No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

NE40 Suffers from ARP Attack and CPU Usage is High

Publication Date:  2012-07-27 Views:  40 Downloads:  0
Issue Description
NE40 CPU usage sometimes is high and then it recovers.
Alarm Information
Check CPU usage and it is as follows:                                                                CPU Performance:
          0 seconds ago ||=============       ||  69%
         30 seconds ago ||==============      ||  70%
         60 seconds ago ||===============     ||  76%
         90 seconds ago ||=============       ||  67%
        120 seconds ago ||============        ||  61%
 10       RPCQ   0x00d9002c  0x02fa01f8  115       PEND      0% 
 11       WEIL   0x00d9002c  0x02f95fe0  245      DELAY     30% 
 40        STP   0x00d9002c  0x02e66110  115       PEND      0% 
 41       PRXY   0x00d9002c  0x02e5bef8  155       PEND     47% 
Handling Process
1. Check CPU usage and PRXY module usage is high.
2. Under diagnosis mode check the task of corresponding module and socket number with display ip socket.
3. Turn on debugging switch through CONSOLE interface with debug tcp packet <taskid> <socketid>. Whether it suffers from TCP attack. If it is, match EACL to filter attack packet.
4. Check leaky bucket number of interface board ans change the size of No. 3 and No. 22 leaky buckets as 2K.
Root Cause
From alarm information PRXY usage is high and it is related with ARP attack.
Suggestions
Null

END