EEM to detect ping loss

I am looking to use EEM to generate a syslog message if a certain number of pings or % of pings fail
For example
ping ip dest 10.1.1.2 source 10.0.0.1 size 1500 rep 500 data 0x4040
if less than 450 or 90 % of these pings are successful then generate a syslog message
I do not think IPSLA will work because you can not use a data pattern and you have to use udp-jitter probe have a trigger
I want to use this to detect a degraded circuit.
Thanks

This script should do what you want. You will need to configure some environment variables before you get started.
event manager environment ping_sweep_repeat 500event manager environment ping_sweep_pattern 0x4040event manager environment ping_sweep_src 10.0.0.1event manager environment ping_sweep_dest 10.1.1.2event manager environment ping_sweep_size 1500event manager environment ping_sweep_perc 90
The script is written using the none event detector, so you will need to run it manually:
event manager run no_ping_test.tcl

Similar Messages

Trying to detect connection loss

I have built a little telnet program which is specialized for a specific telnet supporting server... Everything works just fine except for detecting connection loss...
I am connected to the server using java.net.Socket, data is sent using java.io.PrintStream and data is received using java.io.InputStream...
I have tried having a thread running and looking if the Socket was still connected, but even after closing the server, the Socket keeps returning true when I call Socket.isConnected()... How could I detect the moment when a connection is broken, would it be because the user has a modem connection and gets disconnected or because the server shuts down or any other such reason?

You can detect a dead socket when a write to it fails.
So, you could periodically send "keep alive" messages
to know approximately when it drops.Okay, I had noticed that the PrintStream would set it's error state to true when I try to send a message and the socket is dead, but I hoped I didn't have to wait until that moment... Thanks though! You confirmed me I'll have to do it that way :P

Service has been great for a week - ping loss afte...

Hi,
I've recently switched from virgin media and I must say the service has been amazing so far. The ping times are far more reliable and there is absolutely no jitter on the line what so ever.
A few days ago the internet disconnected for an hour or 2 at around 1am. It wouldn't come back on after rebooting the router (the one that connects to the phone socket) a couple of times so I just called it a night and it was working again in the morning. I'm not sure if this has anything to do with the problems I've been having but lately I've been noticing packet loss on the line in the evenings / early hours of the morning, as evidenced by this TBB graph:
http://www.thinkbroadband.com/ping/share/0f41cf302992a582e75f9e9f9b410a75-13-04-2013.html
The spikes are very intermittent and last only for a second or 2 before returning to normal but it's wreaking havoc with trying to game on it. A normal ping-test shows a good connection:
http://www.pingtest.net/result/79789653.png
There's also times where the average ping will spike up to 100-200ms for a couple of minutes and then return to normal.
Please help! I've been very happy with my connection so far. I am not using the router supplied from BT but instead am using an Asus N66U which is quite new. The router is known to work perfectly and I've been rebooting both boxes to try and resolve connection issues.
Edit: Just gave everything another power cycle. The connection went from this:
http://www.thinkbroadband.com/ping/share/0f41cf302992a582e75f9e9f9b410a75-13-04-2013.html
To this:
http://www.thinkbroadband.com/ping/share/576c8e4182cc4fe33e35a7bef969207c-13-04-2013.html
The only difference I can see is ping times are a little higher, but the connection for the hour or so it's been on looks absolutely solid instantly after a restart. What could be causing this issue?

Hi David,
Thanks for the reply. I couldn't find a reply e-mail address or anywhere to login to reply, so I sent the email to forum.moderation.team email. Just incase that's the wrong thing to do, I'll post what I said below:
The speeds I'm getting are fine - many sites are reporting 38mbit down and ~8mbit up which is what I expect from the connection.
For the past few days the connection has been good, as you can see by the TBB graph here:
http://www.thinkbroadband.com/ping/share/efadfec0b36f986da8f5aaf592db0b43-21-04-2013.html
There were tiny blips of packet loss at 2pm and 6pm but nothing major.
The problem is that there appears to be random blips of latency throughout the day, even at early hours of the morning as you can see here:
http://www.thinkbroadband.com/ping/share/4a10c0e969e6a5f3f72644516cb7526b-16-04-2013.html
On this graph the spikes started just before 12am.
The spikes themselves aren't major and only last for a few seconds, but it's very annoying if I or anyone in the house is using the connection for gaming at the time.
The has been a couple of nights (namely about a week after installation) that the connection has been absolutely horrendous - see the graph in the original enquiry (http://www.thinkbroadband.com/ping/share/0a49bc6365c0c2cac05c3137b03e118d-14-04-2013.html) that when I reset the modem going into the telephone box the connection will return to perfect again instantly.
There's nothing more I can tell you really, except that the connection is generally perfect apart from these little blips of packet loss.
Thanks,
Stephen
edit:
Here's a graph from yesterday, you can still see tiny blips of packet loss:
http://www.thinkbroadband.com/ping/share/7795608ce27a576e2a182049bbcf5ff8-20-04-2013.html

Detecting Connection Loss

Hi All,
I'm working with two computers that are each running a LV program to achieve
TCP communication. Please see attached LLB. Both PCs are connected via a
switch that is running a DHCP server.
My plan was to watch the error cluster from the TCP Read function to ensure
that the connection is still valid.
So, to test this, I run the two VIs on the two PCs and I physically
disconnect the ethernet cable from one of the PCs.
What I am seeing is that only the PC that is disconnected from the network
registers and error (error 66). The other PC only registers a timeout
error.
My question is, how can I tell from the second PC that the connection has
been lost. I know that I could use a timer, but I was hoping to avoid that.
Thanks for you
help
Denis

I do not think there is another way do this than using a timeout. The deal is that the recieving computer monitors a port for data. This is the only way it gets information from the remote computer. It is not like there are status lines to verify connection. You can either wait a reasonable amount of time for the data--if it is not there then timeout, assuming a broken connection. Or you can use TCP to have the previously listen only computer now sending data to the previouly sending only computer. It is indirect, but now there is a two way dependency between the computers and both can detect a broken connection.

What is the best way to detect loss of OPC Server connection when using DSC Tags?

I'm using the DSC Module on a new project and I'm pretty impressed so far. The HMI Wizard has saved me quite a bit of time.
My application is configured where the DSC Tags are connected to remote OPC Server Tags.
The issue I'm having is that I cannot detect a loss of the OPC Server when the application is running. Read's of the front panel controls/indicators still return values and the little "connection" icon next them is still green. Even if the connection icon turned red it wouldn't help since the Front Panel is not visible when the main application is running. It is a Sub-VI that's in charge of OPC Data Interfacing. The rest of the application uses the data from the OPC Sub-
VI.
I cannot effect a change on the OPC Servers, so I need a method of detection when the Server is lost on my end.
Any ideas on the best way to do this?
Thanks,
Jim

Hi Jim,
Ideally, error-reporting and -handling should be the way to handle this. However, if errors are not reported/handled as is sometimes the case with OPC, a quick-n-dirty way to do this would be to check for a "heartbeat" signal from your OPC Server. This could be a boolean tag which toggles On and Off (or a counter ticking). You then read this Tag in DSC in a slow loop using the Read Tag VI (not the front-panel control). And keep track of the Changed? output from this Read Tag VI.
As long as the 'Changed?' output is true, you are receieving data from the OPC Server, and hence it's alive. You may add some deadband logic to wait for a specific period of time before declaring the Server's really dead!
Hope this helps,
K
halid

Detect loss of wireless connection

GOAL : physicians in a hospital getting access to web-based JSP content through a Pocket PC browser(IE) and wireless connectivity. We already have the "normal-size" JSP pages for desktop computers and we'd like just to provide a reduced version of theses pages to browse on a PDA.
PROBLEM : Even with a well designed WLAN with good access point placement, you may experience connection loss. And it's a problem when browsing JSP pages : imagine submitting a form when you're suddenly offline : you'll get a 404 or something similar -> not serious.
QUESTION : If I port our application in the Personal Profile Xlet framework, Would it be possible to detect connection loss in an Xlet or somewhat... then it could set the rest of the app to work in a kind of degraded mode. How can we manage that ?

You could have a thread which is dedicated to managing the apparent connectivity. It connects to a well known location, if it cannot connect then you are assumed to be disconnected and the application should downgrade. The routines that handle networking should be able to fail gracefully and not generate exceptions which would terminate the program. As an example you can update your stocks whenever theres a connection but if there isn't one you can always show the value and the last time it was successfully retrieved.

N5K EEM script to shutdown interface if CDP neighbor drops

Hi
Total n00b on EEM here. Background - we have an inline transparent L2 firewall sitting between our Nexus core switch and our UCS. If the physical interfaces on one of the firewalls go down, our UCS virtual hosts can detect that and will automatically fail over to their other NIC and network connectivity is restored. However if theres a software or process problem on the firewall we can lose connectivity to half of the UCS because all the links are physically staying up but the server traffic is getting blackholed.
If the L2 firewall stops passing traffic we will lose the CDP neighbor entry for the UCS on the N5K. If that happens I want to shut down the port channel interface that connects the Nexus to the firewall, triggering the virtual hosts to fail over to their second NIC.
Basically
1)     Check for presence of CDP neighbor on e1/17
2)     If there is an entry there do nothing
3)     If there is no entry there then issue the following cli commands "conf t, interface port-channel 17, shutdown"
I would like the switch to execute the script once per minute all day every day.
NEXUS-SW1# sh cdp ne int e1/17
Capability Codes: R - Router, T - Trans-Bridge, B - Source-Route-Bridge
                  S - Switch, H - Host, I - IGMP, r - Repeater,
                  V - VoIP-Phone, D - Remotely-Managed-Device,
                  s - Supports-STP-Dispute
Device-ID             Local Intrfce Hldtme Capability Platform      Port ID
UCS-FABRIC-A(SSI171402MC)
                    Eth1/17        173    S I s     UCS-FI-6248UP Eth1/17
NEXUS-SW1#
Could anyone give me a hand on a script to do this please? Looks like there is EEM neighbor discovery stuff in IOS but not NX-OS on the 5K, so I think this script will have to use the CLI to detect failure. Thanks

I'm running the latest 6.0(2)N2(1) NX-OS on the 5548 with the Layer 3 daughtercard and LAN Enterprise Services license. There is some EEM stuff in the CLI but it appears basic compared to what is in IOS.
NEXUS-SW1(config-applet)# event ?
cli             Create a cli event specification
counter         Create a counter event
fanabsent       Create fanabsent event specification
fanbad          Create fanbad event specification
oir             Create Online-Insertion-Removal event specification
policy-default Use the event in the system policy being overridden
snmp            Create a 'snmp' event specification.
storm-control   Create a storm control event specification
syslog          Create a syslog event specification
sysmgr          System manager related events
temperature     Create temperature event specification
track           Create a 'track' event specification
NEXUXS-SW1(config-applet)# event cli ?
match Enter cli regex to be used for matching
tag    Event tag identifier
I was hoping I could use the "event cli match" or something like that to detect the loss of the cdp neighbor. And then shut down the interface if it is not there.

Tons of packet loss and Verizon techs say its fine

As you can see from the below test ran from dslreports.com, I'm having a lot of packet loss issues. This has been going on for nearly two weeks now and tech support has been more of an annoyance than a help upto this point. I've talked to tech support at least 5 times only to be told my line test comes back fine, its normal, reset your modem, delete your cookies, is your pc old, etc. I've even had them vpn itno my system and run pings and they see the packet loss and all the issues I'm having first hand and still say it isn't a big deal. On more than one occasion I've had my modem data light just flashing and had to reset the modem and they suggest I just buy a new modem. Seriously, is this how bad tech support has gotten?
I've shown them test after test after test and the all come back pretty much the same... The thing is its been perfect for years and suddenly this and its like tech support wants to sweep it under the rug or something. I've had it suggested to me the packet loss and high pings when I'm not getting the packet loss is due to my pool being over populated. Like I'm ow getting ping averages of 250-300 instead of 30-40s, again when its not all timing out.
I've posted over on the dslreports forums asking about this as well as in the Verizon specific forums to the techs all with 0 replies from anything and was told to come here and see if anyone would be able to help.
I really not bother with the hassle of switching isps as ive been a loyal Verizon dsl customer for well over 5 years but at this point just knowing how bad tech support is alone might make me want to.
Can anyone offer any insight on what else to do or help on this possibly?
Thanks.
Test Loss Min
Latency Avg
Latency Max
Latency Pass
Fail Simple ping loss check
10secs of 40byte packets 2 per second 5% loss 137ms 141ms 148ms
warn low bandwidth stream
10secs of 56k/bit ping stream 512byte packets 6% loss 142ms 147ms 154ms
warn medium bandwidth stream
10secs of 128k/bit ping stream 512byte packets 2% loss 140ms 147ms 173ms
pass your first hop ping
stream of 40byte pings to 130.81.44.101 4% loss 118ms You are 19ms
to your first hop
pass Ping plot:
Ping plot:
From East Coast - USA to YOU Hop Host LOSS Rcv Sent Best Avg Worst 0 ae-2.bb-b.slr.lxa.us.oneandone.net 0% 60 60 0.46 2.29 59.98 1 te-2-1.bb-b.ms.mkc.us.oneandone.net 0% 60 60 0.92 1.89 36.10 2 64.209.105.233 0% 60 60 13.97 41.38 948.69 3 0.xe-8-2-0.BR3.CHI13.ALTER.NET 0% 60 60 26.13 30.80 80.28 4 0.ae3.CHI01-BB-RTR1.verizon-gni.NET 0% 60 60 26.49 27.84 88.62 5 P15-3.RONKVA-LCR-01.verizon-gni.net 0% 60 60 54.25 55.01 56.32 6 P0-0.RONKVA-RONKVALK-ERXG02.verizon-gni.net 0% 60 60 116.80 121.05 130.35 7 pool-71-171-24-94.nwrknj.east.verizon.net 14% 52 60 142.49 147.61 169.10 (fail) From West Coast - USA to YOU Hop Host LOSS Rcv Sent Best Avg Worst 0 unknown.Level3.net 2% 59 60 0.64 16.67 150.86 1 ae-4-99.edge1.SanJose3.Level3.net 4% 58 60 1.15 5.12 59.35 2 4.68.63.146 0% 60 60 1.25 3.31 55.27 3 0.ae3.XL3.SJC7.ALTER.NET 0% 60 60 1.25 1.68 9.80 4 0.ge-6-3-0.XT1.DCA6.ALTER.NET 0% 60 60 75.58 77.85 108.89 5 0.so-4-0-0.RES-BB-RTR1.verizon-gni.net 0% 60 60 75.52 80.78 136.25 6 P15-3.RONKVA-LCR-01.verizon-gni.net 0% 60 60 90.25 91.97 94.08 7 P0-0.RONKVA-RONKVALK-ERXG02.verizon-gni.net 2% 59 60 154.03 159.68 164.42 8 pool-71-171-24-94.nwrknj.east.verizon.net 4% 58 60 175.74 183.27 187.00 (fail)

As you can see from the below test ran from dslreports.com, I'm having a lot of packet loss issues. This has been going on for nearly two weeks now and tech support has been more of an annoyance than a help upto this point. I've talked to tech support at least 5 times only to be told my line test comes back fine, its normal, reset your modem, delete your cookies, is your pc old, etc. I've even had them vpn itno my system and run pings and they see the packet loss and all the issues I'm having first hand and still say it isn't a big deal. On more than one occasion I've had my modem data light just flashing and had to reset the modem and they suggest I just buy a new modem. Seriously, is this how bad tech support has gotten?
I've shown them test after test after test and the all come back pretty much the same... The thing is its been perfect for years and suddenly this and its like tech support wants to sweep it under the rug or something. I've had it suggested to me the packet loss and high pings when I'm not getting the packet loss is due to my pool being over populated. Like I'm ow getting ping averages of 250-300 instead of 30-40s, again when its not all timing out.
I've posted over on the dslreports forums asking about this as well as in the Verizon specific forums to the techs all with 0 replies from anything and was told to come here and see if anyone would be able to help.
I really not bother with the hassle of switching isps as ive been a loyal Verizon dsl customer for well over 5 years but at this point just knowing how bad tech support is alone might make me want to.
Can anyone offer any insight on what else to do or help on this possibly?
Thanks.
Test Loss Min
Latency Avg
Latency Max
Latency Pass
Fail Simple ping loss check
10secs of 40byte packets 2 per second 5% loss 137ms 141ms 148ms
warn low bandwidth stream
10secs of 56k/bit ping stream 512byte packets 6% loss 142ms 147ms 154ms
warn medium bandwidth stream
10secs of 128k/bit ping stream 512byte packets 2% loss 140ms 147ms 173ms
pass your first hop ping
stream of 40byte pings to 130.81.44.101 4% loss 118ms You are 19ms
to your first hop
pass Ping plot:
Ping plot:
From East Coast - USA to YOU Hop Host LOSS Rcv Sent Best Avg Worst 0 ae-2.bb-b.slr.lxa.us.oneandone.net 0% 60 60 0.46 2.29 59.98 1 te-2-1.bb-b.ms.mkc.us.oneandone.net 0% 60 60 0.92 1.89 36.10 2 64.209.105.233 0% 60 60 13.97 41.38 948.69 3 0.xe-8-2-0.BR3.CHI13.ALTER.NET 0% 60 60 26.13 30.80 80.28 4 0.ae3.CHI01-BB-RTR1.verizon-gni.NET 0% 60 60 26.49 27.84 88.62 5 P15-3.RONKVA-LCR-01.verizon-gni.net 0% 60 60 54.25 55.01 56.32 6 P0-0.RONKVA-RONKVALK-ERXG02.verizon-gni.net 0% 60 60 116.80 121.05 130.35 7 pool-71-171-24-94.nwrknj.east.verizon.net 14% 52 60 142.49 147.61 169.10 (fail) From West Coast - USA to YOU Hop Host LOSS Rcv Sent Best Avg Worst 0 unknown.Level3.net 2% 59 60 0.64 16.67 150.86 1 ae-4-99.edge1.SanJose3.Level3.net 4% 58 60 1.15 5.12 59.35 2 4.68.63.146 0% 60 60 1.25 3.31 55.27 3 0.ae3.XL3.SJC7.ALTER.NET 0% 60 60 1.25 1.68 9.80 4 0.ge-6-3-0.XT1.DCA6.ALTER.NET 0% 60 60 75.58 77.85 108.89 5 0.so-4-0-0.RES-BB-RTR1.verizon-gni.net 0% 60 60 75.52 80.78 136.25 6 P15-3.RONKVA-LCR-01.verizon-gni.net 0% 60 60 90.25 91.97 94.08 7 P0-0.RONKVA-RONKVALK-ERXG02.verizon-gni.net 2% 59 60 154.03 159.68 164.42 8 pool-71-171-24-94.nwrknj.east.verizon.net 4% 58 60 175.74 183.27 187.00 (fail)

Need to add some if then and set a check in EEM script

OK the below script watches errors on a path. When it crosses the thresshold it sends a trap and changed the netmask on the path to prevent the route to the far node being used. on so this network is built as two seperate networks. For this lets call them network "A" and "B". the two networks do not touch. Even the OAM network to the router is on seperate vlans. so the chalange is to add inteligence to the script to not run if the router on the "B" network with this same script has dissabled the route so we do not end up with the "A" & "B" network isolated at the same time.
Yes I can think of many other ways to do this, but this is what is in place. So how would I set a varible or some flag that I could check to make sure an event has not taken the other path down? Checking for a file or something on a remote box is my first thought. Anyway I am tossing this out to see what some fresh minds might come up with.
event manager applet SNMP_RTT_Vlan1560_High-Delay
event snmp oid "rttMonLatestJitterOperRTTSum.15600" get-type exact entry-op ge entry-val "1500" entry-type value poll-interval 5 maxrun 180
action 10.0 snmp-trap intdata1 100 intdata2 200 strdata " ***HIGH PACKET DELAY Linkset SHUTDOWN*** some route >some other route Vlan1560"
action 10.5 syslog msg "****EEM Interface SHUTDOWN-HIGH DELAY to re-enable change interface Vlan1560 ip address 10.224.159.233 255.255.255.248 **** description some route>some other route"
action 100.0 cli command "enable"
action 110.0 cli command "config terminal"
action 130.0 cli command "interface Vlan1560"
action 140.0 cli command "ip address 10.224.159.233 255.255.255.254"
action 145.0 cli command "description ****EEM Interface SHUTDOWN-HIGH DELAY to re-enable change interface Vlan1560 ip address 10.224.159.233 255.255.255.248 **** description some route > some other route"
action 180.0 cli command "no event manager applet SNMP_RTT_Vlan1560_High-Delay_Routing_Restore"
action 200.0 cli command "event manager applet SNMP_RTT_Vlan1560_High-Delay_Routing_Restore"
action 205.0 cli command "event timer countdown time 95 name Restore_timer_Vlan1560 maxrun 180"
action 210.0 cli command "action 100.0 cli command $QUOTE enable $QUOTE "
action 220.0 cli command "action 110.0 cli command $QUOTE config terminal $QUOTE "
action 230.0 cli command "action 130.0 cli command $QUOTE interface Vlan1560 $QUOTE "
action 240.0 cli command "action 140.0 cli command $QUOTE ip address 10.224.159.233 255.255.255.248 $QUOTE "
action 250.0 cli command "action 145.0 cli command $QUOTE description Some route > some other route $QUOTE "
action 260.0 cli command "action 150.0 cli command $QUOTE end $QUOTE "
action 280.0 cli command "action 170.0 snmp-trap intdata1 100 intdata2 200 strdata $QUOTE ***High packet delay Linkset RESTORED *** some route > someother route $QUOTE "
action 290.0 cli command "action 180.0 syslog msg $QUOTE ****EEM RESTORED**** interface Vlan1560 IP address 10.224.159.233 255.255.255.248 description some route>some other route $QUOTE "
action 400.0 cli command "end"
action 410.0 cli command "disable"

You could have the remote box send this box a trap that another EEM applet detects then creates a local environment variable that prevents the local router from executing this SNMP policy. See https://supportforums.cisco.com/docs/DOC-11745 on how to create a customized trap. The snmp-notification event detector can be used to detect this trap.

Problem in my EEM : no tty lines available

Hello,
I tried to config an EEM wich detect a change in configuration and alerte it by log messages.
So, the config was :
archive
log config
logging enable
logging size 500
notify syslog contenttype plaintext
hidekeys
event manager applet Cfg_Change
event syslog pattern ".*%PARSER-5-CFGLOG*."
action 1 cli command "enable"
action 2 cli command "show archive log config all"
action 3 syslog msg "Config has been changed"
action 4 cli command "clear archive log config force"
When I tried this EEM, I shut an interface in my router, the msg logs are bellow :
R1(config)#int fastEthernet 0/0
R1(config-if)#
*Apr 13 18:50:14.883: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:interface FastEthernet0/0
*Apr 13 18:50:14.915: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:!exec: enable
*Apr 13 18:50:14.955: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:!exec: enable
*Apr 13 18:50:14.991: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:!exec: enable
R1(config-if)#sh
R1(config-if)#
*Apr 13 18:50:15.011: %HA_EM-3-FMPD_CLI_CONNECT: Unable to establish CLI session: no tty lines available, minimum of 2 required by EEM
*Apr 13 18:50:15.011: %HA_EM-3-FMPD_ERROR: Error executing applet Config-Change statement 1
R1(config-if)#
*Apr 13 18:50:15.059: %HA_EM-6-LOG: Config-Change: Config has been changed
*Apr 13 18:50:15.087: %HA_EM-6-LOG: Config-Change: Config has been changed
*Apr 13 18:50:15.135: %HA_EM-6-LOG: Config-Change: Config has been changed
*Apr 13 18:50:16.011: %PARSER-5-CFGLOG_LOGGEDCMD: User:console logged command:shutdown
*Apr 13 18:50:16.135: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:!exec: enable
*Apr 13 18:50:16.171: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:!exec: enable
*Apr 13 18:50:16.203: %PARSER-5-CFGLOG_LOGGEDCMD: User:unknown user logged command:!exec: enable
*Apr 13 18:50:16.223: %HA_EM-3-FMPD_CLI_CONNECT: Unable to establish CLI session: no tty lines available, minimum of 2 required by EEM
*Apr 13 18:50:16.223: %HA_EM-3-FMPD_ERROR: Error executing applet Config-Change statement 1
R1(config-if)#
*Apr 13 18:50:16.263: %HA_EM-6-LOG: Config-Change: Config has been changed
*Apr 13 18:50:16.303: %HA_EM-6-LOG: Config-Change: Config has been changed
*Apr 13 18:50:16.335: %HA_EM-6-LOG: Config-Change: Config has been changed
R1(config-if)#
*Apr 13 18:50:17.999: %LINK-5-CHANGED: Interface FastEthernet0/0, changed state to administratively down
*Apr 13 18:50:18.999: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to down
So, my question is : what does mean : Unable to establish CLI session: no tty lines available, minimum of 2 required by EEM ??
And why when I executed the command "sh archive log config all", I don't find anything ??
Thanks.

EEM requires two free VTY lines when policies need to execute CLI commands. One is for EEM, and the other is left so that humans don't get locked out.
When you match on such a common syslog pattern, you can have up to (by default) five EEM policies run at once. If you don't have enough free VTY lines for them, then some will throw this message.
You can either allocate more VTY lines or reduce the number of EEM applet threads so less than five policies run in parallel.

5508 HA SSO ping timeout

Hi,
I recently implemented 5508 HA SSO pair running the latest FUS and 7.6.110.0 OS.
The HA Deployment Guide shows 0% ping loss for failover tests, but this pair of 5508s in production have shown up to two ping losses and are consistent for every failover test.
Since the guide makes clear the expectation that not even one ping should be dropped, any suggestions as to where to start looking for an issue. We followed the Deployment Guide instructions. Pings were to the Internet.
Thanks.

Well when testing, how are the pings on the local LAN or a continuous ping to the client? If you have ping loss during internal LAN test, then there must be an issue. I wouldn't test from the client to an internet IP.
Please rate helpful post and Cisco Support Community will donate to Kiva
Scotty

MAC OSX 10.4.10 G5 drops pings

How do you patch/configure OSX 10.4.10 to stop ping loss?
To check if your MAC drops pings open a terminal as root. Run ping -f MACIPADDRESS, if a row dots appear pings are dropped. About 22%
Running ping -f 127.0.0.1 also drops pings. About 22%
Running ping -f 0 does not drop pings.
What program, module or filter exists in the loopback and external network interface data path that drops pings and other TCP packets that is not in the kernel.
Pinging a MAC from a Linux PC using Ping -A MACIPADDRESS shows same 22% ping loss. Pinging the Default route from Linux shows no lost pings. Same test from Mac shows 25% ping loss.
Network is Cisco 12.2(40) IOS on 3750 Switch.
Running ping -A WINDOWSIPADDRESS shows no pings dropped from linux.
Linux PC is Asus eee 4g.

This issue is effecting all Macs in the Organization, 10 * G5 and 1 Cube and 2 Mac laptops. Site has 200+ Windows PCs. Runs multiple vlans. File servers are on 1 Vlan and groups of devices in a work unit are on individual vlans.
The Macs are in the Graphic Arts Dept. I have connected a Mac to a standalone switch along with a Asus EEE running Linux.
ping -A MAC_ADDRESS drops 25% of pings.
ping -A EEE_ADDRESS drops nothing.
To check if was something in this sites SW load asked a Colleague at another site to check on a MAC on another network. Same results.
ping -f MAC_ADDRESS from the Mac drops 22%.
ping -f MAC_ADDRESS from a Sun Solaris host drops 25%. Sparc has 170Mhz CPU its slow and old.
ping -f SUN_ADDRESS from a Sun Solaris host no drops in a 1000 pings.
ping -f SUN_ADDRESS from the MAC drops 22%. Sun was runing snoop and showed only 88% of pings reached the Sun ethernet interface.
How can one get detailed network stats from the Mac Software layers?
netstat -s on linux produces very detailed report showing the following sample:
Icmp:
82 ICMP messages received
0 input ICMP message failed.
ICMP input histogram:
destination unreachable: 81
echo requests: 1
203 ICMP messages sent
0 ICMP messages failed
ICMP output histogram:
destination unreachable: 202
echo replies: 1
Tcp:
914 active connections openings
471 passive connection openings
0 failed connection attempts
188 connection resets received
4 connections established
23082 segments received
26995 segments send out
110 segments retransmited
0 bad segments received.
1338 resets sent
Udp:
2553 packets received
117 packets to unknown port received.
0 packet receive errors
2669 packets sent
TcpExt:
4 invalid SYN cookies received
1 resets received for embryonic SYN_RECV sockets
463 TCP sockets finished time wait in fast timer
440 delayed acks sent
3 delayed acks further delayed because of locked socket
Quick ack mode was activated 441 times
1 packets directly queued to recvmsg prequeue.
1 packets directly received from prequeue
6896 packets header predicted
5014 acknowledgments not containing data received
3400 predicted acknowledgments
2 times recovered from packet loss due to SACK data
44 congestion windows recovered after partial ack
7 TCP data loss events
1 timeouts after SACK recovery
14 fast retransmits
1 forward retransmits
I will ask Customer to provide output of netstat -s and netstat -i on Mac's.
Windows hosts produce similar detailed output from netstat -es
I hope we find the answer.

Loss of network connection with update 7.6.4

Since updating my airport to 7.6.4, I keep losing my network (Comcast) connection. Restarting airport gets me back online. Anyone else experiencing this problems since the update? (OS 10.6., MacBook Pro)

Same issues here. Ping loss every 4th ping.
found this thread > https://discussions.apple.com/thread/3482505?start=15&tstart=0
Suggested is to downgrade which I did .... result is no ping loss anymore.
I downgraded from 7.6.4 to.7.6.3
I hope this also works for you!

Firmware bug - modem CG3100D-2 causes 4sec ping response

Ok this will be a long post, sorry. I believe there is a bug in the firmware of the default ultimate cable CG3100D-2 modem. Many DLNA enabled services are unuseable as a result. The issue causes high latency and packet loss and makes streaming video and gaming a frustrating experience. I would hazzard a guess Telstra have sent out hundreds of modems attempting to resolve packet loss and latency issues not being aware of what the problem is. I am not game to try telephone support as they will just want to send me another modem The issue occurs with plex media server and XBMC DLNA players which are quite popular and most likely many others. (https://plex.tv/ and http://xbmc.org/) With the DLNA software merely running in the background and doing nothing else high latency and ping loss will occur every 25 pings or so to the modem itself. The below will use Plex media server as an example with XBMC not running. My network topology is this:Router with PS3, TV and additional switch connected.The switch plugged into the router has 2 PC's and a media server attached. While plex is running and performing a basic ping test.
Ping switch-plexserver = no high latency
Ping switch-pc = no high latency
Ping router-internalinterface = high latency
Ping router-externalinterface = high latency
Ping router-PS3 = no high latency
The frequency of these debilitating spikes which makes online gaming impossible. Initial spike occurs, again 40 seconds later, again 44 seconds later, again 53 seconds later.
As above the issue is sporadic but consistent. As in it continually occurs while plex is on but the timings between spikes is not similiar i would say they that a spike occurs between 10-90 seconds consistently typically every 45 seconds.
Lag spikes range from 200ms to 4000ms locally!.
- When the issue occurs network throughput is not affected
- Internet speed test 112mbit down, but high jitter and latency noted
- Throughput on lan consistent- When the spike occurs the network is idling with throughput stable at 45kbit/sec on the server, disk throughput is stable at 32kbit I have a Microsoft netmon capture of the media server when the issue occurs. I can see a few more SSDP requests but not much else is happening. Spikes occured at the following times give or take a second in the capture. (I'm not sure it it auto adjusts for time so it was captured at GMT+10)
2:07:54
2:08:48
2:09:42 Need somewhere to upload the capture file. I can confirm that disabling UPNP on the router resolves the issue, it is a bug with UPNP in the modem. But as Telstra force custom firmware i can't update it with new firmware and as far as i'm aware we can't use third party modems. So Telstra please forward this to your technical team as it's not within my control to fix. FYI: This has occured on 2 different ultimate modems, the intermediate switch has been replaced and also removed from the link to rule that out, the cabling replaced, different power socket tried (reaching before understanding the scope of the issue), the media server installed on multiple different machines to rule out a PC issue. Also occurs on multiple OS's including win7 64bit, server 2008, win8.1 64bit.

Hi all,
I ended up putting the router in bridged mode (NAT off, plus Disable WiFI, and cease SSUD broadcast). The Netgear works well if you configure it to only do one simple task. Bridge fibre cable to a Ethernet (CAT6 + only) which you plug into the WAN port of another WiFi router.
After extensive reviews I purchased a Linksys instead of upgrading the Netgear.
I bought the Linksys Dual-band Wireless-AC1900 Gigabit Router. It can be found at: http://www.asus.com/Networking/RTAC68U/
To conclude it is brilliant. It even has backup WAN like 4g USB if the Cable deteriorates, or an extra numbered LAN port which in theory could be an ADSL service or the cable accounts second public IP configured as either "Load Balancing" or "Fault Tolerance (including failback)". Lots of configuration to suit the diverse needs of us all.
I'll compliment this with a newer Synology DS415Play in the future and the house shall be complete.
DLNA WiFi devices are now finding my NAS UpNP services. Plus with the 5Ghz frequency, my TV is steaming at 380Mgbt/s. Awesome gear.
It is now on special at Centrecom for $222.00.
Best regards,
Ross.
Router MainPage Summary:
The world's fastest Wi-Fi router, with combined dual-band data rates of 1900 Mbps for three times faster performance than 802.11n routers
Broadcom® TurboQAM™ technology increases wireless-N data rate to 600 Mbps for 33% faster performance
Five Gigabit Ethernet ports for fast, stable wired network connections Dual USB ports with USB 3.0 for ten times faster data transfer than USB 2.0
Dual-core processor for fast and responsive performance with Wi-Fi, Ethernet and USB devices
ASUS AiCloud cloud service to access, sync, share, and stream your data wherever you are, even connect to other compatible routers creating a private cloud server with family and friends
....

EdgeSync service cannot connect to this subscription because of error "No EdgeSync credentials were found for Edge transport server

When checking Edge Synchronization on our Exchange 2010 HUB server (Test-EdgeSynchronization) I get SyncStatus "Failed". I suspect this failed after we had moved all of our Exchange 2010 servers (Except the Edge server which not member
of any domain or site) to a new site.     In hopes to resolve this, I did the following:
Removed the Edge Subscription from our HUB server using the EMC.
Deleted the cert used by ADAM on our Exchange 2010 Edge server (using the Certificates MMC).
On the Exchange 2010 Edge server created a new Edge subscription file using: “New-EdgeSubscription –FileName "C:\EdgeSubscription20150424.XML"
Restarted the "Microsoft Exchange ADAM" service on our Edge server.
Copied the "EdgeSubscription20150424.XML" to our HUB server. Then completed the New Edge subscription import on our HUB server using the MMC (specifying the AD site and location/name of the XML).
After this, I still get syncstatus failed on our HUB.   Thought to check the certificate using "Get-ExchangeCertificate | FL" but that results in: "Get-ExchangeCertificate : The Exchange Certificate operation has failed
with an exception. The error message is: Access is denied".   I tried to create a new certificate on our HUB serve using "New-ExchangeCertificate", but get the exact same "Access is denied" error message
again.
I believe we never noticed that the Edge sync wasn't working because we only use our Edge server when our hardware email filter fails (Symantec Message Gateway). Our Edge server has a lower priority in our MX record and lower priority in our send connectors
on our HUB servers. The Edge server though does receive email from internal email relay from some servers for notifications. These do get delivered unless the user mailbox is new (suspect ADAM isn't updating - that's why I started looking into
this).
This should be simple!   What am I missing???   Thanks in advance for any feedback.
PS - this is my first posting here.... I apologize if I posted this in the wrong forum or category. :)

Hi PongoDog,
Thank you for your question.
By your description, we could refer to the following steps to check if issue persist:
Remove all hub servers certificate
Create a new hub server certificate with command "New-ExchangeCertificate"
Remove the edge subscription on hub & edge server
Recreate sync subscription and import it on hub server.
If the issue persist, we could Check network connectivity between the Hub Transport server and Active Directory. Use Ping to isolate network hardware problems and incompatible configurations. Use PathPing to detect packet loss over multiple-hop trips. then
run dcdiag /s:<Domain Controller Name> at a command prompt on the Exchange Server. Use the output of Dcdiag to discover the root cause of any failures or warnings that it reports. Finally Rreview the Application log for MSExchangeADAccess and MSExchange
Topology events that could provide more information about the root cause of this event and post Event ID to
[email protected] for our troubleshooting.
If there are any questions regarding this issue, please be free to let me know.
Best Regard,
Jim
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Jim Xu
TechNet Community Support

EEM to detect ping loss

Similar Messages

Maybe you are looking for