Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

ASA all Internet bandwith in use

Unanswered Question


Strange problem.

I have one ASA with AntiX card and 2 Mbps SDSL Internet connection.

All day the 2 Mpbs (download) is in use (ASDM Monitor Outside Interface).

If i use the show conn all, i can view a lot (10) of this line

TCP out in idle 0:00:44 bytes 148 flags UfrOX

The bytes is always 148. No progress.

But if i create an access-list to block this trafic, the bandwith goes imediatly down (after using clear xlate).

Does anyone know what is this IP address ?

I have view two different PC as source using the same destination address, and one time i have view the IP Antix as source using this destination

Thanks for your help

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Collin Clark Thu, 11/20/2008 - 06:59
User Badges:
  • Purple, 4500 points or more

Weird, it belongs to RIPE.

<font size="2"></p><p>OrgName:    RIPE Network Coordination Centre </p><p>OrgID:      RIPE</p><p>Address:    P.O. Box 10096</p><p>City:       Amsterdam</p><p>StateProv:  </p><p>PostalCode: 1001EB</p><p>Country:    NL</p><p></p><p>ReferralServer: whois://whois.ripe.net:43</p><p></p><p>NetRange: - </p><p>CIDR: </p><p>NetName:    RIPE-CBLK</p><p>NetHandle:  NET-193-0-0-0-1</p><p>Parent:     </p><p>NetType:    Allocated to RIPE NCC</p><p>NameServer: NS-PRI.RIPE.NET</p><p>NameServer: NS3.NIC.FR</p><p>NameServer: SUNIC.SUNET.SE</p><p>NameServer: NS-EXT.ISC.ORG</p><p>NameServer: SEC1.APNIC.NET</p><p>NameServer: SEC3.APNIC.NET</p><p>NameServer: TINNIE.ARIN.NET</p><p>Comment:    These addresses have been further assigned to users in</p><p>Comment:    the RIPE NCC region. Contact information can be found in</p><p>Comment:    the RIPE database at <a class="jive-link-custom" href="http://www.ripe.net/whois" target="_blank">http://www.ripe.net/whois</a></p><p>RegDate:    1992-08-12</p><p>Updated:    2005-08-03</p><p></font>

You could try contacting them and see if they handed it out and if WHOIS isn't updated yet.


This Discussion