Page 1 of 1

ARP Storms

Posted: Wed May 08, 2024 11:50 am
by Archie_Sr
Hello all,

I found ARP storms originating from the server I have BI installed on, turns out one of my generic ONVIF cameras was causing BI to broadcast the ARP storms across three different /24's. I disabled the flakey camera and the storms stopped.

Has anyone seen behavior like this before?

Thank you.

Re: ARP Storms

Posted: Wed May 08, 2024 4:25 pm
by TimG
Well that's a new one for me. Are you sure it's a flaky camera rather than a malicious attack ? Might be worth letting Support know in case the camera was accidently triggering a valid BI5 function.

Re: ARP Storms

Posted: Wed May 08, 2024 6:58 pm
by IAmATeaf
Was it trying to check or reset the flakey cams ip address? Thats the only thing I can think of where BI might use ARP.

Re: ARP Storms

Posted: Wed May 08, 2024 7:00 pm
by IAmATeaf
There is a setting in BI which allows it to monitor and change IP address, caused quite a few people issues wheee the cams IP would be reset to say the IP address of a local router or WiFi access point. Might be worth trying to disable that option but I can’t remember what the option is 😀

Re: ARP Storms

Posted: Thu May 09, 2024 8:08 am
by IAmATeaf
This is the option I was thinking of: Send RTSP keep alives