公司用户反应网络慢,路由器show logging出现 aggressive和calming down日志

wongchan

最近公司频繁有人反应某段时间网络慢，具体情况是在客户端可以PING通所有IP地址，延时和TTL正常，但用IE打开网页只能刷出来标题，网页内容需很长时间才能显示出来。我在边缘路由器上面show logging得到下面的信息：
公司的拓扑如下： ISP-------------2900--------------------3750------------------2960X stack *3 ---------------------LAP

边缘路由器show logging如下：

为了方便大家，我已经把不同信息用不同颜色表示出来了，我查了CISCO文档说出现蓝色的agreessive和calimin down

May 16 07:57:12.892: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:3549812387 1300 bytes is out-of-order; expected seq:3549643547. Reason: TCP reassembly queue overflow - session 10.24.246.51:53673 to 153.3.54.50:80
May 16 07:57:30.296: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1158872669 1300 bytes is out-of-order; expected seq:1158682409. Reason: TCP reassembly queue overflow - session 10.24.246.51:53753 to 218.107.196.250:80
May 16 08:00:27.528: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:1718007713 1300 bytes is out-of-order; expected seq:1717840133. Reason: TCP reassembly queue overflow - session 10.27.236.108:54152 to 218.107.196.250:80
May 16 08:07:00.210: %FW-4-TCP_OoO_SEG: Deleting session as expected TCP segment with seq:3172288114 has not arrived even after 25 seconds - session 10.27.236.106:51663 to 112.84.105.38:80
May 16 08:07:25.334: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:3362006631 1300 bytes is out-of-order; expected seq:3361900791. Reason: TCP reassembly queue overflow - session 10.27.236.108:54392 to 218.107.196.250:80
May 16 08:10:00.769: %FW-4-ALERT_OFF: calming down, count (45/900) current 1-min rate: 1344
May 16 08:11:32.693: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:2517388751 1300 bytes is out-of-order; expected seq:2517282911. Reason: TCP reassembly queue overflow - session 10.24.246.39:2941 to 60.211.208.236:80
May 16 08:11:39.473: %FW-4-ALERT_ON: getting aggressive, count (59/1000) current 1-min rate: 2001
May 16 08:12:19.013: %FW-4-ALERT_OFF: calming down, count (44/900) current 1-min rate: 1796
May 16 08:12:19.929: %FW-4-TCP_OoO_SEG: Dropping TCP Segment: seq:3040030189 1300 bytes is out-of-order; expected seq:3039899149. Reason: TCP reassembly queue overflow - session 10.24.246.39:3268 to 58.241.123.43:80
May 16 08:12:20.713: %FW-4-ALERT_ON: getting aggressive, count (59/1000) current 1-min rate: 2001
May 16 08:12:45.829: %FW-3-RESPONDER_WND_SCALE_INI_NO_SCALE: Dropping packet - Invalid Window Scale option for session 10.24.246.53:55530 to 58.221.72.180:80 [Initiator(flag 0,factor 0) Responder (flag 1, factor 9)