ASA all Internet bandwith in use

Unanswered Question

Hello,


Strange problem.


I have one ASA with AntiX card and 2 Mbps SDSL Internet connection.


All day the 2 Mpbs (download) is in use (ASDM Monitor Outside Interface).


If i use the show conn all, i can view a lot (10) of this line


TCP out 193.159.160.161:80 in 200.11.111.200:3161 idle 0:00:44 bytes 148 flags UfrOX


The bytes is always 148. No progress.


But if i create an access-list to block this trafic, the bandwith goes imediatly down (after using clear xlate).


Does anyone know what is this IP address ?


I have view two different PC as source using the same destination address, and one time i have view the IP Antix as source using this destination


Thanks for your help



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Collin Clark Thu, 11/20/2008 - 06:59
User Badges:
  • Purple, 4500 points or more

Weird, it belongs to RIPE.

<font size="2"></p><p>OrgName:    RIPE Network Coordination Centre </p><p>OrgID:      RIPE</p><p>Address:    P.O. Box 10096</p><p>City:       Amsterdam</p><p>StateProv:  </p><p>PostalCode: 1001EB</p><p>Country:    NL</p><p></p><p>ReferralServer: whois://whois.ripe.net:43</p><p></p><p>NetRange:   193.0.0.0 - 193.255.255.255 </p><p>CIDR:       193.0.0.0/8 </p><p>NetName:    RIPE-CBLK</p><p>NetHandle:  NET-193-0-0-0-1</p><p>Parent:     </p><p>NetType:    Allocated to RIPE NCC</p><p>NameServer: NS-PRI.RIPE.NET</p><p>NameServer: NS3.NIC.FR</p><p>NameServer: SUNIC.SUNET.SE</p><p>NameServer: NS-EXT.ISC.ORG</p><p>NameServer: SEC1.APNIC.NET</p><p>NameServer: SEC3.APNIC.NET</p><p>NameServer: TINNIE.ARIN.NET</p><p>Comment:    These addresses have been further assigned to users in</p><p>Comment:    the RIPE NCC region. Contact information can be found in</p><p>Comment:    the RIPE database at <a class="jive-link-custom" href="http://www.ripe.net/whois" target="_blank">http://www.ripe.net/whois</a></p><p>RegDate:    1992-08-12</p><p>Updated:    2005-08-03</p><p></font>


You could try contacting them and see if they handed it out and if WHOIS isn't updated yet.

Actions

This Discussion