Regarding VS getting getting disconnected intermittently

Hi All,

We are seeing an issue while trying to access a VS. It is getting disconnected and when tried to access from application server we are getting exceptions while we bypass the F5 the application works fine. When we looked at ltm logs we see below logs for the VS. Can a VS deny legitimate traffic when syncookie mode is activated also as per F5 docs syncookie is by default de activated so any idea why we are seeing these logs? Also how can I fine which server is sending synflood request?

Please suggest. Thanks

Sep 14 13:23:01 Internal warning tmm[13131]: 01010038:4: Syncookie threshold 1993 exceeded, virtual = 1.1.1.1:0 Sep 14 13:23:02 Internal notice tmm[13131]: 01010240:5: Syncookie HW mode activated, server = 1.1.1.1:0, HSB modId = 1 Sep 14 13:23:04 Internal err tmm[13131]: 011f0007:3: http_process_state_prepend - Invalid action:0x109010 (Server side: vip=/Common/Test_VIP profile=http pool=/Common/Test_Pool server_ip=2.2.2.2) Sep 14 13:23:07 Internal err tmm[13131]: 011f0007:3: http_process_state_prepend - Invalid action:0x109010 (Server side: vip=/Common/Test_VIP profile=http pool=/Common/Test_Pool server_ip=2.2.2.2) Sep 14 13:23:25 Internal notice tmm[13131]: 01010241:5: Syncookie HW mode exited, server = 1.1.1.1:0, HSB modId = 1 from HSB