cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
373
Views
0
Helpful
1
Replies

high connections on FWSM

ajamua
Level 1
Level 1

I am having issues trying to track down what is causing a high number of connection on our FWSM in our core 6509 switch. I recently upgraded my FWSM to 3.1(20) and I'm looking for a tool to be able to find the culprit. When I receive these messages I try to get onto the firewall in time to be able to get information regarding this issue but by the time I do the device recovers. Is there a way to tweat the threshold of the SNMP trap for high connections? Is there any way I can retreive this information via SNMP? Is there are command that will allow me to extract the local IP making the most connections?

1 Reply 1

Eugene Khabarov
Level 7
Level 7

TIP: If you have some kind of unix box, you can use show conn  and export it to the file. This file should be placed on unix box. Than you can use on unix box:

cat | sed -e 's/:/ /g' | awk '{print $6}' | sort | uniq -c | sort -g

The output will be like this:

      7 10.96.158.1

      7 10.96.177.1

      7 10.96.19.1

      7 10.96.198.1

      7 10.97.29.1

      7 10.97.58.1

      7 10.97.60.1

      8 10.97.30.1

      8 10.97.43.1

      9 10.96.117.1

      9 10.96.34.1

      9 10.97.10.1

     10 10.96.159.1

     18 212.248.105.74

     26 10.96.2.34

Here is the first column is count and second column is address of the inside host. For outside host count use {print $3}

---
HTH. Please rate this post if it was helpful. If this solves your problem, please mark this post as "Correct Answer.

      7 10.96.158.1
      7 10.96.177.1
      7 10.96.19.1
      7 10.96.198.1
      7 10.97.29.1
      7 10.97.58.1
      7 10.97.60.1
      8 10.97.30.1
      8 10.97.43.1
      9 10.96.117.1
      9 10.96.34.1
      9 10.97.10.1
     10 10.96.159.1
     18 212.248.105.74
     26 10.96.2.34
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: