On Tue, 23 Aug 2011 15:37:34 -0600, Sergio Alvarez <[email protected]> wrote:

Hello. I have in my hands a very weird issue, that have never seen before,
and was hoping some of you guys might have suggestions about it.

Mostly questions.

- Traffic goes over TCP ports 10039, 10040, 10050.

Is there a relation between these ports? (like ftp, some sql servers, ....)

- No drops are shown in the logs.

Did you check with ` fw ctl zdebug drop` on both nodes?

Can you fw monitor this traffic on both nodes at the same time?
Can you reproduce the issue in a lab environment?

Hugo.

--
[email protected]   http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

Reply via email to