'[Sidewinder] High CPU utilization due to a lot of ESTABLISHED ssh'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       sidewinder
Subject:    [Sidewinder] High CPU utilization due to a lot of ESTABLISHED ssh
From:       sidewinder () adeptech ! com
Date:       2004-05-24 18:49:12
Message-ID: 200405250236.i4P2aOn11029 () aag ! adeptech ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]

Has any one experienced problem with Sidewinder 5.2.1.10 having CPU
utilization shot up to the roof due to hundreds or thousands of ESTABLISHED
(ssh??) sessions?
The problem is that these sessions all come from one bogus IP address with
TCP source port 22.
This happened a few times to our SW and I'm not sure if this is some kinda
of attack or not.
Any advise is appreciated.

Binh Hoang

[Attachment #5 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.72">
<TITLE>High CPU utilization due to a lot of ESTABLISHED ssh sessions</TITLE>
</HEAD>
<BODY>

<P><FONT SIZE=2 FACE="Arial">Has any one experienced problem with Sidewinder 5.2.1.10 \
having CPU utilization shot up to the roof due to hundreds or thousands of \
ESTABLISHED (ssh??) sessions?</FONT></P>

<P><FONT SIZE=2 FACE="Arial">The problem is that these sessions all come from one \
bogus IP address with TCP source port 22.</FONT> <BR><FONT SIZE=2 FACE="Arial">This \
happened a few times to our SW and I'm not sure if this is some kinda of attack or \
not.</FONT> <BR><FONT SIZE=2 FACE="Arial">Any advise is appreciated.</FONT>
</P>

<P><FONT SIZE=2 FACE="Arial">Binh Hoang</FONT>
</P>
<BR>
<BR>

</BODY>
</HTML>

_______________________________________________
Sidewinder mailing list
Sidewinder@adeptech.com
http://mail.adeptech.com/mailman/listinfo/sidewinder

[prev in list] [next in list] [prev in thread] [next in thread] 