Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

TCP/UDP connection High

Hi,

We have Cisco ASA 5520.Nowadays we are getting one problem that is TCP/UDP connection fluctuating continuously.

I am checking in ASDM, suppose now showing total no. of connection 50 within 2 sec it's reaching 3000 and again come back to normal.

It's happening continuously.

What might be the reason for that? Pls assist too resolve this issue.

Thanx,

somnath

3 REPLIES

Re: TCP/UDP connection High

probably you have worms...

try to find suspicious connections

"sh conn"

[Pls RATE if HELPS]

Silver

Re: TCP/UDP connection High

Can you put sniffer and check which host or application does that?

Thanks,

Dharmesh Purohit

Cisco Employee

Re: TCP/UDP connection High

If the connection spikes up to 3000 and then drops sharply 30 seconds later, that is most likely a flood of TCP connection (DoS Attack) that result in short lived, half-open TCP conns. Please gather SYSLOGs during the spikes and provide a sample for us to take a look at.

288
Views
0
Helpful
3
Replies
CreatePlease to create content