Analysis of irregular ICMP ping packets from U-Center 2.0 NSM environment to external IPs

None

Customer feedback indicates that some internal devices receive ping packets from the U-Center2.0 environment, but no corresponding ping function configuration was found on the U-Center2.0 and component configuration interfaces.

1. Use cat /proc/net/nf_conntrack | grep (the destination address being pinged) to locate a ping record and find an internal service address.

2. Use kubectl get pod -A -owide | grep (the internal 177 address found above) to see that the service corresponding to this internal address is itom-l2topo-dm.

3. Log in to the pxc database and check the parameters related to itom-l2topo-dm in the netres_db database. Focus on the two highlighted parameters below, and notice that the last pseudo_ping parameter is set to 1 (enabled), which sends pseudo-ping packets for network segment probe.

Set the parameter l2topo_pseudo_ping_ctl_flag to 0, which means disabling the fake ping probe function.
After disabling, restart the itom-l2topo-dm pod once.