nanog mailing list archives

Re: Router too busy???


From: Dan Armstrong <dan () beanfield com>
Date: Tue, 01 Apr 2003 14:05:04 -0500


We had what I would say is exactly the same problem last Thursday around 3:00am.
The traffic lights on the router were pegged solid as usual, so it appeard to be
up and running, but not really passing any useful traffic.  Telnetting to it was
pretty much useless, although it did glimmer to work for a minute but not enough
to get in and see what was going on.  It did not reload itself.  We power cycled
it, and it was fine.

Running c7200-jk9o3s-mz.122-8.T5.bin

Dan.


"Mark J. Scheller" wrote:

This last Saturday (29 Mar 2003), about 4pm Eastern time my router -- for lack
of a better term -- wigged out.  I was able to ping to & through it, however
any attempt to get a TCP connection (specifically ssh and http) was almost
immediately terminated.  I think DNS was working fine, which would hint that
UDP was getting through as well, but I won't swear to that in court.

After convincing someone to drive to its location and do a power cycle, it
rebooted happily and has run fine since.  My mrtg graphs show that the CPU was
pegged at 100% during the time it was acting up; memory was fine; traffic was
(not surprisingly) very low -- and no spike prior to the CPU getting pegged.

I've been running this version of IOS since it was released as a response to
the flaw found in SNMP.... and the router has been rock solid!  CPU is
normally 15-20% with occasional spikes, but never for long.  Memory erodes
slowly, but never dropping below 20MB.

Has anyone seen anything like this before?  Basically, I'm wondering whether
this may be an IOS bug or whether I may have hardware on its way out or
whether this was some kind of new crafty DoS attack.

TIA!

Mark J. Scheller (scheller () u1 net)


Current thread: