3620 session creation rate

Carl Byington · 2006-03-16T16:25:45+00:00

I am having a problem with a 3620 and session creation rate. This has beenhappening about weekly, and a reload of the router fixes it. But that is abit drastic. There is a public dns/ntp server on the network, and 'show ipinspect sessions' shows about 130 dns sessions open, and about 24 ntpsessions in half open state.show ip inspect statInterfaces configured for inspection 3Session creations since subsystem startup or last reset 1227665Current session counts (estab/half-open/terminating) [164:26:0]Maxever session counts (estab/half-open/terminating) [362:47:4]Last session created 00:00:00Last statistic reset neverLast session creation rate 1607Last half-open session total 26Half-open session count or session creation rate exceededWhen it gets into this state, new outbound tcp connections from internalmachines hang, so web browsing and outbound email slows to a crawl. Notall outbound tcp connections timeout, but many of them do.ip inspect alert-offip inspect max-incomplete high 2000ip inspect max-incomplete low 800ip inspect one-minute high 2000ip inspect one-minute low 800Is there a command to reset the ip inspect subsystem? Should thosehigh/low limits above be raised to the 5-8K range?

Mar 16, 2006 2 Replies

Rate this thread:

Carl Byington 20 years ago

Vote

Merv 20 years ago

Try

show ip inspect stat reset

This SHOULD be a clear command. If you have a Cisco support contract open a case and requested that it be changed.

see the following URL for some procedures and other commands

formatting link

BTW why is there so many NTP session. Do you not have a NTP server inside your network ?

Vote

Carl Byington 20 years ago

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required