4500 Sup7E Show QoS packet statistics

Hi,
I am trying to identify what QoS marked packets are hitting an interface on my 4500E
Previously with the likes of the 2900 / 3500 I could collect the below information which was a great insight into the packets going through the interface. Is there anything like this for the 4500E on a Sup7? I've not been able to find anything.so far.
xxx-C2960S-1#sh mls qos interface gi 1/0/7 statistics
GigabitEthernet1/0/7 (All statistics are in packets)
dscp: incoming
0 - 4 : 1302269597 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 5423748 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
dscp: outgoing
0 - 4 : 468742 0 0 0 2
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 88 0
20 - 24 : 0 0 0 0 0
25 - 29 : 0 1 0 0 0
30 - 34 : 0 0 0 0 0
35 - 39 : 0 0 0 0 0
40 - 44 : 712552 0 0 0 0
45 - 49 : 0 103878 0 0 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
60 - 64 : 0 0 0 0
cos: incoming
0 - 4 : 1308766828 0 0 0 0
5 - 7 : 0 0 0
cos: outgoing
0 - 4 : 798470028 5273 27854 4668 26113
5 - 7 : 1528536 3100 6624488
output queues enqueued:
queue: threshold1 threshold2 threshold3
queue 0: 1524413 0 0
queue 1: 804613095 1111802 6650008
queue 2: 89 0 0
queue 3: 0 0 0
output queues dropped:
queue: threshold1 threshold2 threshold3
queue 0: 706 0 0
queue 1: 4426 0 0
queue 2: 0 0 0
queue 3: 0 0 0
Policer: Inprofile: 0 OutofProfile: 0
xxxx-C2960S-1#

Hi,
I believe 4500E uses MQC style. if you have a policy map attached to the interface, you could use
sh policy-map interface <> <direction>
Hope this helps and Kindly rate all helpful posts.
Thanks,
M

Similar Messages

Catalyst 3550 & 3560/3750 command 'show mls qos interface statistics'

On the Catalyst 3550 the command 'show mls qos interface statistics' will show ingress packet (or byte) counts with DSCP values. If you have policers configured then it also shows a count of packets that have been marked down to another DSCP value due to policing or any that have been dropped (obviously 'mls qos monitor dscp x' needs configuring). The same command on the 3560/3750 only shows the ingress & egress DSCP values, there is no column that shows packets (or bytes) that have been policed or dropped. Is there any command to display the same information with the 3560/3750?
Neither platform show counters when the command 'show policy-map interface x/x' is used so this won't work.
Thanks
Andy

Hi, I believe there is a command on the 3560 'sh mls qos interface policers' may be what you are looking for.
Here is what the command says it outputs:
To display QoS information at the interface level. This information includes:
The configuration of the egress queues and the CoS3-to-egress-queue map
Which interfaces have configured policers
Ingress and egress statistics, which includes the number of bytes that have been dropped

Show ip nat statistics snmp oid

Hello,
I'm trying to monitor nat stats using snmp in the newer IOS versions. I had it working pre 12.4(22)T, but now it seems as if the oid has changed.
2811#show ip nat statistics
Total active translations: 29 (0 static, 29 dynamic; 29 extended)
Peak translations: 43, occurred 1d13h ago
Outside interfaces:
FastEthernet0/1
Inside interfaces:
Loopback0, Virtual-Template1
Hits: 82385 Misses: 0
CEF Translated packets: 66829, CEF Punted packets: 3876
Expired translations: 5233
Dynamic mappings:
-- Inside Source
[Id: 1] access-list nat pool inet refcount 30
pool inet: netmask 255.255.255.192
start 111.111.111.110 end 111.111.111.111
type generic, total addresses 1, allocated 1 (100%), misses 0
Total doors: 1
Appl doors: 1
Normal doors: 0
Queued Packets: 0
The number i'm looking for is the Total active translations. If you try it on a router that has 12.4(20)T it will work, seems as if anything newer does not.
Dan.

Hi Dan,
There is currently no MIB that has the "show ip nat statistics" output. An enhancement
request was opened against this, but so far there are no plans to add this to the MIBs.
Here is the enhancement request ID and release notes:
CSCdr25202 no mib variable for ip nat statistics for total active translations
"snmp mib variable for the command: show ip nat statistics for the total active
translations is not present at the moment.
This is an enhancement request. The work-around is to issue the command on the device itself (via CLI)."
Thanks,
Gaganjeet

Show IP SLA statistics output definitions

Does anyone have a link or documentation that defines ALL the fields in a show ip sla statistics command? Some are clearly obvious, but in Packet Loss Values for instance what are the measurement values for Source to Destination Loss Periods Number: or Source to Destination Loss Periods Number: ?
IPSLA operation id: 8502
Start Time Index: 13:56:14 UTC Tue Mar 25 2014
Type of operation: udp-jitter
Voice Scores:
MinOfICPIF: 0 MaxOfICPIF: 0 MinOfMOS: 0 MaxOfMOS: 0
RTT Values:
Number Of RTT: 48157 RTT Min/Avg/Max: 54/56/503 milliseconds
Latency one-way time:
Number of Latency one-way Samples: 0
Source to Destination Latency one way Min/Avg/Max: 0/0/0 milliseconds
Destination to Source Latency one way Min/Avg/Max: 0/0/0 milliseconds
Jitter Time:
Number of SD Jitter Samples: 43824
Number of DS Jitter Samples: 43824
Source to Destination Jitter Min/Avg/Max: 0/1/142 milliseconds
Destination to Source Jitter Min/Avg/Max: 0/1/81 milliseconds
Packet Loss Values:
Loss Source to Destination: 96
Source to Destination Loss Periods Number: 796
Source to Destination Loss Period Length Min/Max: 1/17
Source to Destination Inter Loss Period Length Min/Max: 1/2828
Loss Destination to Source: 5746
Destination to Source Loss Periods Number: 4319
Destination to Source Loss Period Length Min/Max: 1/17
Destination to Source Inter Loss Period Length Min/Max: 1/321
Out Of Sequence: 0 Tail Drop: 1
Packet Late Arrival: 0 Packet Skipped: 0
Number of successes: 18
Number of failures: 30

this is a great document as well, but doesn't dive down deep enough. The best example would be Packet Loss, where is says -
Packet Loss
Five types of packet loss or assimilated events can be measured with IP SLA:
Packet loss in the source to destination (packetLossSD)
Packet loss in the destination source (packetLossDS)
Tail Drop: we know it has been dropped, but we do not know in which direction. This is when the last packet(s) of the test streams were dropped, because in this case, we do not receive the sequence numbers. In older releases, this is called Packet MIA for missing in action. In the MIB, the notation PacketMIA is still in use.
Packet Late Arrival: the packet did arrive, but so late that the underlying application probably considered it as dropped, or at least not useful. Think about a VoIP application. If one packet arrives much later than expected, it is too late because the conversation keeps going. This packet is assimilated to a drop.
Packet Misordering: the packet arrived but not in the right order. This may or may not be considered as a packet drop. (packetOutOfOrder)
The cool thing is the power that lies behind those numbers. Differenct values can be calculated the way you want it. For instance the total amount of packet dropped is:
packetDropped = RTTMonPacketLossSD + RTTMonPacketLossDS + RTTMonPacketMIA
The total percentage of packets that have dropped during the instance is:
drop_rate_%age = 100 * packetDropped / (RTTMonNumOfRTT + packetDropped)
Many other values can be calculated, and that is entirely up to you to decide what parameters are important.
But does not address the fields that I am looking for -
Source to Destination Loss Period Length Min/Max: 1/17
Source to Destination Inter Loss Period Length Min/Max: 1/2828
Destination to Source Loss Periods Number: 4319
Destination to Source Loss Period Length Min/Max: 1/17
Destination to Source Inter Loss Period Length Min/Max: 1/321
appreciate all the input though Vinod!

N5k QoS Policy Statistics

Hi there,
I've got the follwoing problem, I would like to enable the QoS policy statistics on my Nexus 5010 running firmware 5.0(3)N2(2a).
This is where I am at:
nexus# show policy-map interface
Global Statistics status : enable
Ethernet1/1
     Service-policy (qos) input:      default-in-policy
          policy statistics status:     disabled
     Service-policy (queuing) input:     default-in-policy
          policy statistics status:          disabled
     Service-policy (queuing) output: adapted-out-policy
          policy statistics status:        disabled
As you can see I managed to enable the statistics globally via "(config)# qos statistics" but I don't have any clue how to enable the statistics for every service-policy on every interface. The config guides and examples already had them enabled but didn't mention the corresponding command(s).
I really hope someone can help me on this.
Thanks in advance!
Greetings!

Hi,
thanks for answering. (How) Do the policy statistics status and the "show queuing interface e x/y" information differ?
Is it planned to support the policy statictics status with a later NX-OS release?
And what I really don't understand, why is it possible to enable the policy statistics globally when I can't see anything afterwards? What is this command good for in the current release?
Looking forward to get more answers ;-)
Thx again!

Do spa50xs do qos packet tagging?

I was setting up some remote 7900 and spa50x phones using a vpn to connect back to the main site.. from what i saw on the remote site routers, i got the impression that the 7900 phones do qos tagging for dscp EF, but i saw no such marking on phone traffic from spa50x phones.. is my impression correct? the spa50x phones dont do qos packet tagging?

Hello Jeff,
The SPA500 phones do tagging for ToS/DiffServ:
Default QoS for SPCP Mode
If there is no network policy from CDP or LLDP-MED, the default network policy is
used. CoS is based on a pre-defined value of5. It is applicable only if the manual
VLAN is enabled and manual VLAN ID is not equal to 0, 1, or 4095. ToS is based on
precedence value from the StartMediaTransmission Message from the Unified
Communications 500 Series for the Cisco SPA525G/525G2. However, ToS is
based on the value specified for the specific extension in the web administration
interface for the Cisco SPA50X IP phone.
Source SPA500 admin guide p.148:
http://www.cisco.com/en/US/docs/voice_ip_comm/csbpipp/ip_phones/administration/guide/spa500_admin.pdf
HTH,
Alex
*Please rate helpful posts

3750 - Show mls qos interface statistics

Hi All,
Sorry if this is posted in the wrong place but can anyone shed any light on the meaning of the five columns given in the output for the following command on a 3750 ?
Show Mls Qos Interface <interface id> Statistics
Many Thanks
Shaun

I think that this is my first post, so I hope it will be useful ;-)
It's indeed very strange, I faced the same problem before, so I tried to check older switches, and I was able to find what these values are, for example, if You check the link :
Understanding QoS Policing and Marking on the Catalyst 3550
http://www.cisco.com/en/US/products/hw/switches/ps646/products_tech_note09186a00800feff5.shtml
You will find that these five fields mean:
incoming   no_change       classified      policed    dropped (in pkts)
This is a description of the fields in the example:
Incoming—shows how many packets arrive from each           direction
NO_change—shows how many packets were trusted (such           as QoS level not changed)
Classified—shows how many packets have been assigned           this internal DSCP after classification
Policed—shows how many packets were marked down by           policing; DSCP shown before markdown.
Dropped—shows how many packets were dropped by           policing

Show mls qos interface statistics equivalent command on Cat6500 SUP720-3B?

Hi all
Is there a command on the SUP720-3B that is similar to the show mls qos interface gi0/x statistics command on the access-layer series switches (3560 etc.)?
I'd like to see the incoming and outgoing DSCP/COS values in number of packets.
Thx :)

Hi,
You can use this command:
SUP720#show queueing interface xx
You should be able to see all that information there.
Hope this helps.

3560 mls qos interface statistics output

Hi
I've seen questions like this before, but never seen a satisfactory answer... I can't find any good documentation anywhere about this command.
If you run it, you get tabular output of some statistics - with no headers to the columns.
The closest thing I've found to it is in this document:
http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12113ea1/3550cr/cli2.htm#wp2418191
It shows the fields as: Incoming, No_Change, Classified, Policed and dropped.
I have a switch with a modified cos-dscp map so that cos 5 is marked to dscp 46. This shows normal traffic as in the row titled 0-4 in the 'incoming' column, and cos 5 traffic appears in the 40-44 row and the 'dropped' column... which can't be right.
Anyone know what the columns mean?
Aaron

I figured this out after looking at it sideways and upside down. Here is part of the output from the command I ran on one of our 3750 switches (copy it and paste it into notepad so the rows stretch back out): 'sh mls qos int f0/35 statistics'
dscp: outgoing
0 - 4 : 63683 0 0 0 0
5 - 9 : 0 0 0 0 0
10 - 14 : 0 0 0 0 0
15 - 19 : 0 0 0 0 0
20 - 24 : 0 0 0 0 81
25 - 29 : 0 0 0 0 0
30 - 34 : 0 0 0 0 13366
35 - 39 : 0 0 0 0 0
40 - 44 : 0 0 0 0 0
45 - 49 : 0 10749 0 13653 0
50 - 54 : 0 0 0 0 0
55 - 59 : 0 0 0 0 0
On the left side X - X are the DSCP values for the five columns of that row. For example, 20 - 24 row has the number 81 in the fith column. That shows that 81 packets with the DSCP value of 24 went out of that port. In row 45 - 49, 10749 packets with DSCP of 46 and 13653 packets with DSCP value of 48 went out that port.
I finally was able to use this table to show that a video conferencing unit was truely generating voice packets with DSCP 46 (EF), video packets with DSCP 34, and call control packets with DSCP 24 (this is COS 3 that is mapped to DSCP 24 in the cos-dscp map entry.)
So to clarify, the five columns have nothing to do with Incoming, No_Change, Classified, Policed and dropped, they represent the number of packets that have the DSCP values as referred to by the far left table.
Hope this helps.

QoS Packets not matching on 6500 with SUP720-10GE and SU2T

Hi,
I do not see packets matching in policy.
output below:
Switch#sh policy-map interface vlan 2232
Vlan2232
Service-policy input: HARDPHONE-VVLAN
Class-map: VOICETRAFFIC (match-all)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: access-group name VOICETRAFFIC
Class-map: VOICESIGNALING (match-all)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: access-group name VOICESIGNALING
Class-map: class-default (match-any)
0 packets, 0 bytes
5 minute offered rate 0000 bps, drop rate 0000 bps
Match: any
0 packets, 0 bytes
5 minute rate 0 bps
I also not find packets matching ACL:
switch#sh access-lists
Extended IP access list VIDEOTRAFFIC
10 permit udp any any range 16384 32767
Extended IP access list VOICESIGNALING
10 permit tcp any 10.128.0.0 0.3.255.255 range 2000 2002
20 permit tcp any 10.128.0.0 0.3.255.255 eq 5060
30 permit udp any 10.128.0.0 0.3.255.255 eq 5060
40 permit tcp any 172.20.10.0 0.0.1.255 range 2000 2002
50 permit tcp any 172.20.10.0 0.0.1.255 eq 5060
60 permit udp any 172.20.10.0 0.0.1.255 eq 5060
Extended IP access list VOICETRAFFIC
10 permit udp 10.128.0.0 0.63.255.255 10.128.0.0 0.63.255.255 range 16384 32767
I checked policies, they looks applied correctly.
On SUP-720-10GE, I modified ACL to 'permit udp any any' but not found any matching packets. There are plenty of IP phones connected directly to this switch belongs to voice VLAN. I applied VLAN based QoS under voice VLAN and other VLANs too.
I observed different thing on SUP 2T. I saw packets matching ACL statement 'permit udp any any' but when I took off this line, ACL was not showing packets matching.
OUTPUT of IP phones connected to switch:
switch#sh cdp neighbors | in SEP
SEP0008308A5D7B Gig 13/38 143 H P M IP Phone Port 1
SEP0008308A5DE0 Gig 10/1 121 H P M IP Phone Port 1
SEP0023049C6348 Gig 3/42 152 H P M IP Phone Port 1
SEP0021A02D64D4 Gig 9/28 120 H P M IP Phone Port 1
SEP1C6A7AE0588E Gig 3/9 127 H P M IP Phone Port 1
SEP00229059969E Gig 12/48 166 H P M IP Phone Port 1
SEP0008308AF26F Gig 2/7 161 H P M IP Phone Port 1
SEP00235EB7BE0E Gig 4/2 154 H P M IP Phone Port 1
SEP00229059BE5A Gig 6/37 158 H P M IP Phone Port 1
SEP1CAA07115CF3 Gig 12/29 148 H P M IP Phone Port 1
SEP00235EB7884F Gig 9/3 156 H P M IP Phone Port 1
SEP0008308B03FB Gig 2/30 178 H P M IP Phone Port 1
SEP006440B42CD3 Gig 3/45 132 H P M IP Phone Port 1
SEP0022905991C9 Gig 11/4 145 H P M IP Phone Port 1
SEP0008308A5E6C Gig 6/36 124 H P M IP Phone Port 1
SEP006440B427CA Gig 13/31 170 H P M IP Phone Port 1
SEP006440B425FF Gig 3/19 168 H P M IP Phone Port 1
SEP0008308A7AD7 Gig 2/3 159 H P M IP Phone Port 1
SEP0008308A3EB2 Gig 10/4 132 H P M IP Phone Port 1
SEP002414B45A0E Gig 10/28 170 H P M IP Phone Port 1
SEP04C5A4B19C8B Gig 2/15 162 H P M IP Phone Port 1
SEP006440B43DE6 Gig 9/48 162 H P M IP Phone Port 1
SEP006440B42B0D Gig 9/23 179 H P M IP Phone Port 1
Could anyone please help, how to make sure that packets are hitting correct ACL and policy on 6500 with SUP720-10GE and SUP2T.
Thanks,
Pruthvi

Please note that 6500 is used as L2 switch only and SVI are used for applying policies only.
Configuration below:
class-map match-all VOICESIGNALING
match access-group name VOICESIGNALING
class-map match-all VOICETRAFFIC
match access-group name VOICETRAFFIC
class-map match-all VIDEOTRAFFIC
match access-group name VIDEOTRAFFIC
policy-map HARDPHONE-VVLAN
class VOICETRAFFIC
police flow mask src-only 128000 8000 conform-action set-dscp-transmit ef exceed-action drop
class VOICESIGNALING
police flow mask src-only 32000 8000 conform-action set-dscp-transmit cs3 exceed-action policed-dscp-transmit
class class-default
police flow mask src-only 32000 8000 conform-action set-dscp-transmit default exceed-action policed-dscp-transmit
policy-map STUDENT-DVLAN
class class-default
police flow mask src-only 25000000 1562500 conform-action set-dscp-transmit default exceed-action policed-dscp-transmit
policy-map STAFF-DVLAN
class VOICESIGNALING
police flow mask src-only 32000 8000 conform-action set-dscp-transmit cs3 exceed-action policed-dscp-transmit
class VOICETRAFFIC
police flow mask src-only 128000 8000 conform-action set-dscp-transmit ef exceed-action drop
class VIDEOTRAFFIC
police flow mask src-only 2000000 150000 conform-action set-dscp-transmit ef exceed-action drop
class class-default
police flow mask src-only 50000000 1000000 conform-action set-dscp-transmit ef exceed-action drop
ip access-list extended VOICESIGNALING
remark Skinny and SIP protocols From Phones to Voice Core Infrastructure
permit tcp any 10.128.0.0 0.3.255.255 range 2000 2002
permit tcp any 10.128.0.0 0.3.255.255 eq 5060
permit udp any 10.128.0.0 0.3.255.255 eq 5060
permit tcp any 172.20.10.0 0.0.1.255 range 2000 2002
permit tcp any 172.20.10.0 0.0.1.255 eq 5060
permit udp any 172.20.10.0 0.0.1.255 eq 5060
ip access-list extended VOICETRAFFIC
permit udp any any dscp ef
permit udp 10.128.0.0 0.63.255.255 10.128.0.0 0.63.255.255
permit udp any any range 16384 32767 dscp ef
ip access-list extended VOICESIGNALING
remark Skinny and SIP protocols From Phones to Voice Core Infrastructure
permit tcp any 10.128.0.0 0.3.255.255 range 2000 2002
permit tcp any 10.128.0.0 0.3.255.255 eq 5060
permit udp any 10.128.0.0 0.3.255.255 eq 5060
permit tcp any 172.20.10.0 0.0.1.255 range 2000 2002
permit tcp any 172.20.10.0 0.0.1.255 eq 5060
permit udp any 172.20.10.0 0.0.1.255 eq 5060
ip access-list extended VIDEOTRAFFIC
permit udp any any range 16384 32767 dscp ef
interface Vlan104
description PolicyOnlyInt
no ip address
service-policy input STAFF-DVLAN
interface Vlan105
description PolicyOnlyInt
no ip address
service-policy input STAFF-DVLAN
interface Vlan573
description PolicyOnlyInt
no ip address
service-policy input PUBLIC-DVLAN
interface Vlan604
description PolicyOnlyInt
no ip address
service-policy input PUBLIC-DVLAN
interface Vlan654
description PolicyOnlyInt
no ip address
service-policy input STUDENT-DVLAN
interface Vlan674
description PolicyOnlyInt
no ip address
service-policy input PUBLIC-DVLAN
interface Vlan807
ip address 172.18.128.5 255.255.255.0
interface Vlan860
description PolicyOnlyInt
no ip address
service-policy input PUBLIC-DVLAN
interface Vlan2016
description PolicyOnlyInt
no ip address
service-policy input HARDPHONE-VVLAN
interface Vlan3124
description PolicyOnlyInt
no ip address
shutdown
service-policy input HARDPHONE-VVLAN
switch#sh access-lists
Extended IP access list VOICESIGNALING
10 permit tcp any 10.128.0.0 0.3.255.255 range 2000 2002
20 permit tcp any 10.128.0.0 0.3.255.255 eq 5060
30 permit udp any 10.128.0.0 0.3.255.255 eq 5060
40 permit tcp any 172.20.10.0 0.0.1.255 range 2000 2002
50 permit tcp any 172.20.10.0 0.0.1.255 eq 5060
60 permit udp any 172.20.10.0 0.0.1.255 eq 5060
Extended IP access list VOICETRAFFIC
10 permit udp any any dscp ef <----- not showing any match
11 permit udp 10.128.0.0 0.63.255.255 10.128.0.0 0.63.255.255 <----not shwoing any match
12 permit udp any any range 16384 32767 dscp ef<----not shwoing any match
If I user "permit udp any any ", acl is showing match.
switch#sh access-lists
Extended IP access list VOICETRAFFIC
10 permit udp any any dscp ef
11 permit udp 10.128.0.0 0.63.255.255 10.128.0.0 0.63.255.255
12 permit udp any any range 16384 32767 dscp ef
13 permit udp any any (527055 matches)

Cat. 3750 QoS Queue statistics

Hi all:
Does anyone know a way to see input and output queue statistics like occupation, number of frames discarded due to threshold reached etc ... on a Cat 3750
May be there exists a MIB...
Best regs.

the command "show mls qos interface" should help.
check out the following link for the command reference :
http://www.cisco.com/en/US/products/hw/switches/ps5023/products_command_reference_chapter09186a008017f8ed.html#2418190

Why recently created wiki articles are not showing in profile Statistics page?

Recently I have created a wiki.. altogether it should be 3 but under
profile Statistics page it shows as two.. it almost two weeks now..
Below are the wiki's
(si-LK)http://social.technet.microsoft.com/wiki/contents/articles/19489.registry-import-not-all-data-was-successfully-written-to-the-registry-some-keys-are-open-by-the-system-or-other-process-or-you-have-insufficient-privileges-to-perform-this-operation-si-lk.aspx
http://social.technet.microsoft.com/wiki/contents/articles/19805.kb2817630-kb2817347-outlook-2013-si-lk.aspx
(en-US)http://social.technet.microsoft.com/wiki/contents/articles/20586.how-to-change-ipv4-dns-server-address-to-public-dns-in-windows.aspx

I think that if the activity has not shown up by now, that it will never show up, and your statistics will not be updated. I have had this happen to myself. When the Wiki is having performance problems, articles can be created or updated, but meta data
is not updated properly. Sometimes this can be fixed, sometimes not. This issue is of major concern, but there is no fix yet.
Richard Mueller - MVP Directory Services

3750 not showing proper traffic statistics

A colleague of mine has a 3750 switch which he is doing routing on.
He has noticed that traffic statistics are not showing using 'show interface vlan x' or using MRTG graphing.
Any way to get these statistics back ? I've never seen the behaviour myself so I thought I'd ask for him.
Thanks,
= K

Sounds like you are getting some data, jut not performance data(?) so I would not suspect the agent.
Check your binaries on the agent - you should have 2 or 3 with root permissions and the sticky bit turned on.
Make sure you have the new port numbers being used since the agent should now be connecting via the secure port (this looks to already be the case from your post)
Hit the url from the web browser:
https://<agent-host>:1830/emd/main
Any firewalls between you and the oms?
Does the agent know the oms dns/ip?

4500-Sup7; SSH and admin VRF only

Hello all.
I may be blind but I've not seen this topic in the documentation; I refer to "Catalyst 4500 Series Switch Software Configuration Guide, Release IOS XE 3.3.0SG and IOS 15.1(1)SG"
The Sup7 has a dedicated FastEthernet port which is automatically put into a vrf named "mgmtvrf".
What I want to do is to permit inbound ssh only on this interface (vrf) and not on any other IP owned by the switch...
How can I do that ? By default any feature enabled on the switch is bound to all IP addresses defined in the switch belonging to all vrf...
Technically I want the ssh process to listen only in the admin vrf.

Finally; I couldn't find the way to implement Management Plane Protection in the parser; the following commands doesn't do the job :
control-plane hostmanagement-interface Fa0/1 allow ssh telnet
the "control plane host" doesn't work and there is no "management-interface" subcommand into the "control plane" section.
Has anybody succeeded to implement MPP for the admin port of a SUP7-E in a 4500 ?
I'm running the last version : IOS 15.1 / IOS XE 3.3.0 SG
It seems that it's not documented in the configuration guide.
And the feature navigator seems to be clear : only supported in IOS XR and standard IOS for routers but not switches ??? Even with IOS XE / 15.1 train ?

Show flow export statistics query

    We have recently upgraded all our WAN router to Cisco 3945, they all have the same FLOW config as below
but when I do a sh flow export statistics
on some routers I get:
Flow Exporter Export-FNF-Plixer:
Packet send statistics (last cleared 1d08h ago):
    Successfully sent:         0                     (0 bytes)
   Enqueued to process level: 2534452               (3484784053 bytes)
on others I get:
Flow Exporter Export-FNF-Plixer:
Packet send statistics (last cleared 14w2d ago):
Successfully sent:         16545298              (22596920223 bytes)
    Enqueued to process level: 165                   (223914 bytes)
as I said all the configurations are basically the same
Does anybody know what causes this difference?
Flow config:
flow record Record-FNF
description Flexible NetFlow with NBAR Flow Record
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match flow direction
match application name
collect routing source as
collect routing destination as
collect routing next-hop address ipv4
collect ipv4 dscp
collect ipv4 id
collect ipv4 source prefix
collect ipv4 source mask
collect ipv4 destination mask
collect transport tcp flags
collect interface output
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last
flow exporter Export-FNF-Plixer
description FNF v9
destination 172.16.6.219
source Loopback0
output-features
transport udp 2055
option interface-table
option application-table
flow monitor Monitor-FNF
description FNF Traffic Analysis
exporter Export-FNF-Plixer
cache timeout active 60
record Record-FNF

Hello,
have you checked the DBA_HIST* objects to see what / how was imported?
If the awr export dosn't get the contents of the rolling buffer, then you won't see any session statistics that are only there. If you want to get the contents of the rolling buffer you have to dump the contents of it with :
oradebug setmypid
oradebug dump ashdump 10
and load it into your "test" database.
But before doing this I suggest you read the related metalink documentation if any!!!
Regards,
Franky

4500 Sup7E Show QoS packet statistics

Similar Messages

Maybe you are looking for