Hello,
We are having intermittent network issues (basically http traffic) and I have started troubleshooting each point to see where we might be having a breakdown.
I am seeing these logs in our Cisco 2811 router:
%FW4-ALERT_ON: getting aggressive ….
%FW4-ALERT_OFF: calming down ….
I realize these indicate half-state packets, which is a sign of a DoS attack. This is not an area of my expertise, so my question is if this is common due to the number of virii, worms, etc.. on the internet, or if this is possibly a real indication of someone who is trying to attack our router.
I refreshed the logs so I can see what is happening now.
If anyone has any hints at what to look out for that would be great. We may hire a consultant to look at this if there is some real concern.
Thanks!