Reason Phenomenon Solution
Loopback A lot of retransmission packets, all field values are same, such as: IP identification, TCP sequence number, TCP ack-number. Obvious increase of network utilization. Check connection of switching device, pull out the line directly connecting two ports
Broadcast/Multicast storm Large numbers of broadcast/multicast packets. Broadcast/Multicast traffic is higher than 20% of total traffic. Locate retransmission packets, view source MAC address. Then disconnect the problem host.
Virus Attack There are a lot of connections with same source MAC address and same destination port but different destination address, and in short intervals. View source address of these connections and disconnect the suspect hosts.
Server Slow Response SYN/ACK response time too long in TCP three handshakes process. Adjust server configuration and optimize the parameter
Too Many Clients Too many nodes. Upgrade network settings.
Application Slow Response packets response time to applications is too long. Adjust server configuration and optimize the parameter
Error Client Mask data that should be transmitted through layer 2 are retransmitted through layer 3. Change IP address and mask of the client.

Related External Links

This entry was posted in Network and tagged , , , , , , , . Bookmark the permalink.

Leave a Reply

Your email address will not be published. Required fields are marked *


You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>