[Cialug] ARP cache overflow

David Champion cialug@cialug.org
Tue, 30 Nov 2004 11:54:42 -0600


Has anyone else had trouble with ARP cache overflows? The symptoms I'm 
seeing:

- dmesg has a lot of "Neighbor table overflow" messages
- named showing a bunch of "error sending response: not enough free 
resources" in /var/log/messages.

I've done some googling around... some people blame it on a bad ethernet 
driver for the Broadcom chipset I have - it's the "tg3" driver. Others 
say it can be caused by a machine on the LAN that's spoofing their MAC 
address, and causing the switches to broadcast all packets (it becomes a 
repeater instead of a switch), so they can run a packet sniffer on all 
of the traffic.

-dc