Community discussions

MikroTik App
 
binhorp
newbie
Topic Author
Posts: 39
Joined: Wed Mar 05, 2008 4:40 pm

High traffic in the ethernet port protocol 814

Fri Apr 08, 2016 11:49 am

Hello everyone, I am experiencing traffic problems in the ethernet port on the protocol 814 randomly happens as if it were an attack, using the touch tool, I see that all traffic comes from Protocol 814, anyone know how to block this traffic?
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: High traffic in the ethernet port protocol 814

Fri Apr 08, 2016 12:17 pm

It is not very useful to block this, as it is unrecognized traffic so it will not be processed anyway.
Check the MAC addresses to see who is sending it and ask them what it is.
 
nxs02
Member Candidate
Member Candidate
Posts: 119
Joined: Sat Nov 07, 2015 1:25 pm
Location: Planet Earth

Re: High traffic in the ethernet port protocol 814

Fri Apr 08, 2016 3:53 pm

based on my experience, its very difficult to trace who sending it and what add they aiming for
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: High traffic in the ethernet port protocol 814

Fri Apr 08, 2016 4:21 pm

based on my experience, its very difficult to trace who sending it and what add they aiming for
In general yes, but note that this traffic can only exist on a LAN segment!
 
binhorp
newbie
Topic Author
Posts: 39
Joined: Wed Mar 05, 2008 4:40 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 09, 2016 11:42 am

I thank all the answers, this problem is taking me sleep, still have not found ways to trace the source of this traffic when q happens nothing can bar it unless removing the network cable. the graph below shows the times when the traffic occurs.
Very grateful to everyone!
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 09, 2016 12:17 pm

At least tell us the source and destination MAC address of the traffic!
 
binhorp
newbie
Topic Author
Posts: 39
Joined: Wed Mar 05, 2008 4:40 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 09, 2016 12:32 pm

I could not identify mac-address that create this traffic out, what I could do to discover?
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 09, 2016 12:41 pm

I could not identify mac-address that create this traffic out, what I could do to discover?
Use the Packet Sniffer
 
binhorp
newbie
Topic Author
Posts: 39
Joined: Wed Mar 05, 2008 4:40 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 09, 2016 12:55 pm

the packet sniffer can not find any package but the interface has a traffic of 68MB.
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 09, 2016 1:09 pm

the packet sniffer can not find any package but the interface has a traffic of 68MB.
You have to configure and start it before you look at the data.
 
binhorp
newbie
Topic Author
Posts: 39
Joined: Wed Mar 05, 2008 4:40 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 09, 2016 1:15 pm

I set any direction and Ether1 interface
You do not have the required permissions to view the files attached to this post.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 09, 2016 1:20 pm

I set any direction and Ether1 interface
Then APPLY then START and wait a while, then STOP and look at PACKETS.
 
binhorp
newbie
Topic Author
Posts: 39
Joined: Wed Mar 05, 2008 4:40 pm

Re: High traffic in the ethernet port protocol 814

Fri Apr 22, 2016 2:02 pm

Found 03 mac-address the port on my router the neighbor router and a mac reset FF: FF: FF: FF: F, I could not FIND anything relevant, one thing I noticed is that the traffic is bound to vlan- ID = 1 and could not find ways to block this traffic, and the situation only gets worse as you can see in the print below.
You do not have the required permissions to view the files attached to this post.
 
nxs02
Member Candidate
Member Candidate
Posts: 119
Joined: Sat Nov 07, 2015 1:25 pm
Location: Planet Earth

Re: High traffic in the ethernet port protocol 814

Sat Apr 23, 2016 5:43 am

as i was said its very difficult to trace who sending it and what add they aiming for
 
pe1chl
Forum Guru
Forum Guru
Posts: 10529
Joined: Mon Jun 08, 2015 12:09 pm

Re: High traffic in the ethernet port protocol 814

Sat Apr 23, 2016 10:15 am

Found 03 mac-address the port on my router the neighbor router and a mac reset FF: FF: FF: FF: F, I could not FIND anything relevant, one thing I noticed is that the traffic is bound to vlan- ID = 1
I don't understand what you are trying to tell here.
Please just show a single packet as visible in a trace.

Anyway, don't try to block it in your router as that only wastes resources on it.
When you need to block it you need to find the source.
This should be possible on a LAN with managable switches.

Who is online

Users browsing this forum: dcarbunescu, kivimart, lurker888 and 32 guests