MARS - "Sudden increase of traffic to a port" rule

Hello. I duplicated the system rule "Sudden increase of traffic to a port" in MARS and it blew out the original system rule and now shows up as a user rule. It doesn't appear to be working either. It is active. Not sure what to make of this, and neither is TAC. Anybody every mess up a system rule like this? Anyway to recover it? Thanks!

I upgraded to 4.2.2 and the rule seems to have been restored as a system rule. I noticed that it is showing up in our morning report (Event Types Ranked by Sessions), but we are not recieving an email or page for this rule firing (email/SMS notification works for all other rules). I ran a query for this event for the time period of the report it showed up on and no results were returned. Any thoughts would be appreciated. Thanks.
Christine

Similar Messages

  • Tuning Sudden Increase to Port Traffic

    I am looking for suggestions on tuning sudden increase to port traffic for MARS.
    We have a third party that we do not want to be actively alerted when they perform their scan. This gives us one set of IP addresses they use to scan.
    Next is our internal networks that are the target of those scans. Which gives us a second source.
    Unforunately, Mars is reporting these flows as Source 0.0.0.0 Target (Int Host) and Source (Scan Co.) Target 0.0.0.0.
    Anyone have any suggestions? I'm worried if I filter by source, I'll loose that portion of the correlation and be left with just the victim IP of the scan, which tells me little.

    Have you tried to set that particular session as false positive? (i hope you know that) You can tune the false positive for particular source/destination on per session basis. Once you do that, try and see if it still reports as a scan.
    Mohsin

  • Sudden increase in BT Infinity Latency - Harwich E...

    I have had BT Infinity for a couple of months now and have a SamKnows broadband monitoring unit connected. It originally reported the latency to be 10 milliseconds, however on 9th December at 13:00 it jumped to 20ms and has remained there ever since, so the latency is now worse than it was with my old ADSL2+ (approx 15ms) and my son reports problems with lag now when online gaming.
    Does anyone have any idea why the latency should suddenly increase like this, I presume it's a network issue somewhere.
    I have a HomeHub 5 fitted.
    Whether it's relevant, my connection was the 1st in the cabinet.
    Any information would be appreciated. Thanks.
    Solved!
    Go to Solution.

    DLM has probably decided to add interleaving to your line.
    If you do a 'tracert bbc.co.uk' you will see the first hop after the HomeHub as around 6ms without interleaving, and around 16 ms with interleaving.
    No reason I know of to expect lower pings on FTTC than ADSL.  My bbc pings with BE/ADSL were around 11ms (no interleaving) or 20 ms (interleaving).  With Infinity they are around 22ms (no interleaving) or 31 ms (interleaved).  On BE I had the choice; I chose interleaving for greater stability and lower packet loss depite the ping increase.  With FTTC you don't have the choice; you get what DLM gives you.  I have been on interleaved for most of my Infinity contract, it was removed a couple of months ago (probably as a result of changes to the updated modem firmware).
    A lot of my Infinity extra is the silly routing of all my traffic Winchester->Sheffield->London before it leaves the BT network; this adds around 9ms to my ping times; around 4/5 ms each for the hops north and back south.

  • Sudden increase in buffer gets per executions in update statement

    Hi,
    Recently we have encountered one performance issue, which is most likely caused by a sudden increase in the buffer gets per execution.
    The SQL is an update statement, updating a table using a primary key (we have checked to confirm the running execution plan is using the primary key), and one field being updated is a BLOB column.
    As shown in the below statistics, there is no major change in the number of executions during the every 20 minutes monitoring interval. However, the buffer gets per executions has been more than double, and the CPU time is almost doubled, hence the exec_time (elapsed time) has been doubled.
    The same SQL has been running for the past four years in multiple similar databases. The database is Oracle 9.2.0.4 running on Solaris 9. For the past 300 days, the average elapsed time per execution is about 0.0093s, while the average buffer gets per execution is about 670. The update statement has been executed about 9 times per second.
    The question is why there is a sudden increase in the buffer gets? The sudden increase happened twice for the past two days.
    <pre>
    B_TIME E_TIME EXECUTIONS_DIFF EXEC_TIME CPU_TIME BUFFER_GETS EXEC_PER_DAY
    2009-11-25-14:04 2009-11-25-14:23 8513 .0069 .0068 315.56 646329
    2009-11-25-14:23 2009-11-25-14:43 10170 .007 .0068 312.28 726188
    2009-11-25-14:43 2009-11-25-15:05 11873 .0072 .0069 320.17 787885
    2009-11-25-15:05 2009-11-25-15:23 8633 .011 .0101 844.83 675014
    2009-11-25-15:23 2009-11-25-15:44 9668 .0144 .0137 1448.51 680778
    2009-11-25-15:44 2009-11-25-16:04 9671 .0163 .0156 1809.04 702163
    2009-11-25-16:04 2009-11-25-16:25 10260 .0188 .0177 2107.67 711447
    2009-11-25-16:25 2009-11-25-16:44 9827 .0157 .0151 1834.3 739593
    2009-11-25-16:44 2009-11-25-17:05 10586 .0171 .0164 2008.25 714555
    2009-11-26-08:04 2009-11-26-08:24 11028 .0182 .0172 1979.61 800688
    2009-11-26-08:24 2009-11-26-08:44 10533 .0154 .0149 1734.62 750248
    2009-11-26-08:44 2009-11-26-09:04 9367 .018 .0168 2043.95 685274
    2009-11-26-09:04 2009-11-26-09:24 10307 .0214 .0201 2552.43 729938
    2009-11-26-09:24 2009-11-26-09:45 10932 .0251 .0234 3111.48 762328
    2009-11-26-09:45 2009-11-26-10:05 10992 .0278 .0254 3386.41 797404
    2009-11-26-15:03 2009-11-26-15:16 7183 .0425 .0348 4615.42 746824
    2009-11-26-15:16 2009-11-26-15:23 2921 .0417 .0373 4887.75 682092
    2009-11-26-15:23 2009-11-26-15:43 9597 .0393 .0352 4603.62 679656
    2009-11-26-15:43 2009-11-26-16:03 8797 .0411 .0362 4783.66 630755
    2009-11-26-16:03 2009-11-26-16:23 9957 .0453 .0391 5168.28 718100
    2009-11-26-16:23 2009-11-26-16:43 11209 .0436 .0369 4870.77 808395
    2009-11-26-16:43 2009-11-26-17:03 10729 .0428 .0375 5119.56 766103
    2009-11-26-17:03 2009-11-26-17:23 9116 .0409 .0363 4912.58 659098
    </pre>
    Yesterday I did a trace on one of the sessions running the update statement, and below is the tkprof output:
    <pre>
    call count cpu elapsed disk query current rows
    Parse 76 0.03 0.00 0 0 0 0
    Execute 76 4.58 5.14 0 567843 19034 76
    Fetch 0 0.00 0.00 0 0 0 0
    total 152 4.61 5.14 0 567843 19034 76
    Misses in library cache during parse: 1
    Optimizer goal: CHOOSE
    Parsing user id: 88
    Rows Row Source Operation
    1 UPDATE (cr=30 r=0 w=0 time=6232 us)
    1 INDEX UNIQUE SCAN <PK Index Name> (cr=3 r=0 w=0 time=58 us)(object id 81122)
    Elapsed times include waiting on following events:
    Event waited on Times Max. Wait Total Waited
    Waited--------------------------------------------------------------------------------
    SQL*Net message to client 152 0.00 0.00
    SQL*Net message from client 152 0.00 0.22
    SQL*Net more data from client 1894 0.00 0.03
    SQL*Net break/reset to client 152 0.00 0.00
    buffer busy waits 14 0.00 0.00
    enqueue 1 0.61 0.61
    </pre>
    GaoYuan

    Hi,
    I've reformatted your output for better understanding (with {noformat}...{noformat}):
    B_TIME           E_TIME           EXECUTIONS_DIFF  EXEC_TIME   CPU_TIME BUFFER_GETS EXEC_PER_DAY
    2009-11-25-14:04 2009-11-25-14:23            8513      .0069      .0068      315.56       646329
    2009-11-25-14:23 2009-11-25-14:43           10170       .007      .0068      312.28       726188
    2009-11-25-14:43 2009-11-25-15:05           11873      .0072      .0069      320.17       787885
    2009-11-25-15:05 2009-11-25-15:23            8633       .011      .0101      844.83       675014
    2009-11-25-15:23 2009-11-25-15:44            9668      .0144      .0137     1448.51       680778
    2009-11-25-15:44 2009-11-25-16:04            9671      .0163      .0156     1809.04       702163
    2009-11-25-16:04 2009-11-25-16:25           10260      .0188      .0177     2107.67       711447
    2009-11-25-16:25 2009-11-25-16:44            9827      .0157      .0151      1834.3       739593
    2009-11-25-16:44 2009-11-25-17:05           10586      .0171      .0164     2008.25       714555
    2009-11-26-08:04 2009-11-26-08:24           11028      .0182      .0172     1979.61       800688
    2009-11-26-08:24 2009-11-26-08:44           10533      .0154      .0149     1734.62       750248
    2009-11-26-08:44 2009-11-26-09:04            9367       .018      .0168     2043.95       685274
    2009-11-26-09:04 2009-11-26-09:24           10307      .0214      .0201     2552.43       729938
    2009-11-26-09:24 2009-11-26-09:45           10932      .0251      .0234     3111.48       762328
    2009-11-26-09:45 2009-11-26-10:05           10992      .0278      .0254     3386.41       797404
    2009-11-26-15:03 2009-11-26-15:16            7183      .0425      .0348     4615.42       746824
    2009-11-26-15:16 2009-11-26-15:23            2921      .0417      .0373     4887.75       682092
    2009-11-26-15:23 2009-11-26-15:43            9597      .0393      .0352     4603.62       679656
    2009-11-26-15:43 2009-11-26-16:03            8797      .0411      .0362     4783.66       630755
    2009-11-26-16:03 2009-11-26-16:23            9957      .0453      .0391     5168.28       718100
    2009-11-26-16:23 2009-11-26-16:43           11209      .0436      .0369     4870.77       808395
    2009-11-26-16:43 2009-11-26-17:03           10729      .0428      .0375     5119.56       766103
    2009-11-26-17:03 2009-11-26-17:23            9116      .0409      .0363     4912.58       659098
    call     count       cpu    elapsed       disk      query    current        rows
    Parse       76      0.03       0.00          0          0          0           0
    Execute     76      4.58       5.14          0     567843      19034          76
    Fetch        0      0.00       0.00          0          0          0           0
    total      152      4.61       5.14          0     567843      19034          76
    Misses in library cache during parse: 1
    Optimizer goal: CHOOSE
    Parsing user id: 88
    Rows     Row Source Operation
          1  UPDATE  (cr=30 r=0 w=0 time=6232 us)
          1   INDEX UNIQUE SCAN <PK Index Name(cr=3 r=0 w=0 time=58 us)(object id 81122)
    Elapsed times include waiting on following events:
      Event waited on                             Times   Max. Wait  Total Waited
      SQL*Net message to client                     152        0.00          0.00
      SQL*Net message from client                   152        0.00          0.22
      SQL*Net more data from client                1894        0.00          0.03
      SQL*Net break/reset to client                 152        0.00          0.00
      buffer busy waits                              14        0.00          0.00
      enqueue                                         1        0.61          0.61
    ********************************************************************************Can you please provide a DDL for the table, indexes, type of the tablespace(s) they reside in (ASSM/MSSM, extents sizes), the UPDATE statement, how many sessions on average/peaks are doing the same thing concurrently, how many sessions are working this table concurrently and how do they use it?

  • Sudden increase in Tablespace - Oracle 9.2.0.8

    The oracle tablespace increased suddenly but without loading the actual data. On 06/15, the tablespace has a free space on 1.5G, but all of a sudden, all 1.5G has been consumed and casued the batch job to abend due to lack of space in the tablespace. The tablepace was increased by 2.5G and the batch job ws successfully completed. Till now ( after 1 month) there was no decrease in the free space of the tablespace (still 2.5G) and there was a increase in the size of the tablespace.
    Please could you help in sudden consumption of the free space by the tabllespace. here are the tablespace storage details.
    BLOCK_SIZE 8192,
    INITIAL_EXTENT 6553600,
    NEXT_EXTENT 6553600,
    MIN_EXTENTS 1,
    MAX_EXTENTS 2147483645,
    PCT_INCREASE 0,
    MIN_EXTLEN 6553600,
    STATUS ONLINE,
    CONTENTS PERMANENT,
    LOGGING LOGGING,
    FORCE_LOGGING NO,
    EXTENT_MANAGEMENT LOCAL,
    ALLOCATION_TYPE UNIFORM,
    SEGMENT_SPACE_MANAGEMENT AUTO,
    DEF_TAB_COMPRESSION DISABLED
    Thanks,
    Mahesh

    Hi All,
    I got the answer. It is a bug in oracle 9.2.0.8. Oracle support has given as patch to implement and it should resolve issue.Here is the quote from Oracle support " It seems you have hitting the known Bug 5987262 duplicate of Bug 5890312 Unexplained increases in unformatted blocks in a tablespace ..This issue is also addressed by article : Note 469985.1 Ext/Mod Sudden Increase in Unformatted Blocks "
    Thanks for your support
    Thanks,
    Mahesh

  • Sudden Increase in database size

    Hi all,
    I have noticed sudden increase in sys schema size, after making queries on DBA_TABLESPCAES, DBA_DATA_FILE,
    DBA_EXTENTS,DBA_SEGMENTS.
    Does it means Oracle has generated lot of data after queries to these views ?
    It's very urgent .
    Please reply.

    Hi,
    Is any application accessing this database? If yes, then did you confirm with the application contact whether any heavy changes have taken place in the application/database? I think that an increase of 300M is not huge but normal/acceptable. However, it is a factor of the actual database size. What is you database size?
    Regards.

  • Sudden increase in native heap memory

    Hi all,
    we are using JRockit 26.4 and currently configured with 1800MB heap on windows 2003 with /3GB switch.
    We noticed that after the weblogic server is started the total memory (java heap + native memory) lingers around 2550 MB... (We monitored this using perfmon -> virtual bytes of java process)
    after couple of days run, the native memory suddenly increased by 300 MB, taking the total virtual bytes to 2850 MB.
    Do we know what could be the reason for such a sudden increase?
    Thanks,
    - Pritam.

    I don't believe this is documented anywhere unfortunately, and it might vary depending on the exact JRockit release. But the key thing to watch out for is growth, regardless of which component it is. If you see that, post a question here and we'll find someone to tell you what the issue is...
    That said, here's an example printout and some guesses from my side.
    [JRockit] memtrace is collecting data...
    [JRockit] *** 0th memory utilization report
    (all numbers are in kbytes)
    Total mapped                         ;;;;;;; 860976
    ; Total in-use                        ;;;;;;  89816
    ;;  executable                         ;;;;;   4400
    ;;;   java code                         ;;;;    384;   8.7%
    ;;;;    used                             ;;;    236;   61.6%
    ;;  shared modules (exec+ro+rw)        ;;;;;   8496
    ;;  guards                             ;;;;;    180
    ;;  readonly                           ;;;;;   3052
    ;;  rw-memory                          ;;;;;  78132
    ;;;   Java-heap                         ;;;;  65536;   83.9%
    ;;;   Stacks                            ;;;;   1976;   2.5%
    ;;;   Native-memory                     ;;;;  10619;   13.6%
    ;;;;    java-heap-overhead               ;;;   2056
    ;;;;    codegen memory                   ;;;    576
    ;;;;    classes                          ;;;   2048;   19.3%
    ;;;;;     method bytecode                 ;;    219
    ;;;;;     method structs                  ;;    277    (#5929)
    ;;;;;     constantpool                    ;;    788
    ;;;;;     classblock                      ;;     69
    ;;;;;     class                           ;;    143    (#443)
    ;;;;;     other classdata                 ;;    338
    ;;;;;     overhead                        ;;     91
    ;;;;    threads                          ;;;      6;   0.1%
    ;;;;    malloc:ed memory                 ;;;   1445;   13.6%
    ;;;;;     codeinfo                        ;;     60
    ;;;;;     codeinfotrees                   ;;     24
    ;;;;;     exceptiontables                 ;;      5
    ;;;;;     metainfo/livemaptable           ;;    243
    ;;;;;     codeblock structs               ;;      0
    ;;;;;     constants                       ;;      0
    ;;;;;     livemap global tables           ;;    135
    ;;;;;     callprof cache                  ;;      0
    ;;;;;     paraminfo                       ;;     30    (#506)
    ;;;;;     strings                         ;;    426    (#8402)
    ;;;;;     strings(jstring)                ;;      0
    ;;;;;     typegraph                       ;;     27
    ;;;;;     interface implementor list      ;;      5
    ;;;;;     thread contexts                 ;;      8
    ;;;;;     jar/zip memory                  ;;    497
    ;;;;;     native handle memory            ;;      5
    ;;;;    unaccounted for memory           ;;;   4493;   42.3%;3.11
    ---------------------!!!Total mapped means mapped virtual memory, eg the largest size the JVM can be expected to grow to. This is typically on the same order of magnitude as the Java heap size (Xmx).
    Total in-use is the actual memory in use, this is the current "memory footprint" of your process.
    executable refers to JIT compiled code, I believe.
    Java-heap is the heap (duh).
    Stacks should be the thread stacks (where local variables are stored).
    classes is native memory used to store bytecode etc. If this grows, it may be because you are generating classes dynamically and they are not getting cleaned up because there are still live instances. Or maybe you're running with -Xnoclassgc.
    threads can grow if you start a lot of threads and don't let them die.
    Stuff under malloc:ed memory is mainly misc JVM metadata.
    unaccounted for memory is...everything else. The most common leak involving unaccounted-for is native byte buffers (DirectByteBuffer).
    -- Henrik

  • Sudden increase in memory space

    We have developed an application using the Hyperion 9.3.1.
    We are trying to load data and the data load itself is taking lot of time.
    Again, the memory space is getting increased drastically (almost to 100%).
    We see lot of page files being generated.
    What can be the reason for this sudden increase in memory space utilization.

    you should consider the folllowing factors for sudden increase in memory space
    1.Minimize the no of hierarchies otherwise it leads to increase in the size of aggregated data and slows down view selection
    2. remove fragmentation
    3.Compact the outline to remove the records of members that we have been deleted
    4.create transparent partition if neccessary which leads to enable write-back partition.By doing this we can reducethe size of the Database and reduces calculation time.
    5.use compression if values are grouped together in consecutive members on dimensions or hierarchies rather than spread throughout the outline with lots of
    #missing data between values.

  • Sudden increase in spam on my .me account

    Hi,
    As the title suggests, Ive had a sudden increase in spam on my .me account.
    Its gone from 1 a week to 2 a day, then 5 & now its upto 30 spam a day & there
    all from what looks like normal companies ( i know there not though)
    Ive even installed spam sieve which works fine but I still have to check it
    evey day.
    Any suggestions welcome.
    Kindest,
    Jeff

    Forward the spam to [email protected] so Apple can adjust their junk mail filters.

  • Essbase pag file size had a sudden increase

    We have a BSO cube who used to have 1.8g of exported data and about 2.5 gigs of pag files. However, they both suddenly increased to 5 gigs each (in just one day). I checked our logs and there were only a few data uploads/changes and the outline member additions that we had that day were all dynamic calcs members. We do export - clear - reload data everynight, but the exported files and page files are still on th 5 gigs.
    Does anyone know what could have caused this issue?
    Thank you.

    Same type of thing happened here. Overnight, 3 hour agg calc now taking upwards of 8 hours. They had implemented hierarchy additions, nothing drastic.
    By chance, were any of these Dynamic Calc members created in sparse dimensions? Do they roll up to stored members? It's bad ju-ju to have that situation.
    This was the biggest design offender I found, and am redesigning cube for them right now.
    I have taken the 8-10 hour agg (and 41 pag files) down to 36 minutes (and 15 pag files) simply by changing the dense and sparse settings of their cube. One of the dimensions they had dynamic members rolling up to stored members, I made this one dense and made all upper levels dynamic. (of course I had to change some of their other dense dimensions to sparse to accomodate this) But the end results on time and page files tells me that having dynamic calc members roll to stored members is really bad.
    Robert
    Edited by: RobertR3 on Apr 18, 2011 10:02 AM

  • Sudden increase of AEBS issues? Is it linked to the latest Airport updates?

    Is my impression correct that AEBS issues of a certain type (a) have suddendly increased and (b) seem to correlate with the latest Firmware Updates for AEBS?
    I posted already a problem (no LAN functionality, I have no access to printers etc). I was wondering what you think about.
    Further, does somebody know how I can revert the FW Update 5.7 and go back to 5.6?

    "Sudden increase of AEBS issues? Is it linked to the latest Airport updates?"
    We are not allowed to ask that question. Remember, it must, must, must be our fault - we have to be careful about that. Well, I guess that if someone who leans to the right politically, can still question the actions of the current president - then I guess it is OK for Mac lovers to question Apple - so I take back what I said at the top.
    Gino

  • Sudden increased frequency of dropped calls

    Anyone else experiencing a sudden increase in the number of dropped calls? I am in the Cleveland, Ohio area and over the last 3 weeks I have been dropping almost every call that lasts over a minute. Called AT&T, they said they are sending "engineers" to determine if there is a network problem. At the same time suggesting that the issue is with Apple. I have had my iphone for over a year and never had any trouble with dropped calls until recently.

    I have had the same problem, a couple of weeks ago and then a few days ago again. Every 30 seconds or almost a minute the call will drop off. I called apple care and they said it might be something with the network, so i called AT&T and they have no idea what was happening. They told me it might be an issue with my cel. After call apple again, they ask me to do a complete restore of the device. I did it and after 2 hours of the restore process it went back to normal again. So far is working like new. So try to do that and hopefully it will work.

  • How do you block or filter traffic to udp port 192?

    We are a company trying to stay an "apple office". We use an airport express for our networking and have recently been trying to become PCI "Payment Card Industry" Compliant for our credit card terminal that uses our wireless network. A company hired by the credit card processing company is running scans on our system and we keep failing because of UDP port 192. The specific message they are sending us is:
    "Synopsis : The remote host is a wireless access point. Description : The remote host is an Airport, Airport Extreme or Airport Express wireless access point. It is possible to gather information about the remote base station (such as its connection type or connection time) by sending packets to UDP port 192. An attacker connected to this network may also use this protocol to force the base station to disconnect from the network if it is using PPPoE, thus causing a denial of service for the other users. Solution: Filter incoming traffic to this port and make sure only authorized hosts can connect to the wireless network this base station listens on."
    I have tried changing all the settings using the Airport Utility including creating a closed network; un-checking allow setup over WAN, un-checking allow SNMP; using 128 bit encryption. I looked all over apple discussions and the internet and can't find a solution. The testing company told me that I need to find out how to filter traffic to udp port 192 or block the port altogether. Any help or guidance is greatly appreciated as we keep failing these scans.

    Hi All. I am having the exact same problem with my PCI payment card industry compliance - where I will now be charged a monthly fee because I cannot alleviate this port 192 problem with my airport extreme base station. They very much consider it a security risk and won't budge. They want me to filter/block incoming traffic on this 192 port, I don't know what to do to satisfy their requirements. I have searched and read all the main discussions but, none actually offer a solution - just folks like us looking for help. I also closed network by un-allowing all options in airport utility. I also de-selected automatic date and time stamp. I would very much appreciate any possible suggestions as prefer to remain a long time loyal mac user but cannot afford the monthly fee to be imposed. There's gotta be a solution. I thought mac was ahead of the game in this (and all) areas. Thanks.

  • SG500X-48 forwards traffic on all ports

    Hello to everybody!
    I have a problem with my SG500 which I do not understand: It is forwarding all traffic to all ports. So for
    me it looks like it behaves like a hub.
    Can anybody please help me?
    I have a SG500X-48 with firmware version 1.2.0.97 which is in "standalone" mode with this configuration:
    switch8d3012#sh run
    voice vlan oui-table add 0001e3 Siemens_AG_phone________
    voice vlan oui-table add 00036b Cisco_phone_____________
    voice vlan oui-table add 00096e Avaya___________________
    voice vlan oui-table add 000fe2 H3C_Aolynk______________
    voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
    voice vlan oui-table add 00d01e Pingtel_phone___________
    voice vlan oui-table add 00e075 Polycom/Veritel_phone___
    voice vlan oui-table add 00e0bb 3Com_phone______________
    no ip routing
    bonjour interface range vlan 1
    hostname switch8d3012
    management access-list XXX-ADM
    permit gigabitethernet1/48
    exit
    management access-class XXX-ADM
    passwords aging 0
    username cisco password encrypted *** privi
    lege 15
    no snmp-server server
    snmp-server location RZ1
    clock timezone " " 1
    interface vlan 1
     no ip address dhcp
    interface gigabitethernet1/48
     ip address 10.1.2.5 255.255.255.0
    switch8d3012#
    switch8d3012#

    Hi Wire Man,
    By the way those switches are now on 1.4 firmware and yours is still 1.2 so would suugest you to start with upgrade.
    Regards,
    Aleksandra

  • Sudden increase in 'stuck spindle' drive failures in Enterprise

    I'm trying to wrap my head around a sudden increase in drive failures (non-system or disk error \ drive no longer detected in BIOS).  We've had a total of 6 drives suddenly fail in the past 3 days, we typically have less than that fail in an ENTIRE year. I tested 4 of these drives and all 4 had the 5 beeps \ siren sounding error code (see stuck spindle audio in the link below). http://datacent.com/hard_drive_sounds.php I have a hard time believing this is a legitimate hardware issue but is it even possible for something to trigger a 'false-positive' condition?  To rule out a voltage spike or electrical damage these drives\PC's that exhibit these issues are spread throughout 3 different physical locations in different states. There have been numerous deep scanning security products pushed to these PC's in the past 2 months, more than I can even list.  Is it possible that somehow one of these products are corrupting the firmware on these drives to cause this? List of products I'm aware of that are on these systems : McAfee HIPsMcAfee AgentMcAfee Deep CommandMcAfee VirusScan Enterprise Newest products :Digital GuardianTanium ClientenCaseFireAMP Thanks!

    I'm no drive expert but 18 drives failing since August with the same problem and they all had your "deep scan security" stuff applied on them? It seems to me the problem is something with your software that is doing a major number on those drives like nothing else, have you tried just running them without all that "security agent"  junk? It makes sens that if you alone have experinced this kind of failure that if it was a problem with the drives themselves hundreds or thousands of people would be complaining of the same problem. I've run my WD drives hard for 18 years in many machines and I've never had even one fail in any way, but then I run them on Mac machines and none of them use any of those "deep scan" security agents, Norton or any of that other stuff.

Maybe you are looking for