Yes we say it and it reset a bunch of our BGP session on MICE. Our Arbor Sightling Netflow say the sources were 2001:504:27::d1af:0:241/128 fe80::8618:88ff:fea4:d301/128 e80::a66c:2aff:fe76:b400/128 Destin to; All routers ff02::1 All MLD Routers ff02::16 And then a solicited-node address of ff02::1:ff00:254 Don't know the source of that On Thu, Mar 17, 2022 at 8:22 PM Michael Hare < [log in to unmask]> wrote: > I presume I wasn't the only one that felt the arp/nd storm that began ~ > 00:58:01 2022/03/18 GMT? Event stopped for us by 01:03:02. I don't have > info about mac addrs but our peering device reported 20kpps of icmp > neighbor discovery. > > -Michael > [AS3128] > -- =============================================== David Farmer Email:[log in to unmask] Networking & Telecommunication Services Office of Information Technology University of Minnesota 2218 University Ave SE Phone: 612-626-0815 Minneapolis, MN 55414-3029 Cell: 612-812-9952 ===============================================