Strange situations (Or may be lack of info/experience)

[Mustafa Cagatayli <mscag@ciu.edu.tr>]

Hi,

Attached is the graph showing our internet traffic. Do you recognise 
anything strange ? This morning at 08:00 I rebooted the packetshaper 2500, 
whereas I didn't yesterday. Do you think everything is normal, and this may 
be a coincidence ?

Also, I am obtaining the following strange situations ;

1 - Half of our output traffic is ICMP. What should I do ? Can this be a 
reason for people unable to connect using MSN Messanger ?

2 - We had a server which caused us problems so I created a class for 
it,  and assigned it as "prohibited", both inbound and outbound. Now, using 
the "host info -sr -n 25" command I observe that the server is usually 
having 600+ connections and making a good inbound traffic, which strangely 
does not appear on the "TOP TEN" list. How do I BLOCK ALL THE TRAFFIC for 
this server.

3 - Again with the same command, I observer that an outside IP, 
195.228.254.112, is having 300+ connections and making a good outbound 
traffic. Any idea about what this site is ?

Regards.



Mustafa Cagatayli
CC


-++**==--++**==--++**==--++**==--++**==--++**==--++**==--++**==--++**
This message was posted through the Stanford mailing list server. To
subscribe/unsubscribe, send email to majordomo@lists.stanford.edu
with "subscribe packeteer-edu" or "unsubscribe packeteer-edu" as the body.  Archive
is at http://www.stanford.edu/group/networking/netlists/