Cisco Switching/Routing :: Track Down An Application Response
Nov 28, 2012
I am trying to track down an application response problem on my network (the traffic goes through a 6509 and FWSM).I noticed in one of my WireShark captures, that the client at times seems to be sending ackowledgements (ACKs) over and over again, and I'm not sure if this indicates a problem/ retransmission.
Basically, a web server is delivering images to the client, but end users are complaining of slowness and freezes.Wire-Shark has not flagged this as a problem (comes up "green")
I've been using my pair of ACE-4710s for quite some time and have usually stuck to the Class C Subnet sticky settings, as that's what we migrated from in Windows NLB. In one instance of load balancing I'm trying to create an L4 inspection policy that looks for a certain payload (much like a http header) and would like to persist on this. The problem is that the client portion of the conversation starts with a 'SessionID' of 0, and the server responds with a unique 'SessionID'. If I setup the sticky policy with 'Enable Sticky For Response', I get entries populated in the sticky database, but they all go to the same server as there is a sticky session setup for the SessionID = 0. Is there a way to setup sticky entries on server response only.Currently using ACE DM v4(1.0).
However, the 6509 IOS only provides the option to track an interface. Is this a feature that's available in later IOS versions?
Is there another way to track these routes? The subnets are used for WAN links at a HQ and DR site and we are doing a specific PBR (sending all http/https traffic) using these subnets. If that WAN link goes down, we want to be able to utilize a backup WAN link to support that traffic.
Having issues with HTTPS sites being very slow after applying KB2585542? Once you remove this Microsoft patch everything returns to normal. It appears that the CSS does not handle the split-ssl requests properly. I have opened a TAC case but am not really getting anywhere as we seem to be the only company that is having this issue.
I attached the terminal to the console port to watch the bootup sequense, but nothing appear the same cable used on athor switches and router without any issue.procedure to access the router noting that Giga ports not working also.
We want to mask part of the path prefix to hide development content: For example: the site(s) are: [URL]However we don't want anything with acme showing...so we would want the loadbalanced url to be: [URL] ...for requests and responses. I think this would be an http re-write request/response scenario?Is this possible to configure this on the ACE Device? We've got the load balance configuration down...not sure how to do this re-write type scenario?
I have 2 Catalyst 2924 switch in a home lab. Both of them have developed the same problem at the same time (strange). I have tried all that I can think of. I can telnet to them but cannot access via the console port. On a telnet session I execueted a "write erase, reload" on one of them. As I anticipated this threw me out of the telnet session and I presently have no access to that switch.
The console cable is fine, works for all other devices.
We have Four 2960S Switches in Stack. We have created Multiple VLANs. While Pinging from Member PC to Member VLAN IP on Switch, we are getting Higher TTL response & Some ping breaks for One Particular VLAN. While pinging from Member PC to Member PC, we are getting Normal Ping Response.
I am in the process of installing a 3750x (IOS 12.2 (53r) SE2 IP Base) Cisco Catalyst switch in a new network of just 2 PC's (2 hosts, OS windows7 64Bits). I have enabled SVI interfaces with the both hosts installed in 2 different network segments. We then start connectivity test. The response time for the PING command between both hosts remain below 1 millisecond, whereas the response time between the hosts and their correspondent SVI interface is variable, and at all time is higher than 1 millisecond, sometimes it reaches 17 milliseconds. (Note that the switch CPU usage is only 8% at the time of testing) We have performed this same connectivity test changing the 3750x switches and in two different locations obtaining the same results.
We got a switch issue here for 4507R-E with two sup6l-e supervisor running sso redudant. and we found that sometimes client can't ping through the local vlan ip add on the switch , can't logon the cli by telnet too. In the direct connected network device such as access switch and ASA , can't ping or telnet the 4507R too. when we made a forceswitch to sso standby supervisor from console , the problem solve and everything get fine . after that, we switch angin back to the origin supervisor , fine too.
before we made the supervisor forceswitch , we had check the system cpu usage is 15 - 20 % from console . also we had creat a new vlan 200, attach the notebook to 4507's vlan 200 port , the notebook can't ping or telnet the vlan 200 ip interface too.
In change network topology, we are going to assign PC's Gateway as Switch (3750X) IP Address rather than server IP Address. Currently we have configured all Sytems's Gateway is Internet Server IP Address which we are going to replace with Switch IP as Gateway.Issue is while connecting specific application like team viewer in which application tried to send keepalive message to the live server and in case of switch/router IP as gateway. Connection doesn't established. However it is working fine when Internet Server IP treated as gateway.
We are facing a strange issue, our ACE 20 got failed due to power issue , after RMA once we are installing ACE 20 to 6509 , the status LED is showing ORANGE . The sh module shows it as " Others " ... The IOS is same as it was previously in 6509 .
In change network topology, we are going to assign PC's Gateway as Switch (3750X) IP Address rather than server IP Address. Currently we have configured all Sytems's Gateway is Internet Server IP Address which we are going to replace with Switch IP as Gateway. [code]
Issue is while connecting specific application like team viewer in which application tried to send keep alive message to the live server and in case of switch/router IP as gateway. Connection doesn't established. However it is working fine when Internet Server IP treated as gateway.
I work at a hospital and one of our department uses specialized software created by Varian Medical Systems. It has been brought to my attention that one of those applications has trouble opening during the day. I had the users demonstrate the issue and from what they explained to they are supposed to be able to open the application, log in, and be presented with a list of radiology images to choose from. Unfortunately, during the day this fails often and they have to try 3 or 4 times before it actually works. It behaves differently after 4 pm, and seems to work after the 1st or 2nd time at that time of the day. According to what I've been told this has been an issue as long as they can remember.
Varian has told me that they have done a number of things on their side to rule out their software and they think it is a network issue. We used Solar winds Engineer's Tool set (specifically the Network Performance Monitor) to monitor their switch and it is reporting no errors and the utilization graphs show that the ports involved have very little utilization. The most heavily utilized port is hovering between 10 and 5 person (Fa0/40). I've included a network diagram, but basically we have 1 10/100 Cisco 3350 switch (c3550-ipservices-mz.122-25.SEB4.bin), 4 clients, and 2 servers involved. They all are connected to the same switch at A-Full/A-100mbps. Although the Network Performance Monitor doesn't show any errors or over utilizaton of the ports in the the CLI I do see 35 output buffer failures and 35 under runs on the port connected to one of the servers (Fa0/40). They were a little higher and I cleared them about two weeks ago and then rebooted the switch, because I found that it could alleviate these types of errors.
They say the software use ports 5000, 55000, 55010, and 55020. We tried a packet capture, but I didn't have enough experience/knowledge to get anything useful out of it. I also checked the event logs on the clients and servers and nothing there indicates a issue in the software. They want us to replace the switch with a gigabit switch, but we have a REALLY limited budget and I would rather not if it isn't necessary. What I could try in order to rule out the network?
Im looking for some software to monitor general info on the computers in the office. I would like to be able to service a computer and be able to pull up service notes, info on hardware and just be able to keep track of what we have been doing to all of the computers [code]...
I was just brushing up few things in GNS3 and after setting up an SLA.Now when I want to set the track ip I get not option for sla why??I am running c3725-adventerprisek9-mz.124-15.T5 shouldn't it be available?
I have an 877 router which has a DSL WAN interface. The DSL service at this site is unreliable, so the company have purchased a separate 3G router to be used as a backup. This device maintains 3G connectivity at all times and has a static IP on the internal subnet (for arguments sake let's say 10.0.0.253).
What I want to do with the Cisco router is to track the DSL interface and if it is up, install a default route pointing to it. If it is down, I want the default route to be the 3G router.
I am thinking the best way to do this is to set up a track and then set 2 default routes; one which is installed if the tracking is up, the other has a higher admin distance and points to the 3G router and thus should only be used if the track is down. For example:
track 10 interface Dialer0 ip routing delay down 30 up 30 ip route 0.0.0.0 0.0.0.0 Dialer0 track 10 ip route 0.0.0.0 0.0.0.0 10.0.0.253 100
Is this likely to work or is there a better way to do it?
We got a 3310MSE that does not track clients.,rogues etc for some reason.
- there are no firewalls between PNCS and MSE - clocks are synced up with NTP - CAS is running on the MSE - I have added controllers and a test site with clients and is synced up with the MSE. - Have enabled tracking under tracking doe clients and rogues excluding adhoc rogue APs -we only have 100 element license.
The only other thing worth mentioning is that MSE is running version 6 firmware and the controllers are 7.0.220 but I do not think this should prevent MSE from tracking devices. [code]
We've recently upgraded our switches from 10/100 over to FOUR Dell 2848 (GB Managed switches) and using one as a director (fiber uplink).We are all on GB networks now and we've been running into issues tracking down what's hogging up most of our bandwidth (local area network) throughout our company.We need to track down which machines are copying data to servers and vise versa.
My home network has two routers. My setup is...modem to router 1, then router 1 to router 2. is there a way to track the bandwidth usage on the two routers. My ISP says that I'm going over my bandwidth allowance and that's because in my household, we are hardcore gamers, netflix, and internet users. Router 2 belongs to my sister-in-law, and router 1 is mine. But I want to know which and more importantly, "WHO" is using more of the bandwidth.
My ISP limits me and my family to download/upload 40GBs of data each month. Recently, (since my brother has moved back in), the amount downloaded each moth has rocketed to around 60GBs, meaning we've gone over the limit. We've asked my brother to stop downloading things, and he says he has, but its obvious he hasn't. I searched google and I haven't found anything, but I was wondering if there was a piece of software to track exactly what's being downloaded/uploaded through the main router. Or a program to more simply which IP address is downloading the most...
I've been looking around for a way to track my usage on my D-Link router. Any posts to address this seem to be a few years old. At that time, there was nothing I could do to track it via the 825. Any 3rd party firmware or anything from DLink that I can use?