarton, South Australia 5063

Ph: + 61 8 82029000
Fax: +61 8 82029001

CAUTION: This email and any attachments may contain information that is
confidential and subject to copyright. If you are not the
intended recipient, you must not read, use, disseminate, distribute or
copy this email or any attachments. If you have received this
email in error, please notify the sender immediately by reply email and
erase this email and any attachments.

DISCLAIMER: Pracom uses virus-scanning technology but accepts no
responsibility for loss or damage arising from the use of the
information transmitted by this email including damage from virus.