Troubleshooting High Session Use in Netscreen Firewalls

2026 Words9 Pages
Troubleshooting High Session Use in Netscreen Firewalls ************************************************ This purpose of this document basically gives us a brief overview of the way of troubleshooting high session use in the Netscreen Firewalls . In other words , we can also say it shows us the way how we can proceed in analyzing the sessions in the Netscreen and finding the system (user) which creates a more number of sessions (toptalkers) and also the port where the user system is connected to the access switch with few commands . What is a Session ? In networking, a Session is a semi-permanent interactive information exchange, also known as a dialogue between two or more communicating devices, or between a computer and user. A…show more content…
| awk ' $1 > 100 ' If we execute the command in the zombie , we find the output as follows : In case the output is not clear , please see the output below : anshuman@zombie:/$ sudo tcpdump -tnn -c 20000 -i bond0 | awk -F "." '{print $1"."$2"."$3"."$4} ' | sort | uniq -c | sort -nr | awk ' $1 > 100 ' tcpdump: WARNING: bond0: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on bond0, link-type EN10MB (Ethernet), capture size 96 bytes 20000 packets captured 40000 packets received by filter 0 packets dropped by kernel 2147 IP 172.30.194.172 1529 IP 172.30.206.86 1440 IP 172.30.201.40 1213 IP 172.30.206.234 1090 IP 172.30.204.79 692 IP 83.199.188.47 586 IP 85.218.12.189 551 IP 87.119.164.2 437 IP 72.0.241.215 405 IP 82.47.122.248 366 IP 172.30.203.28 363 IP 117.198.82.95 324 IP 89.204.240.235 304 IP 172.30.203.72 294 IP 70.101.87.107 285 IP 172.30.204.134 281 IP 12.208.140.28 237 IP 80.185.216.53 234 IP 142.177.42.28 226 IP 172.30.205.88 221 IP 87.227.17.109 213 IP 66.28.9.254 209 IP 82.247.209.43 207 IP 172.30.201.240 190 IP 82.72.177.121 190 IP 24.75.21.127 185 IP 218.199.195.216 > 172 178 IP 89.205.12.14 170 IP 84.217.62.162 > 172 142 IP 172.30.205.201 141 IP 90.194.249.19 141 IP 124.82.4.11 137 IP 92.112.111.96 135 IP 81.110.41.201 > 172 135 IP 203.99.174.124 114 IP 172.30.203.229 111 IP 203.27.235.60 109 IP 172.30.192.197 108 IP 172.30.205.145 103 IP 201.255.13.204 > 172 B) Using the software

    More about Troubleshooting High Session Use in Netscreen Firewalls

      Get Access