Hi Youssef, Try to enable 'ip route-cache flow' command on the interfaces and use the 'show ip cache flow' command to find out the PC. Try to see which machine are initiating connections in sequence, eg: you see a particular IP address initiating connections to 192.168.1.1, 192.168.1.2, 192.168.1.3, ... Another technology that you may look into is NBAR. Hope this helps. :-) regards,YapCHhttp://itcertguides.blogspot.com/
Date: Thu, 22 Apr 2010 23:30:55 +0200 Subject: Re: [c-nsp] Cisco 7204VXR with NPE-G1 high CPU and output drops From: [email protected] To: [email protected] CC: [email protected] Hello, Looks like my miseries are related to some kind of creepy dirty client DSL link with a zombie PC that's spamming or something like that. It's not a question of volume but more a matter of packets to forward :-/ For information, the problem moved from one router to another identical one and I can see the exact same symptoms. Gotta find the guilty bastard ;-) The router has an NPE-G1 and it's Gig interface that's experiencing the problem. Does someone have some advice / tool / magical command to mitigate this kind of problem ? Thanks for your advice. Y. _________________________________________________________________ Hotmail is redefining busy with tools for the New Busy. Get more from your inbox. http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_2 _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
