ASA all Internet bandwith in use

phiz.petry · ‎11-19-2008

Hello,

Strange problem.

I have one ASA with AntiX card and 2 Mbps SDSL Internet connection.

All day the 2 Mpbs (download) is in use (ASDM Monitor Outside Interface).

If i use the show conn all, i can view a lot (10) of this line

TCP out 193.159.160.161:80 in 200.11.111.200:3161 idle 0:00:44 bytes 148 flags UfrOX

The bytes is always 148. No progress.

But if i create an access-list to block this trafic, the bandwith goes imediatly down (after using clear xlate).

Does anyone know what is this IP address ?

I have view two different PC as source using the same destination address, and one time i have view the IP Antix as source using this destination

Thanks for your help

Collin Clark · ‎11-20-2008

Weird, it belongs to RIPE.

OrgName: RIPE Network Coordination Centre

OrgID: RIPE

Address: P.O. Box 10096

City: Amsterdam

StateProv:

PostalCode: 1001EB

Country: NL

ReferralServer: whois://whois.ripe.net:43

NetRange: 193.0.0.0 - 193.255.255.255

CIDR: 193.0.0.0/8

NetName: RIPE-CBLK

NetHandle: NET-193-0-0-0-1

Parent:

NetType: Allocated to RIPE NCC

NameServer: NS-PRI.RIPE.NET

NameServer: NS3.NIC.FR

NameServer: SUNIC.SUNET.SE

NameServer: NS-EXT.ISC.ORG

NameServer: SEC1.APNIC.NET

NameServer: SEC3.APNIC.NET

NameServer: TINNIE.ARIN.NET

Comment: These addresses have been further assigned to users in

Comment: the RIPE NCC region. Contact information can be found in

Comment: the RIPE database at http://www.ripe.net/whois

RegDate: 1992-08-12

Updated: 2005-08-03

You could try contacting them and see if they handed it out and if WHOIS isn't updated yet.