Answer the question
In order to leave comments, you need to log in
The people, do all Mikrotik go into reboot if you let zmap through it?
Every time you start zmap to addresses from the wan segment (I start from a host located in the lan segment) Mikrotik reboots
Checked for: RouterOS 6.30.4 and 6.31
Clumsy settings:
/interface ethernet set ether1 name=ether1-gateway
/interface ethernet set ether2 name= ether2-local
/interface bridge add name=bridge-local disabled=no auto-mac=no protocol-mode=rstp
/interface bridge set "bridge-local" admin-mac=[/interface ethernet get ether2-local mac-address]
/interface bridge port add bridge=bridge-local interface=ether2-local
/ip dhcp-client add interface=ether1-gateway disabled=no
/ip address add address=192.168.88.1/24 interface=bridge-local
/ip pool add name="default-dhcp" ranges=192.168.88.10-192.168.88.254
/ip dhcp-server add name=default address-pool="default-dhcp" interface=bridge-local lease-time=10m disabled= no
/ip dhcp-server network add address=192.168.88.0/24 gateway=192.168.88.1
/ip dns {set allow-remote-requests=yes
static add name=router address=192.168.88.1}
/ip firewall nat add chain= srcnat out-interface=ether1-gateway action=masquerade
zmap run from a host connected to ether2-local: zmap -B 10M -p 80 -o jus_test_22.csv xx0.0/16
xx0.0/16 - wan segment
Through 1-2 seconds the router goes into reboot.
After reboot in logs:
system,error,critical System rebooted because of kernel failure
system,error,critical router was rebooted without proper shutdown
Answer the question
In order to leave comments, you need to log in
I understood the reason.
hAP lite (941-2nD) does not have much free RAM (~8Mb) and it simply runs out of ~18000 open sessions. (srcnat eats it up)
zmap -B 10M ... opened >20k connections in a couple of seconds.
And Mikrotik, having no protection from this, simply fell "on the shoulder blades."
I did a couple of tests, replacing -B 10M with -r 2048 - the average number of open connections was around 13000-15000
CPU usage 60-80% free memory 1-0.5 Mb.
Falling "on the shoulder blades" stopped.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question