Thanks for your answer,is what i've done with sflowtrend, snort and wireshark .
I found that one of the application we have is always opening ports on a database server : more than 100 SYN packets for two ou three updates. Unfortunetly this is our main application with 200 ou 300 clients connected at the same time and always about 10 ou 15 simultaneous transactions. It seems the applications, based on tuxedo, is acting like that since the last upgrade...
But on thoses routers (3400 Procurve) what causes the more cpu usage : L3 routing ? L2 switching ? How many packets can be to much ? does STP or XRRP can be a problem for the CPU ?
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.