On Wed, Mar 23, 2016 at 5:50 AM, Eliot Lear <lear@xxxxxxxxx> wrote: > I'm curious- do you have sufficient data to perform an analysis to > determine the source of the service degradation? Hi Eliot - We're still looking, but, at the moment, no, it does not appear that way. Our servers run Linux, our switches are Cisco, and log levels on everything are quite high. Our logs are full of noise about all kinds of other, unrelated, server activities; but, as often seems to be the case, the logs are silent about things related to this issue. To my great frustration. Our engineers are always looking at additional ways of monitoring things, but whether this was some kind of denial-of-service attack against a physical host, or an OS failure of some kind, or maybe just a bad network cable, we can't yet tell. When things like this happen unexpectedly, we only want to take a minimal amount of time to try and perform testing mid-event. Having done a number of tests, checks, and localized reset procedures, we were just about to do a reboot of the physical host when the network just came back to normal, all by itself. So, this time, so far, I am unable to determine a source, which, of course, is probably the most frustrating outcome possible. Glen Glen Barney IT Director AMS (IETF Secretariat)