[j-nsp] SRX CPU fully Utilized after adding Space

M Abdeljawad eng_mahmood48 at yahoo.com
Thu Feb 11 03:50:23 EST 2016


Hi
We connected the Space as a VM sever to manage the SRX5800 and send syslog, but we got the SRX RE CPU fully utilized due to SSH flood sent from the space to the SRX as the below captured messages from interface monitoring;"the space keeps sending SSH connection requests to SRX"
17:58:37.702244 Out IP truncated-ip - 28 bytes missing! 192.168.0.28.ssh > 192.168.1.152.60915: P 33520:33556(36) ack 24877 win 33304 <nop,nop,timestamp 888075372 13492201>
17:58:37.702349 Out IP truncated-ip - 44 bytes missing! 192.168.0.28.ssh > 192.168.1.152.60915: P 33556:33608(52) ack 24877 win 33304 <nop,nop,timestamp 888075372 13492201>
17:58:37.702475 Out IP truncated-ip - 44 bytes missing! 192.168.0.28.ssh > 192.168.1.152.60915: P 33608:33660(52) ack 24877 win 33304 <nop,nop,timestamp 888075372 13492201>
17:58:37.702541 In IP 172.16.111.40.56351 > 192.168.0.28.ssh: . ack 183772 win 256
17:58:37.702554 In IP 192.168.1.152.60915 > 192.168.0.28.ssh: P 24877:25777(900) ack 33012 win 619 <nop,nop,timestamp 13492212 888075371>
17:58:37.702558 In IP 192.168.1.152.60915 > 192.168.0.28.ssh: . ack 33100 win 619 <nop,nop,timestamp 13492212 888075371>
Any idea?
RegardsMahmoud


More information about the juniper-nsp mailing list