Print

Print


BIRD is complaining that various peers are sending BFD packets with an 
unknown session id.

Anyone have thoughts on this?


The logs look like this:
2024-02-07 23:44:14  bfd1: Bad packet from YOUR_IP - unknown 
session id (SOME_INTEGER)

Those marked with an asterisk were doing this yesterday, so prior to the 
reboot of rs2.


rs1:

Inteliquent (Neutral Tandem)
206.108.255.137 *


rs2:

les.net
2001:504:27::4813:0:1

Savage Communications
206.108.255.17 *
2001:504:27::5adc:0:1 *

Stellar Association
206.108.255.53
2001:504:27::8e16:0:1 *

Hoyos Consulting
2001:504:27::d15d:0:1

Eastern Iowa Data Group
206.108.255.168 *
2001:504:27::f7a2:0:1 *

Omnitel Communications
206.108.255.148


Here is for the entire month of January:

rlaager@rs1:~$ rg "^2024-01-.*Bad packet from" /var/log/bird/rs1-ipv*.1 
| awk '{print $8}' | sort | uniq -c
       9 2001:504:27::3823:0:2
       2 2001:504:27::8252:0:1
1183836 2001:504:27::b7f8:0:1
       4 2001:504:27::d15d:0:1
1183834 206.108.255.101
    7498 206.108.255.119
     380 206.108.255.121
1463099 206.108.255.137
       3 206.108.255.176
       3 206.108.255.185

root@rs2:~# rg "^2024-01-.*Bad packet from" /var/log/bird/rs2-ipv*.1 | 
awk '{print $8}' | sort | uniq -c
      12 2001:504:27::1e49:0:1
       1 2001:504:27::3823:0:2
       1 2001:504:27::39:0:1
1457433 2001:504:27::5adc:0:1
       3 2001:504:27::6478:0:1
1457369 2001:504:27::8e16:0:1
       1 2001:504:27::9dbe:0:1
       5 2001:504:27::9dbe:0:2
1179733 2001:504:27::b7f8:0:1
1176975 2001:504:27::d15d:0:1
       4 2001:504:27::e4f:0:1
       1 2001:504:27::f756:0:1
1331747 2001:504:27::f7a2:0:1
1179735 206.108.255.101
    7494 206.108.255.119
    1954 206.108.255.120
       3 206.108.255.137
       3 206.108.255.161
1331745 206.108.255.168
1457437 206.108.255.17
       2 206.108.255.176
       8 206.108.255.185
      11 206.108.255.3
       6 206.108.255.46
1457345 206.108.255.53
       4 206.108.255.92


-- 
Richard