Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

network slowly, edge router show logging display:calming down, count (46/900) current 1-min rate: 1796

Dear All,

Our company have 100 users, in recent network was very slow, I log on edge router to show logging command, display as below:

I want to know whether our network have some attack?  and what should I to do?

Our topology is: ISP------2900---------3750---------2960 STACK *3

Thanks in advance!

May 16 08:12:45.829: %FW-3-RESPONDER_WND_SCALE_INI_NO_SCALE: Dropping packet - Invalid Window Scale option for session 10.24.246.53:55530 to 58.221.72.180:80 [Initiator(flag 0,factor 0) Responder (flag 1, factor 9)]
May 16 08:13:55.969: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:2102491905 1064 bytes is out-of-order; expected seq:2102404865. Reason: TCP reassembly queue overflow - session 10.24.246.44:64405 to 140.207.195.36:80
May 16 08:14:43.604: %FW-3-RESPONDER_WND_SCALE_INI_NO_SCALE: Dropping packet - Invalid Window Scale option for session 10.24.246.53:55552 to 58.221.72.180:80 [Initiator(flag 0,factor 0) Responder (flag 1, factor 9)]
May 16 08:15:07.972: %FW-4-ALERT_OFF: calming down, count (46/900) current 1-min rate: 1796
May 16 08:15:10.344: %FW-4-ALERT_ON: getting aggressive, count (56/1000) current 1-min rate: 2001

 

Everyone's tags (1)
1 REPLY
Hall of Fame Super Gold

What do you mean by network

What do you mean by network "slow"?  Slow where?  Network shares?  Internet?  Browsing?  Email?

 

Can you post the output to the command "sh interface <WAN interface>"?

72
Views
0
Helpful
1
Replies
CreatePlease login to create content