<HTML><BODY style="word-wrap: break-word; -khtml-nbsp-mode: space; -khtml-line-break: after-white-space; ">What is 'crazy amount of traffic' and what is 'the field'. The CallManager SRND recommends ~8kbps for up to 20 phones or something that (check the srnd for specifics). Otherwise, there is the recent field notice about possible DoS against port 2000, 2001,2002 on CM.<DIV><BR class="khtml-block-placeholder"></DIV><DIV>/Wes</DIV><DIV><BR><DIV><DIV>On Feb 1, 2006, at 12:04 PM, Paul Long wrote:</DIV><BR class="Apple-interchange-newline"> <DIV class="Section1"><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy">James,<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy">Besides the normal Skinny call-signaling traffic on port 2000, there is a heart-beat mechanism (KeepAlive/KeepAliveAck) that may be generating the unexpected traffic you’re seeing. The CallManager tells the phones how often to send KeepAlive. Maybe someone accidentally changed it from the default of 30 seconds to something like 1 second, or maybe you’re just seeing normal chattiness. Make sure KeepAlive frequency is set to at least 30. Setting it to 60 probably wouldn’t hurt if the amount of traffic bothers you.<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy">Here is where the setting is located on CCM 4.1:<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy">Service | Service Parameters | Cisco CallManager | Station KeepAlive Interval<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy">Paul<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" color="navy" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial;color:navy"><O:P> </O:P></SPAN></FONT></P> <DIV> <DIV class="MsoNormal" align="center" style="text-align:center"><FONT size="3" face="Times New Roman"><SPAN style="font-size:12.0pt"> <HR size="2" width="100%" align="center" tabindex="-1"> </SPAN></FONT></DIV><P class="MsoNormal"><B><FONT size="2" face="Tahoma"><SPAN style="font-size:10.0pt; font-family:Tahoma;font-weight:bold">From:</SPAN></FONT></B><FONT size="2" face="Tahoma"><SPAN style="font-size:10.0pt;font-family:Tahoma"> cisco-voip-bounces@puck.nether.net [<A href="mailto:cisco-voip-bounces@puck.nether.net">mailto:cisco-voip-bounces@puck.nether.net</A>] <B><SPAN style="font-weight:bold">On Behalf Of </SPAN></B>James Grace<BR> <B><SPAN style="font-weight:bold">Sent:</SPAN></B> Monday, January 31, 2005 2:56 PM<BR> <B><SPAN style="font-weight:bold">To:</SPAN></B> <A href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</A><BR> <B><SPAN style="font-weight:bold">Subject:</SPAN></B> [cisco-voip] port 2000 is getting slamed from IP phone</SPAN></FONT><O:P></O:P></P> </DIV><P class="MsoNormal"><FONT size="3" face="Times New Roman"><SPAN style="font-size: 12.0pt"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">We have ip phones out in the field, and for about a week we found that we are getting crazy amount of traffic from these phones hitting port 2000<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">We are running 4.1.2 es41<O:P></O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial"><O:P> </O:P></SPAN></FONT></P><P class="MsoNormal"><FONT size="4" face="Arial"><SPAN style="font-size:13.5pt; font-family:Arial">James D. Grace</SPAN></FONT><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt;font-family:Arial"> </SPAN></FONT><O:P></O:P></P><P class="MsoNormal"><STRONG><B><FONT size="2" face="Arial"><SPAN style="font-size: 10.0pt;font-family:Arial">CCNP CCNA MCSE MCDBA</SPAN></FONT></B></STRONG><O:P></O:P></P><P class="MsoNormal"><FONT size="2" face="Arial"><SPAN style="font-size:10.0pt; font-family:Arial">Sr. System Engineer / Professional Svc.</SPAN></FONT><O:P></O:P></P><P class="MsoNormal"><STRONG><B><FONT size="3" face="Baskerville Old Face"><SPAN style="font-size:12.0pt;font-family:" baskerville="" old="" face""="">Digitel Corporation</SPAN></FONT></B></STRONG><O:P></O:P></P><P class="MsoNormal"><FONT size="3" face="Times New Roman"><SPAN style="font-size: 12.0pt"><O:P> </O:P></SPAN></FONT></P> </DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">_______________________________________________</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; ">cisco-voip mailing list</DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</A></DIV><DIV style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><A href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://puck.nether.net/mailman/listinfo/cisco-voip</A></DIV> </DIV><BR></DIV></BODY></HTML>