Saturday, June 13, 2020

Cisco ASA5585-SSP-20 strange strom of packets

We are running pair of Cisco ASA5585-SSP20 version asa964-36-smp-k8.bin and everything was good and suddenly my alarms went off and noticed packet drops and my VPN got disconnected so no i can't get into network to see what is going on but after 20 minutes or so automatically things started healing and i am able to get in and then i noticed on my observium monitoring, spike of packets almost 1 million pps on inside interface and outside interface traffic was very low about 100mbps. i didn't see ASA crashed or anything so not sure how do i find what happened, logs not showing anything also i don't have netflow :(

It seems some kind of loop happened and suddenly disappear that make no sense.. loop mostly stay until you break or reboot something. is there any other way we can see on Cisco ASA?



No comments:

Post a Comment