Hi all, I manage pair of 515E (both 128MB) in failover mode. Few day ago I occured some akward situation: in 2-3 hours memory usage rise form standard 63MB to 112MB (w/o traffic rise) and than PIX no1 refuse all outside connection (all inside network work OK). I switch to PIX no2, but situaction here was the same. After few sec. memory usage rise and PIX no2 refuse outside connection too. I switch again to PIX no1 and then restart both PIX. After that all back to normal.
After PIX restart there was a very high network traffic and a lot of open sessions. Then I found that one of employees run eMule on his PC, and when I kill that program traffic back to normal status. I don't know is there is any relationship between this two facts (memory buffer overload -> using P2P programs).
If anyone knows what could make such high memory usage - please answer.
I'll be very grateful for any help or clue what it could be.
Usually a lot of open sessions and high traffic is due to some virus attack or DoS attack, however it may also be due to some application which is trying to connect to outside but is not able to complete the session. The exact nature can be determined by traffic capture and analysis. You can also try to run the program again ad check if the same situation occurs.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...