Apparently the sensing interfaces of our Cisco IDSM-2 are having issues with link status.
Recently I've getting these events
in the console of the catalyst switch where IDSM-2 is installed:
%LINK-SP-3-UPDOWN: Interface GigabitEthernet2/7, changed state to down
%LINK-SP-3-UPDOWN: Interface GigabitEthernet2/7, changed state to up
Not getting too much information with that led me to look into the IDS logs and we got:
GigabitEthernet0/7 : Link is down.
Inline data bypass has started
A few milliseconds later:
Inline data bypass has stopped
We are getting this up and down link status messages every two hours.I've already checked on possible attacks on time ranges around the time we get these messages and there seems not to be any that pose a risk of shutting down a gigabit interface.
Could this be a normal behavior every now and then?