Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

In my LAN of around 100 Macs, we have serious problems in the network. For some reason unknown to me, Macs flood the network with this traffic (sniffer sample),

08:11:12.757245 IP 224.0.0.1 > 192.168.1.101: ICMP time exceeded in-transit, length 52
08:11:12.758818 IP 224.0.0.1 > 192.168.1.101: ICMP time exceeded in-transit, length 52
08:11:12.761885 IP 224.0.0.1 > 192.168.1.101: ICMP time exceeded in-transit, length 52
08:11:12.763429 IP 224.0.0.1 > 192.168.1.101: ICMP time exceeded in-transit, length 52
08:11:12.768031 IP 224.0.0.1 > 192.168.1.101: ICMP time exceeded in-transit, length 52

The 192.168.1.101 IP is the 'evil' Mac computer.

Only when turning off or unplug the net, the Mac stop the storm.

My network is paralyzed after this, the only temporary solution was to apply this patch, http://support.apple.com/kb/HT3789, but the problem persists in a few times.

I can do anything?

share|improve this question
add comment

1 Answer

Fire up netstat on the bad machine and find out what process has open connections to the multicast address.

share|improve this answer
    
OK, i'll try in this moment –  VicGM May 5 '11 at 18:14
    
Yes, the process is mDNSResponder –  VicGM May 5 '11 at 21:41
    
OK - so why does the problem recur after you add "-NoMulticastAdvertisements" ? Does something remove that string? –  mfinni May 6 '11 at 13:01
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.