Back to All Scenarios
PASSEDqueue / connection_storm
Apache Kafka 3.7 Connection Storm — SYN Flood or Client Bug on SUSE Enterprise 15 SP5
Apache Kafka 3.7 is receiving thousands of new connections per second, overwhelming the accept queue. Legitimate connections being dropped.
Pattern
CONNECTION_REFUSED
Severity
CRITICAL
Confidence
68%
Remediation
Auto-Heal
Test Results
| Metric | Expected | Actual | Result |
|---|---|---|---|
| Pattern Recognition | CONNECTION_REFUSED | CONNECTION_REFUSED | |
| Severity Assessment | HIGH | CRITICAL | |
| Incident Correlation | N/A | None | |
| Cascade Escalation | N/A | No | |
| Remediation | — | Auto-Heal — Corax resolves autonomously |
Scenario Conditions
SUSE Enterprise 15 SP5. Apache Kafka 3.7 seeing 48468 new connections/sec (normal: 194). SYN backlog full. accept queue overflowing. net.core.somaxconn=3960.
Injected Error Messages (1)
Apache Kafka 3.7 on SUSE Enterprise 15 SP5 — connection refused for legitimate clients, 48468 new conns/sec (normal: 194), SYN backlog full, accept queue overflow, ECONNREFUSED
Neural Engine Root Cause Analysis
Connection refused — service is likely crashed or not listening on the expected port.
Remediation Plan
Restart the target service. If recurring, check for memory leaks or crash loops.
Improvements Applied
- Severity: CRITICAL (expected HIGH)
Tested: 2026-04-02Monitors: 1 | Incidents: 1Test ID: cmnhnqz5q08fxlig7kth8088d