For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mohanish_169493's avatar
Mohanish_169493
Icon for Nimbostratus rankNimbostratus
Nov 27, 2015

GTM generating tremendous amount of traffic

Hi,

 

We have a GTM installed at our DR location. We are finding its interface taking tremendous amounts of traffic. To the extent that we clear the interface statistics just 3 days ago and till now it has taken Terrabytes of traffic. We got the case raised with F5 and they say that GTM has been hijacked like some virus or something and thats the cause of the issue. But I doubt is it really possible.

 

What all can be done to trace the cause of the issue.

 

Thanks and Regards Mohanish Mahajan

 

application delivery
BIG-IP
big-ip gtm
gtm

1 Reply

  • Jinshu's avatar
    Jinshu
    Icon for Cirrus rankCirrus
    Nov 27, 2015

    I think your GTM is under targetted attack. You need to monitor the connetions through it and continuesly capture traffic and analyse if it is genuine.

     

    You might expect huge amount of DNS querries towards GTM exposed to internet. You know, that are bad guys out there.

     

    Addition to above statement, we can't avoid the chances for false alarms due to code bugs. But before we go to F5, analyse the traffic and if you dont see real traffic on the interface, raise the concern with F5.

     

    -Jinshu