Tue Jan 02, 2018 11:05 pm
So, it has been running smooth for quite a while on 6.40.4. Then today I went in and removed a simple queue that was put in place for a DDoS attack. As soon as it removed the rule I was kicked out of the winbox and all OSPF neighbors dropped and router did not renegotiate OSPF until the router was was rebooted.
Jan/02/2018 15:11:47 system,info,account user admin logged in from X.X.X.X via winbox
<------------This is when i removed the queue even though it is logged lower down.
Jan/02/2018 15:12:37 system,info,account user admin logged out from X.X.X.X via winbox
Jan/02/2018 15:12:44 route,ospf,info OSPFv2 neighbor X.X.125.133: state change from Full to Down
Jan/02/2018 15:12:44 route,ospf,info OSPFv2 neighbor X.X.113.6: state change from Full to Down
Jan/02/2018 15:12:44 route,ospf,info OSPFv2 neighbor X.X.125.138: state change from Full to Down
Jan/02/2018 15:12:44 route,ospf,info OSPFv2 neighbor X.X.31.253: state change from Full to Down
Jan/02/2018 15:12:54 system,info,account user admin logged in from X.X.X.X via winbox
Jan/02/2018 15:12:56 system,info,account user admin logged in from X.X.X.X via winbox
Jan/02/2018 15:13:14 system,info,account user admin logged in from X.X.X.X via dude
Jan/02/2018 15:13:15 system,info,account user admin logged out from X.X.X.X via dude
Jan/02/2018 15:13:15 route,ospf,info OSPFv2 neighbor X.X.113.5: state change from Full to Down
Jan/02/2018 15:13:37 system,info,account user brescoadmin logged out from X.X.X.X via winbox
Jan/02/2018 15:13:39 system,info,account user brescoadmin logged out from X.X.X.X via winbox
Jan/02/2018 15:13:58 system,info,account user admin logged in from X.X.X.X via dude
Jan/02/2018 15:14:27 route,ospf,info OSPFv2 neighbor X.X.125.129: state change from Full to Down
Jan/02/2018 15:14:27 route,ospf,info OSPFv2 neighbor X.X.113.5: state change from ExStart to Down
Jan/02/2018 15:14:30 system,info,account user admin logged out from X.X.X.X via dude
Jan/02/2018 15:14:37 system,info simple queue removed by brescoadmin
Jan/02/2018 15:14:37 route,ospf,info Discarding packet: no neighbor with this source address
Jan/02/2018 15:14:37 route,ospf,info RouterId=X.X.125.129
Jan/02/2018 15:14:37 route,ospf,info source=X.X.31.94
Jan/02/2018 15:14:37 route,ospf,info Discarding packet: no neighbor with this source address
Jan/02/2018 15:14:37 route,ospf,info RouterId=X.X.125.133
Jan/02/2018 15:14:37 route,ospf,info source=X.X.125.197
Jan/02/2018 15:14:37 route,ospf,info Discarding packet: no neighbor with this source address
Jan/02/2018 15:14:37 route,ospf,info RouterId=X.X.113.5
Jan/02/2018 15:14:37 route,ospf,info source=X.X.125.193
Jan/02/2018 15:14:38 route,ospf,info Discarding packet: no neighbor with this source address
Jan/02/2018 15:14:38 route,ospf,info RouterId=X.X.113.6
Jan/02/2018 15:14:38 route,ospf,info source=X.X.31.118
Jan/02/2018 15:14:38 route,ospf,info Discarding packet: no neighbor with this source address
Jan/02/2018 15:14:38 route,ospf,info RouterId=X.X.113.5
Jan/02/2018 15:14:38 route,ospf,info source=X.X.125.193
Jan/02/2018 15:14:38 route,ospf,info Discarding packet: no neighbor with this source address
Jan/02/2018 15:14:38 route,ospf,info RouterId=X.X.125.129
Jan/02/2018 15:14:38 route,ospf,info source=X.X.31.94
Jan/02/2018 15:14:39 route,ospf,info Discarding packet: no neighbor with this source address
Jan/02/2018 15:14:39 route,ospf,info RouterId=X.X.113.6
Jan/02/2018 15:14:39 route,ospf,info source=X.X.31.118
Jan/02/2018 15:14:39 route,ospf,info Ignoring Link State Acknowledgment packet: wrong peer state
Jan/02/2018 15:14:39 route,ospf,info state=ExStart
Jan/02/2018 15:14:39 route,ospf,info Discarding packet: no neighbor with this source address
Jan/02/2018 15:14:39 route,ospf,info RouterId=X.X.125.133
Jan/02/2018 15:14:39 route,ospf,info source=X.X.125.197
Jan/02/2018 15:14:40 route,ospf,info Ignoring Link State Acknowledgment packet: wrong peer state
Jan/02/2018 15:14:40 route,ospf,info state=ExStart
Jan/02/2018 15:14:40 route,ospf,info Ignoring Link State Acknowledgment packet: wrong peer state
Jan/02/2018 15:14:40 route,ospf,info state=ExStart
Jan/02/2018 15:15:49 system,error,critical login failure for user admin from 6C:3B:6B:XX:XX:XX via mac-telnet
Jan/02/2018 15:16:06 system,error,critical login failure for user admin from 6C:3B:6B:XX:XX:XX via mac-telnet
Jan/02/2018 15:16:17 system,info,account user admin logged in from 6C:3B:6B:XX:XX:XX via mac-telnet
Jan/02/2018 15:16:33 system,info,account user admin logged out from X.X.X.X via dude
Jan/02/2018 15:16:33 system,info,account user admin logged out from X.X.X.X via dude
Jan/02/2018 15:16:33 system,info,account user admin logged out from X.X.X.X via dude
Jan/02/2018 15:16:33 system,info,account user admin logged out from 6C:3B:6B:XX:XX:XX via mac-telnet
Jan/02/2018 15:16:34 system,info,account user admin logged out from 6C:3B:6B:XX:XX:XX via mac-telnet
Jan/02/2018 15:16:34 system,info router rebooted
Jan/02/2018 15:16:36 route,bgp,info Failed to open TCP connection: Network is unreachable
Jan/02/2018 15:16:36 route,bgp,info RemoteAddress=X.X.113.6
Jan/02/2018 15:16:36 route,bgp,info Failed to open TCP connection: Network is unreachable
Jan/02/2018 15:16:36 route,bgp,info RemoteAddress=X.X.22.49
Jan/02/2018 15:16:36 route,bgp,info Failed to open TCP connection: Network is unreachable
Jan/02/2018 15:16:36 route,bgp,info RemoteAddress=X.X.27.105
Jan/02/2018 15:16:36 route,bgp,info Failed to open TCP connection: Network is unreachable
Jan/02/2018 15:16:36 route,bgp,info RemoteAddress=X.X.113.5
Jan/02/2018 15:16:37 route,bgp,info Failed to open TCP connection: Network is unreachable
Jan/02/2018 15:16:37 route,bgp,info RemoteAddress=X.X.204.2
Jan/02/2018 15:16:37 route,bgp,info Failed to open TCP connection: Network is unreachable
Jan/02/2018 15:16:37 route,bgp,info RemoteAddress=X.X.204.1
Jan/02/2018 15:16:38 interface,info Interface - link up
A bunch of link up allerts
Jan/02/2018 15:16:55 bfd,error discarding BFD packet: unsupported version 0
Jan/02/2018 15:16:55 bfd,error source: X.X.22.49
Jan/02/2018 15:17:02 route,bgp,info Connection opened by remote host
Jan/02/2018 15:17:02 route,bgp,info RemoteAddress=X.X.27.105
Jan/02/2018 15:17:14 route,bgp,info Connection opened by remote host
Jan/02/2018 15:17:14 route,bgp,info RemoteAddress=X.X.22.49
Jan/02/2018 15:17:43 route,bgp,info TCP connection established
Jan/02/2018 15:17:43 route,bgp,info RemoteAddress=X.X.204.2
Jan/02/2018 15:17:44 route,bgp,info TCP connection established
Jan/02/2018 15:17:44 route,bgp,info RemoteAddress=X.X.204.1
Jan/02/2018 15:19:14 system,info,account user admin logged in from X.X.X.X via winbox
Jan/02/2018 15:19:48 route,bgp,info TCP connection established
Jan/02/2018 15:19:48 route,bgp,info RemoteAddress=X.X.X.X
Jan/02/2018 15:19:56 route,bgp,info Connection opened by remote host
Jan/02/2018 15:19:56 route,bgp,info RemoteAddress=X.X.X.X
As you can see, all ospf crashed once the Queue was removed.