I am not using the procurve switch, but i have fixed my storm problem.. at least for now anyway. My border router(MT v 2.9.30) has multiple ip addresses assigned to it, and one of those addresses was 172.16.0.57. The primary ip for my router is 172.16.0.1.
i ran a program called iptraf (kind of like etherreal) and it shows this about 200 times a second:
Tue Sep 26 12:28:13 2006; ICMP; eth1; 56 bytes; source MAC address 001095791e1c; from 0.0.0.0 to 172.16.0.57; dest unrch (proto)
I got this coming from all different mac addresses, pretty much all the devices that i looked up the mac address for are cpe bridge panels on my customers houses. The panels are all tranzeo or zcomax hardware with atmel and marvell chipsets.
I do not really understand why having this ip address enabled causes the packet storm, i also dont understand how an icmp request can come from 0.0.0.0
The problem is solved for now, but since i dont understand what caused it i am worried that it will happen again.
If anyone can shed some light on this please let me know!
routeros, responds to all ip addresses configured on the router on all arp capable interfaces, not just the interface the ip address is configured.
that alone wont explain the 0.0.0.0 addresses. however any ip capable host can transmit packets with any source address it wants. that is why you have ingress filtering on routers. ingress filtering is to filter source addresses to make sure packets dont have wrong source address.
Move along. Nothing to see here.