One machine using ALL NAT sessions - Urgent

Discussion in 'Cisco' started by Kapamarou, Dec 5, 2003.

  1. Kapamarou

    Kapamarou Guest

    Hi everyone,

    we started having a few problems yesterday with our 1721 when quite a few
    apps using NAT were failing... After I looked at the log it appears that one
    IP address x.x.1.52 is using up all of the NAT sessions... Has anyone seen
    this before?

    Log Buffer (16384 bytes):

    25.050 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.225.97.156 (0/0), 1 packet *Mar 4 16:32:26.058 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.230.9.223 (0/0), 1 packet *Mar 4 16:32:27.062 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 211.41.167.106 (0/0), 1 packet
    *Mar 4 16:32:28.062 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 218.167.115.68 (0/0), 1 packet *Mar 4 16:32:29.062 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    211.132.172.153 (0/0), 1 packet *Mar 4 16:32:30.066 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    219.180.237.199 (0/0), 1 packet *Mar 4 16:32:31.066 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    203.136.220.98 (0/0), 1 packet *Mar 4 16:32:32.066 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.183.160.216 (0/0), 1 packet *Mar 4 16:32:33.066 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    203.114.107.64 (0/0), 1 packet *Mar 4 16:32:34.066 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    211.138.183.81 (0/0), 1 packet *Mar 4 16:32:35.066 BST: %SEC-6-IPACCESSLOGP:
    list NAT_ME permitted tcp

    192.168.1.52(0) -> 211.202.21.141(0), 1 packet

    *Mar 4 16:32:36.074 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 219.54.163.191 (0/0), 1 packet *Mar 4 16:32:37.078 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.127.3.207 (0/0), 1 packet *Mar 4 16:32:38.078 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 211.86.66.244 (0/0), 1 packet
    *Mar 4 16:32:39.078 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 19
    2.168.1.52 -> 218.236.159.109 (0/0), 1 packet *Mar 4 16:32:40.078 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.87.8.198 (0/0), 1 packet *Mar 4 16:32:41.078 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 210.15.255.228 (0/0), 1 packet
    *Mar 4 16:32:42.078 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 202.249.101.42 (0/0), 1 packet *Mar 4 16:32:43.078 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.213.202.112 (0/0), 1 packet *Mar 4 16:32:44.078 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    211.144.215.217 (0/0), 1 packet *Mar 4 16:32:44.510 BST:
    %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 4092
    packets *Mar 4 16:32:45.078 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted
    icmp 192.168.1.52 -> 164.251.158.225 (0/0), 1 packet *Mar 4 16:32:46.078
    BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    203.16.139.172 (0/0), 1 packet *Mar 4 16:32:47.078 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    211.190.88.236 (0/0), 1 packet *Mar 4 16:32:48.142 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    210.158.3.247 (0/0), 1 packet *Mar 4 16:32:49.142 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 203.202.112.91 (0/0), 1 packet
    *Mar 4 16:32:50.338 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 219.35.73.248(0), 1 packet

    *Mar 4 16:32:51.350 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 200.171.247.191(0), 1 packet

    *Mar 4 16:32:52.350 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 218.118.127.18(0), 1 packet

    *Mar 4 16:32:53.362 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 219.3.141.207(0), 1 packet

    *Mar 4 16:32:54.374 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 203.176.179.195(0), 1 packet

    *Mar 4 16:32:55.382 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 203.239.151.10 (0/0), 1 packet *Mar 4 16:32:56.394 BST:
    %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 210.139.250.54(0), 1 packet

    *Mar 4 16:32:57.394 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 210.245.25.52 (0/0), 1 packet *Mar 4 16:32:58.482 BST:
    %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 219.126.137.80(0), 1 packet

    *Mar 4 16:32:59.526 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 159.131.190.172 (0/0), 1 packet *Mar 4 16:33:00.542 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.34.220.243 (0/0), 1 packet *Mar 4 16:33:01.546 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.230.66.21 (0/0), 1 packet *Mar 4 16:33:02.546 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 210.27.128.128 (0/0), 1 packet
    *Mar 4 16:33:03.546 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 210.204.235.186 (0/0), 1 packet *Mar 4 16:33:04.546 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    211.213.234.72 (0/0), 1 packet *Mar 4 16:33:05.546 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.68.208.2 (0/0), 1 packet *Mar 4 16:33:06.550 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 219.79.72.179 (0/0), 1 packet
    *Mar 4 16:33:07.550 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 210.85.119.226 (0/0), 1 packet *Mar 4 16:33:08.554 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.74.245.193 (0/0), 1 packet *Mar 4 16:33:09.554 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    219.184.123.62 (0/0), 1 packet *Mar 4 16:33:10.554 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.12.21.162 (0/0), 1 packet *Mar 4 16:33:11.554 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 219.103.84.126 (0/0), 1 packet
    *Mar 4 16:33:12.554 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 218.176.238.25 (0/0), 1 packet *Mar 4 16:33:13.554 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    211.17.125.113 (0/0), 1 packet *Mar 4 16:33:14.558 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    169.97.31.228 (0/0), 1 packet *Mar 4 16:33:15.558 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 219.92.113.251 (0/0), 1 packet
    *Mar 4 16:33:16.558 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 219.115.153.56 (0/0), 1 packet *Mar 4 16:33:17.562 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    193.244.78.203 (0/0), 1 packet *Mar 4 16:33:18.562 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.133.191.239 (0/0), 1 packet *Mar 4 16:33:19.562 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    203.117.18.25 (0/0), 1 packet *Mar 4 16:33:20.562 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 210.29.152.162 (0/0), 1 packet
    *Mar 4 16:33:21.570 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 211.174.97.119 (0/0), 1 packet *Mar 4 16:33:22.574 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.149.223.153 (0/0), 1 packet 1 packet *Mar 4 16:35:37.406 BST:
    %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 220.48.3.246(0), 1 packet

    *Mar 4 16:35:38.422 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 218.169.3.8(0), 1 packet

    *Mar 4 16:35:39.442 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 211.217.89.3(0), 1 packet

    *Mar 4 16:35:40.446 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 220.120.106.111(0), 1 packet

    *Mar 4 16:35:41.462 BST: %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 211.4.61.7(0), 1 packet

    *Mar 4 16:35:42.542 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 219.35.232.194 (0/0), 1 packet *Mar 4 16:35:43.542 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    203.3.137.72 (0/0), 1 packet *Mar 4 16:35:44.542 BST: %SEC-6-IPACCESSOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 211.214.46.90 (0/0), 1 packet
    *Mar 4 16:35:44.562 BST: %SEC-6-IPACCESSLOGRL: access-list logging
    rate-limited or missed 4931 packets *Mar 4 16:35:45.550 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.26.230.198 (0/0), 1 packet *Mar 4 16:35:46.550 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.3.85.148 (0/0), 1 packet *Mar 4 16:35:47.554 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 210.131.156.8 (0/0), 1 packet
    *Mar 4 16:35:48.554 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 210.165.22.74 (0/0), 1 packet *Mar 4 16:35:49.554 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    220.79.194.94 (0/0), 1 packet *Mar 4 16:35:50.554 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 210.234.195.62 (0/0), 1 packet ->
    202.233.82.120 (0/0), 1 packet *Mar 4 16:33:38.654 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    210.228.20.10 (0/0), 1 packet *Mar 4 16:33:39.662 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 210.146.86.1 (0/0), 1 packet *Mar
    4 16:33:40.662 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 218.194.240.164 (0/0), 1 packet *Mar 4 16:33:41.662 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.42.38.74 (0/0), 1 packet *Mar 4 16:33:42.662 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 220.83.243.53 (0/0), 1 packet
    *Mar 4 16:33:43.662 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 210.2.71.44 (0/0), 1 packet *Mar 4 16:33:44.526 BST:
    %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed 5138
    packets *Mar 4 16:33:44.662 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted
    icmp 192.168.1.52 -> 202.183.131.6 (0/0), 1 packet *Mar 4 16:33:45.674 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    220.165.144.237 (0/0), 1 packet *Mar 4 16:33:46.674 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    143.152.142.41 (0/0), 1 packet *Mar 4 16:33:47.674 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    210.111.163.44 (0/0), 1 packet *Mar 4 16:33:48.674 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.164.151.203 (0/0), 1 packet *Mar 4 16:33:49.698 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.224.216.221 (0/0), 1 packet *Mar 4 16:33:50.794 BST:
    %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 220.78.233.193(0), 1 packet

    *Mar 4 16:33:51.882 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 194.123.55.25 (0/0), 1 packet *Mar 4 16:33:52.918 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    192.230.137.203 (0/0), 1 packet *Mar 4 16:33:53.990 BST:
    %SEC-6-IPACCESSLOGP: list NAT_ME permitted tcp

    192.168.1.52(0) -> 211.127.51.95(0), 1 packet

    *Mar 4 16:33:55.026 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 153.39.179.217 (0/0), 1 packet *Mar 4 16:33:56.042 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    130.200.201.204 (0/0), 1 packet *Mar 4 16:33:57.042 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    150.201.57.110 (0/0), 1 packet *Mar 4 16:33:58.042 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.113.220.120 (0/0), 1 packet *Mar 4 16:33:59.042 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    211.254.226.71 (0/0), 1 packet *Mar 4 16:34:00.042 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.164.229.180 (0/0), 1 packet *Mar 4 16:34:01.046 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.73.43.228 (0/0), 1 packet *Mar 4 16:34:02.050 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 211.172.173.76 (0/0), 1 packet
    *Mar 4 16:34:03.050 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 193.80.65.109 (0/0), 1 packet *Mar 4 16:34:04.054 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    203.110.102.180 (0/0), 1 packet *Mar 4 16:34:05.054 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.17.214.223 (0/0), 1 packet *Mar 4 16:34:06.054 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.70.237.80 (0/0), 1 packet *Mar 4 16:34:07.054 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 220.175.106.34 (0/0), 1 packet
    *Mar 4 16:34:08.054 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 202.126.255.209 (0/0), 1 packet *Mar 4 16:34:09.054 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    220.151.78.99 (0/0), 1 packet *Mar 4 16:34:10.054 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 211.181.170.177 (0/0), 1 packet
    *Mar 4 16:34:11.054 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 202.5.251.103 (0/0), 1 packet *Mar 4 16:34:12.062 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    210.208.102.144 (0/0), 1 packet *Mar 4 16:34:13.062 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.180.1.220 (0/0), 1 packet *Mar 4 16:34:14.062 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 220.141.227.0 (0/0), 1 packet
    *Mar 4 16:34:15.062 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 128.187.182.242 (0/0), 1 packet *Mar 4 16:34:16.062 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    219.187.69.87 (0/0), 1 packet *Mar 4 16:34:17.062 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 192.96.235.248 (0/0), 1 packet
    *Mar 4 16:34:18.066 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 211.221.179.93 (0/0), 1 packet *Mar 4 16:34:19.070 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.26.150.220 (0/0), 1 packet *Mar 4 16:34:20.078 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.164.17.153 (0/0), 1 packet *Mar 4 16:34:21.078 BST: %SEC-6-IPACCESSLOGP:
    list NAT_ME permitted tcp

    192.168.1.52(0) -> 211.112.142.129(0), 1 packet

    *Mar 4 16:34:22.082 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 202.210.177.31 (0/0), 1 packet *Mar 4 16:34:23.082 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    210.154.47.246 (0/0), 1 packet *Mar 4 16:34:24.082 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.9.19.239 (0/0), 1 packet *Mar 4 16:34:25.086 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 218.10.98.48 (0/0), 1 packet *Mar
    4 16:34:26.086 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 218.172.68.175 (0/0), 1 packet *Mar 4 16:34:27.086 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    130.79.159.240 (0/0), 1 packet *Mar 4 16:34:28.090 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.175.174.107 (0/0), 1 packet *Mar 4 16:34:29.094 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    218.11.145.120 (0/0), 1 packet *Mar 4 16:34:30.094 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    198.84.171.229 (0/0), 1 packet *Mar 4 16:34:31.094 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.219.102.253 (0/0), 1 packet *Mar 4 16:34:32.094 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.241.105.109 (0/0), 1 packet *Mar 4 16:34:33.094 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.36.66.22 (0/0), 1 packet *Mar 4 16:34:34.094 BST: %SEC-6-IPACCESSLOGDP:
    list NAT_ME permitted icmp 192.168.1.52 -> 218.100.20.156 (0/0), 1 packet
    *Mar 4 16:34:35.094 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp
    192.168.1.52 -> 194.189.250.70 (0/0), 1 packet *Mar 4 16:34:36.094 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    164.170.142.40 (0/0), 1 packet *Mar 4 16:34:37.102 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    202.102.89.171 (0/0), 1 packet *Mar 4 16:34:38.102 BST:
    %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    211.109.194.200 (0/0), 1 packet
     
    Kapamarou, Dec 5, 2003
    #1
    1. Advertisements

  2. :we started having a few problems yesterday with our 1721 when quite a few
    :apps using NAT were failing... After I looked at the log it appears that one
    :IP address x.x.1.52 is using up all of the NAT sessions... Has anyone seen
    :this before?

    Yes, x.x.1.52 is probably infected with something such as Natchi.

    :25.050 BST: %SEC-6-IPACCESSLOGDP: list NAT_ME permitted icmp 192.168.1.52 ->
    :202.225.97.156 (0/0), 1 packet *Mar 4 16:32:26.058 BST:

    icmp 0/0 is icmp echo, also known as ping. Large numbers of pings
    is characteristic of Natchi.
     
    Walter Roberson, Dec 5, 2003
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.