On Wed, Mar 23, 2016 at 5:50 AM, Eliot Lear <lear(_at_)cisco(_dot_)com> wrote:
I'm curious- do you have sufficient data to perform an analysis to
determine the source of the service degradation?
Hi Eliot -
We're still looking, but, at the moment, no, it does not appear that way.
Our servers run Linux, our switches are Cisco, and log levels on
everything are quite high. Our logs are full of noise about all kinds
of other, unrelated, server activities; but, as often seems to be the
case, the logs are silent about things related to this issue. To my
great frustration.
Our engineers are always looking at additional ways of monitoring
things, but whether this was some kind of denial-of-service attack
against a physical host, or an OS failure of some kind, or maybe just
a bad network cable, we can't yet tell.
When things like this happen unexpectedly, we only want to take a
minimal amount of time to try and perform testing mid-event. Having
done a number of tests, checks, and localized reset procedures, we
were just about to do a reboot of the physical host when the network
just came back to normal, all by itself. So, this time, so far, I am
unable to determine a source, which, of course, is probably the most
frustrating outcome possible.
Glen
Glen Barney
IT Director
AMS (IETF Secretariat)