significant increase in ipfw pullup failed

[Daniel Eriksson]

Randy Bush wrote:

> previously i got an ipfw pullup failed a couple of times a day
> now i get them every few minutes

I've gone from naver having seen one to 5-10 per day over the last week.
Intel Pro/1000 (em) network card in one of the servers, VIA Rhine II (vr) in
the other. They seem to happen at the same time on both servers even though
they are hooked up to a switch, so that means some sort of broadcast.

Could be the result of some new virus perhaps? At least one machine on the
local segment is spamming snmp-trap broadcasts, possibly indicating some
sort of virus propagation.

/Daniel Eriksson