Moderator

 • 

9.5K Posts

January 21st, 2015 12:00

Hi,

What model switch is it? It looks like there are an excessive number of SSL requests, what kind of traffic goes over the switch, it could be normal or it could be something attacking the network.

1 Rookie

 • 

31 Posts

January 21st, 2015 23:00

lots of failed login attempts - could it be a brute force attack running?

1 Rookie

 • 

31 Posts

January 21st, 2015 23:00

Its a stacked pair of PC 7048s. Its a site core router so does InterVLAN and Intra VLAN then routes to either our MPLS core or to external for t'internet

Says 488 messages dropped due to lack of resources - how do I monitor the resources?

currently level 7 logging enabled - am I just seeing the verbose logging?

Moderator

 • 

9.5K Posts

January 22nd, 2015 09:00

Try running show process cpu and show memory cpu and see what kind of processor load is on the switch. It could be a brute force attack, there might be other switches or routers in your network whose logs will help provide the information.

1 Rookie

 • 

31 Posts

January 23rd, 2015 02:00

its at 11.4 % for 5 secs. Miles above anything else but still plenty left for other resources...

total memory 1048576 KBytess

Available 546798 KBytes

Moderator

 • 

9.5K Posts

January 23rd, 2015 09:00

Yeah that is not maxing out, I would look at other devices on your network to see if there is a brute force attack going on.

No Events found!

Top