ITEM: AT9044

NetView - false interface add/delete events in Netview

˙Question:

Problem:

I am experiencing a lot of internal database synchronization traffic in Netview
and noted that router interfaces were being added and deleted every fifteen
minutes or so.  These were not truly router interfaces but PCs.  We use Token
Ring, and these addresses are accessed via Token Ring bridges and pass through
Wellfleet routers to our management station.  The IP addresses doing this are
relatively few, 40 or less.  I attempted to create a filter to accept all
events for the IP addresses in question save interface up/down events in the
Netview 6000 enterprise but have failed so far.  Help on creating and
activating a filter that will mask ALL events for these IP addresses, or better
yet an understanding of how a workstation can masquerade as a router interface
and delete-add itself every 10 or so minutes, would be greatly appreciated.

Answer:
In some cases, the existence of two separate devices with the same
IP address can cause interfaces to be added and deleted at regular
intervals.

Here are three things you may want to look for:

  1) Multiple devices with the same IP address.  You could check
     either the /usr/OV/log/trapd.log or the /usr/OV/bin/netmon.trace
     file for indications of duplicate interfaces.
  2) IP addresses on separate nodes resolving to the same hostname.  I
     believe that this can cause problems under certain circumstances
     as well.
  3) Secondary addressing not turned up in netmon, but existing in 
     the network.




Support Line: NetView - false interface add/delete events in Netview ITEM: AT9044

Dated: January 1996 Category: N/A

This HTML file was generated 99/06/24~13:30:25

Comments or suggestions?
Contact us