Output packets drops on Router interface

Hi,
As shown in attached diagram we have connected DC and site with two ISP.
RTR1 and RTR2 are in HSRP mode and RTR2 is active router for site
We are seeing packet drops on DC RTR2 interfece connected to Sprint MPLS.
We have a site with two isp (Sprint MPLS and P2P link). Site is running on Sprint ISP.
We are seeing out put errors on DC RTR2 Sprint interface,  when we failover site to P2P link from sprint.
And when fail over back to Sprint at site we are not seeing any output packets drops on DC RTR2 sprint link.
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 36/255, rxload 12/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters 1w0d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 82137
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 4722000 bits/sec, 1449 packets/sec
5 minute output rate 14469000 bits/sec, 2088 packets/sec
601690470 packets input, 1836920253 bytes, 0 no buffer
Received 134822 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 134790 multicast, 0 pause input
0 input packets with dribble condition detected
858756749 packets output, 2658785694 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

Sh int
 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
     reliability 255/255, txload 36/255, rxload 12/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 100Mb/s, media type is RJ45
  output flow-control is XON, input flow-control is XON
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters 1w0d
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 82137
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 4722000 bits/sec, 1449 packets/sec
  5 minute output rate 14469000 bits/sec, 2088 packets/sec
     601690470 packets input, 1836920253 bytes, 0 no buffer
     Received 134822 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 134790 multicast, 0 pause input
     0 input packets with dribble condition detected
     858756749 packets output, 2658785694 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out

Similar Messages

  • Could high "Total Output Drops" on one interface on a 3560G, be caused by faulty hardware on another interface?

    Hi All,
    I have been trying to diagnose a issue we have been having with packet loss on video calls (which I think we may have now resolved as the problem lay elsewhere), but in the process we have trailed some equipment from PathView and this seems to have created a new problem.
    We have a standalone 3560G switch which connects into a providers 3750G as part of an MPLS network. There is a single uplink to the 3750 from the 3560 (@ 1Gbps) and whilst I can  manage the 3560, I have no access to the providers switch. Our 3560 has a fairly vanilla config on it with no QoS enabled.
    There are only a few ports used on the 3560, mainly for Cisco VCS (Video Conferencing Servers) and a PathView traffic analysis device.The VCS devices are used to funnel videoconferencing traffic across the MPLS network into another institutions network.The PathView device can be used to send traffic bursts (albeit relatively small compared with the Bandwidth that is available) across the same route as the VC traffic to an opposing device, however, I have also disabled all of these paths for the moment.
    I can run multiple VC calls which utilise the VCS devices so traffic is routing into the relevant organisations and everything is good. In fact, I have 5 x 2Mb calls in progress now and there are 0 (or very, very few) errors.
    However, I have actually shut-down the port (Gi0/3) connected to the PathView device for the moment. If I re-enable it I start to see a lot of errors on the VC calls, and the Total Output Drops on the UPLINK interface (Gi0/23) starts rising rapidly. As soon as I shut-down the PathView port again (Gi0/3), the error stop and all returns to normal.
    I have read that issues on the Output queue are often attributed to a congested network/interface, but I don't believe that this is the case in this instance. My 5 VC calls would only come in at 10Mbps so is a way short of the 1000Mpbs available. Even the PathView device only issue burst up to 2Mbps, and with the Paths actually disabled even this shouldn't be happening, so only a small amount of management traffic should be flowing. Still, as soon as I enable the port, problems start.
    So, is it possible that either the port on the switch, cable or PathView device is actually faulty and cause such errors? Has anyone seen anything like this?
    Cheers
    Chris

    "As far as I know, such drops shouldn't be caused by faulty hardware, but if the hardware is really faulty, you would need to involve TAC."
    Ok, thanks.
    "BTW, all the other interfaces, which have the low bandwidth rates you describe, are physically running at low bandwidth settings on the interface, e.g. 10 Mbps?  If not, you can have short transient micros bursts which can cause drops.  This can happen even when average bandwidth utilization is low.  (NB: if these other ports average utilization is so low, if not already doing so, you could run the ports at 10 Mbps too.)"
    No. All ports on the switch connect to devices with 1Gb capable interfaces. They have been left to auto negotiate and have negotiated at 1000/full. The bandwidth described is more with regard to the actual data throughput of a call. Technically, the VCS devices are licence to handle 50 simultaneous call of up to 4Mbps so potentially could require a bandwidth of 200Mbps, although it is unlikely that we will see this amount of traffic.
    "Also, even if you have physically low bandwidth ingress, with a high bandwidth egress, and even if the egress's bandwidth is more than the aggregate of all the ingress, you can still have drops caused by concurrent arrivals."
    In general, the ingress and the egress should be similar. Think of this as a stub network - one path in and out (via Gi0/23). The VCS act as a kind or proxy/router for video traffic, simply terminating inbound legs, and generating a next hop outbound leg. The traffic coming in  to the VCS should be the same as the traffic go out.
    There will of course be certain management traffic, but this will be relatively low volume, and of course the PathView traffic analyser can generate a burst of UDP packets to simulate voice traffic.
    "Some other "gotchas" include, you mention you don't have QoS configured, but you're sure QoS is disabled too?"
    Yes.
    switch#show mls qos
    QoS is disabled
    QoS ip packet dscp rewrite is enabled
    I can't see a lot of point enabling QoS on this particular switch. Pretty much all of the traffic passing through it will be QoS tagged at the same level. Therefore it ALL prioritised.
    Indeed running a test overnight with these multiple calls live and the PathView port shutdown, resulted in 0 Total Output Drops.Each leg did suffer a handful of dropped packets end-to-end, but I think I can live with 100 packets dropped in 10 million during a 12 hour period (and this, I suspect, will be somewhere else on the network).
    "Lastly, Cisco has documented, at least for the 3750X, that uplink ports have the same buffer RAM resources as 24 copper edge ports.  Assuming the earlier series are similar, there might be benefit to moving your uplink, now on g0/23, to an uplink port (if your 3650G has them)."
    Unfortunately, no can do. we are limited to the built in ports on the switch as we have no SFP modules installed.
    Apologies about the formatting - this is yet another thing that has been broken in these new forums. I looks a lok better in the Reply window than it looks in this normal view.

  • DMVPN in Cisco 3945 output drop in tunnel interface

    I configured DMVPN in Cisco 3945 and checked the tunnel interface. I found out that I have output drop. How can I remove that output drop? I already set the ip mtu to 1400.
    CORE-ROUTER#sh int tunnel 20
    Tunnel20 is up, line protocol is up
      Hardware is Tunnel
      Description: <Voice Tunneling to HO>
      Internet address is 172.15.X.X./X
      MTU 17878 bytes, BW 1024 Kbit/sec, DLY 50000 usec,
         reliability 255/255, txload 1/255, rxload 1/255
      Encapsulation TUNNEL, loopback not set
      Keepalive not set
      Tunnel source 10.15.X.X (GigabitEthernet0/1)
       Tunnel Subblocks:
          src-track:
             Tunnel20 source tracking subblock associated with GigabitEthernet0/1
              Set of tunnels with source GigabitEthernet0/1, 1 member (includes iterators), on interface <OK>
      Tunnel protocol/transport multi-GRE/IP
        Key 0x3EA, sequencing disabled
        Checksumming of packets disabled
      Tunnel TTL 255, Fast tunneling enabled
      Tunnel transport MTU 1438 bytes
      Tunnel transmit bandwidth 8000 (kbps)
      Tunnel receive bandwidth 8000 (kbps)
      Tunnel protection via IPSec (profile "tunnel_protection_profile_2")
      Last input 00:00:01, output never, output hang never
     --More--           Last clearing of "show interface" counters never
      Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 7487
      Queueing strategy: fifo
      Output queue: 0/0 (size/max)
      30 second input rate 0 bits/sec, 0 packets/sec
      30 second output rate 0 bits/sec, 0 packets/sec
         48007 packets input, 4315254 bytes, 0 no buffer
         Received 0 broadcasts (0 IP multicasts)
         0 runts, 0 giants, 0 throttles
         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
         42804 packets output, 4638561 bytes, 0 underruns
         0 output errors, 0 collisions, 0 interface resets
         0 unknown protocol drops
         0 output buffer failures, 0 output buffers swapped out
    interface Tunnel20
     description <Bayantel Voice tunneling>
     bandwidth 30720
     ip address 172.15.X.X 255.255.255.128
     no ip redirects
     ip mtu 1400
     no ip next-hop-self eigrp 20
     no ip split-horizon eigrp 20
     ip nhrp authentication 0r1x@IT
     ip nhrp map multicast dynamic
     ip nhrp network-id 1002
     ip nhrp holdtime 300
     ip tcp adjust-mss 1360
     tunnel source FastEthernet0/0/1
     tunnel mode gre multipoint
     tunnel key 1002
     tunnel protection ipsec profile tunnel_protection_profile_2 shared

    Hi,
    Thanks for the input. If the radio is sending out the packet but client did not receive, not output drop should be seen since packet is sent out, right?
    From my understanding, output drop is related to congested interface. Outgoing interface cannot take the rate packets coming in and thus droping it. What I don't understand is input and output rate has not reached limit yet. Also input queue is seeing drop of packet as well even though input queue is empty.
    Any idea?

  • Catalyst 2960-S Stack Interface Packet Drop

    Hi all!
    I have a 2960-S stack with the following behavior:
    SWITCH#sh int g1/0/26
         Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 12275
    When I issue the show mls qos interface g1/0/26 statistics:
    SWITCH#show mls qos interface g1/0/26 statistics
    GigabitEthernet1/0/26 (All statistics are in packets)
      dscp: incoming 
      0 -  4 :    35356866        0            0            0            0 
      5 -  9 :            0            0            0            2            0 
    10 - 14 :           0            0            0            0            0 
    15 - 19 :           0            0            0            0            0 
    20 - 24 :           0            0            0            0            0 
    25 - 29 :           0            0            0            0            0 
    30 - 34 :           0            0            0            0            0 
    35 - 39 :           0            0            0            0            0 
    40 - 44 :      634354        0            0            0            0 
    45 - 49 :           0     49446819      0            0            0 
    50 - 54 :           0            0            0            0            0 
    55 - 59 :           0            0            0            0            0 
    60 - 64 :           0            0            0            0 
      dscp: outgoing
      0 -  4 :     6835883         0            0            0            0 
      5 -  9 :            0             0            0     43973612      0 
    10 - 14 :           0            0            0            0            0 
    15 - 19 :           0            1            0            0            0 
    20 - 24 :           0            0            0            0       204586 
    25 - 29 :           0            0            0            0            0 
    30 - 34 :           0            0            0            0            0 
    35 - 39 :           0            0            0            0            0 
    40 - 44 :           2            0            0            0            0 
    45 - 49 :           0      2215325       0           55            0 
    50 - 54 :           0            0            0            0            0 
    55 - 59 :           0        29668         0            0            0 
    60 - 64 :           0            0            0            0           
      cos: incoming 
      0 -  4 :    35374153            2            0            0            0 
      5 -  7 :    50121685            0            0 
      cos: outgoing
      0 -  4 :    12975602     43973617        85081       204622          122 
      5 -  7 :    47659950          105     34377016 
      output queues enqueued:
    queue:    threshold1   threshold2   threshold3
    queue 0:           0           0    47659935
    queue 1:       92482     1222278    34432039
    queue 2:           0           0    13178400
    queue 3:           0           0    43982889
      output queues dropped:
    queue:    threshold1   threshold2   threshold3
    queue 0:           0           0          71
    queue 1:           0        1738           0
    queue 2:           0           0          20
    queue 3:           0           0      375553
    Policer: Inprofile:            0 OutofProfile:            0
    I need some help to read this output but it seems that packets are dropped at all queues, isn't it?
    Any help please?
    Thanks in advance!

    Please post the output to the following commands:
    1.  sh interface G1/0/26; and
    2.  sh controll e G1/0/26
    What kind of client is connected to port Gi1/0/26?

  • Cisco 2911 router interface hangs

    dears,
    Please note that the LAN interface (GigabitEthernet0/2) on our 2911 router is hanging. the interface stays up/up but is not reachable and stops passing traffic. the issue is temporary resolved after putting the interface in default configuration and reapplying back the configuration.
    shut/no shut and router reload does not resolve the issue.
    interface GigabitEthernet0/2
     description connected to LAN
     ip address 10.1.184.2 255.255.255.0
     ip nat inside
     ip inspect mea in
     ip virtual-reassembly in
     standby 1 ip 10.1.184.1
     standby 1 priority 110
     standby 1 preempt
     standby 1 track 100 decrement 50
     load-interval 30
     duplex auto
     speed auto
    IOS used: c2900-universalk9-mz.SPA.151-4.M8.bin
    Please advise.
    thank you in advance.

    Hi Richard.
    Normal interface state.
    Gi 0/0 UP
    GI 0/1 Admin Down
    Gi 0/2 Admin Down
    Fast 0/0/0 Up
    Fast 0/0/1 Up
    The routers works normally , lines ok, and devices attached ok, without any reason, no problems in lines  PtP  , no power problems, lost the connectivity, the only way to restore the connectivity is with a router reset.
    The Gi 0/0 connect to the LAN local:
    GigabitEthernet0/0 is up, line protocol is up
    Hardware is CN Gigabit Ethernet, address is 4c00.827f.3de0 (bia 4c00.827f.3de0)
    Description: "LAN LOCAL"
    Internet address is
    MTU 1500 bytes, BW 100000 Kbit/sec, DLY 100 usec,
    reliability 255/255, txload 1/255, rxload 1/255
    Encapsulation ARPA, loopback not set
    Keepalive set (10 sec)
    Full Duplex, 100Mbps, media type is RJ45
    output flow-control is unsupported, input flow-control is unsupported
    ARP type: ARPA, ARP Timeout 04:00:00
    Last input 00:00:00, output 00:00:00, output hang never
    Last clearing of "show interface" counters never
    Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
    Queueing strategy: fifo
    Output queue: 0/40 (size/max)
    5 minute input rate 564000 bits/sec, 98 packets/sec
    5 minute output rate 303000 bits/sec, 75 packets/sec
    2120530 packets input, 802569322 bytes, 0 no buffer
    Received 19268 broadcasts (0 IP multicasts)
    0 runts, 0 giants, 0 throttles
    0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
    0 watchdog, 1277 multicast, 0 pause input
    2304826 packets output, 1883365124 bytes, 0 underruns
    0 output errors, 0 collisions, 2 interface resets
    845 unknown protocol drops
    0 babbles, 0 late collision, 0 deferred
    1 lost carrier, 0 no carrier, 0 pause output
    0 output buffer failures, 0 output buffers swapped out
    And the device conected to this interface is a WS-C3750X-24P (with this example, i have the problem in four routers), with a cat5e wired, no problems was reported in the ws-C3750X-24P.
     In my case when the router is reset, recovered the normal operation
    More input:
    Cisco CISCO2911/K9 (revision 1.0) with 483328K/40960K bytes of memory.
    Processor board ID FCZ17397055
    4 FastEthernet interfaces
    3 Gigabit Ethernet interfaces
    1 terminal line
    DRAM configuration is 64 bits wide with parity enabled.
    255K bytes of non-volatile configuration memory.
    250880K bytes of ATA System CompactFlash 0 (Read/Write)
    System image file is "flash0:c2900-universalk9-mz.SPA.152-1.T4.bin"
    Thanks in advance.
    David.

  • ASA packet drop

    Hi,
    i want to ask. My ASA5520 is generating some packet drops constantly and we have some problems with server aplication that a proccessing of tasks from client to server take a long time (sometime about 15 seconds). Our client application is accessing a server throught IPSec VPN tunnel terminated on two ASA`s. Our connectivity is about 20Mbit/s to internet and responses to ping about 5 ms and our internet load is about 20% on both sides - so i think this parameters are not bad. MTU is configured for 1500 for all interfaces. If this apllication is on local network its is working with no problems. Long responses are only throught VPN tunnel.
    Can someone help me where to search for possible reasons? - is a drop rate about 2-4pkts/sec a normal behavior on Outside and Inside interface?
    Outside:
            received (in 3089.110 secs):
                    1440158 packets 1318512125 bytes
                    466 pkts/sec    426825 bytes/sec
            transmitted (in 3089.110 secs):
                    1189541 packets 449651676 bytes
                    385 pkts/sec    145560 bytes/sec
          1 minute input rate 660 pkts/sec,  569735 bytes/sec
          1 minute output rate 543 pkts/sec,  194757 bytes/sec
          1 minute drop rate, 2 pkts/sec
          5 minute input rate 541 pkts/sec,  494752 bytes/sec
          5 minute output rate 418 pkts/sec,  115924 bytes/sec
          5 minute drop rate, 2 pkts/sec
    Inside:
            received (in 998799.294 secs):
                    1207809993 packets      733339825912 bytes
                    1002 pkts/sec   734002 bytes/sec
            transmitted (in 998799.294 secs):
                    1200125098 packets      882901742659 bytes
                    1003 pkts/sec   883004 bytes/sec
          1 minute input rate 502 pkts/sec,  179984 bytes/sec
          1 minute output rate 614 pkts/sec,  564726 bytes/sec
          1 minute drop rate, 4 pkts/sec
          5 minute input rate 391 pkts/sec,  108899 bytes/sec
          5 minute output rate 508 pkts/sec,  490840 bytes/sec
          5 minute drop rate, 4 pkts/sec
    DMZ:
            received (in 998799.984 secs):
                    58298524 packets        44825759311 bytes
                    2 pkts/sec      44002 bytes/sec
            transmitted (in 998799.984 secs):
                    46530732 packets        12940381278 bytes
                    3 pkts/sec      12001 bytes/sec
          1 minute input rate 53 pkts/sec,  13049 bytes/sec
          1 minute output rate 49 pkts/sec,  3004 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 36 pkts/sec,  5570 bytes/sec
          5 minute output rate 33 pkts/sec,  1755 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Aggregated Traffic on Physical Interface
    GigabitEthernet0/0:
            received (in 3089.870 secs):
                    1440885 packets 1346005546 bytes
                    466 pkts/sec    435618 bytes/sec
            transmitted (in 3089.870 secs):
                    1190187 packets 474475065 bytes
                    385 pkts/sec    153558 bytes/sec
          1 minute input rate 660 pkts/sec,  582256 bytes/sec
          1 minute output rate 543 pkts/sec,  206077 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 541 pkts/sec,  504955 bytes/sec
          5 minute output rate 418 pkts/sec,  124804 bytes/sec
          5 minute drop rate, 0 pkts/sec
    GigabitEthernet0/1:
            received (in 998800.164 secs):
                    1207813930 packets      757321051733 bytes
                    1002 pkts/sec   758002 bytes/sec
            transmitted (in 998800.164 secs):
                    1200125732 packets      906238831947 bytes
                    1003 pkts/sec   907000 bytes/sec
          1 minute input rate 502 pkts/sec,  190546 bytes/sec
          1 minute output rate 614 pkts/sec,  576442 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 391 pkts/sec,  117300 bytes/sec
          5 minute output rate 508 pkts/sec,  500487 bytes/sec
          5 minute drop rate, 0 pkts/sec
    GigabitEthernet0/2:
            received (in 998800.224 secs):
                    58298526 packets        45904344202 bytes
                    2 pkts/sec      45000 bytes/sec
            transmitted (in 998800.224 secs):
                    46530733 packets        13855555976 bytes
                    3 pkts/sec      13003 bytes/sec
          1 minute input rate 53 pkts/sec,  14097 bytes/sec
          1 minute output rate 49 pkts/sec,  4018 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 36 pkts/sec,  6271 bytes/sec
          5 minute output rate 33 pkts/sec,  2437 bytes/sec
          5 minute drop rate, 0 pkts/sec
    GigabitEthernet0/3:
            received (in 998800.364 secs):
                    0 packets       0 bytes
                    0 pkts/sec      0 bytes/sec
            transmitted (in 998800.364 secs):
                    0 packets       0 bytes
                    0 pkts/sec      0 bytes/sec
          1 minute input rate 0 pkts/sec,  0 bytes/sec
          1 minute output rate 0 pkts/sec,  0 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  0 bytes/sec
          5 minute output rate 0 pkts/sec,  0 bytes/sec
          5 minute drop rate, 0 pkts/sec

    Hi,
    There is no UDP flow limit configured on this firewall:
    asa-hvac# sh local-host router-bacnet
    Interface inside: 3 active, 8 maximum active, 0 denied
    local host: ,
    TCP flow count/limit = 0/unlimited
    TCP embryonic count to host = 0
    TCP intercept watermark = unlimited
    UDP flow count/limit = 2/unlimited
    Conn:
    UDP out ctrl-delta-maniwaki:47808 in router-bacnet:47808 idle 0:00:15 flags -
    UDP out ctrl-delta-laurentienne:47808 in router-bacnet:47808 idle 0:00:00 flags -
    Interface outside: 15 active, 33 maximum active, 0 denied
    To answer your second question, when the problem appear, there is the same 2 flows when I issue the "show local-host bacnet-router" command.

  • Customer packet drops issue

    Hi,
    Our customer took 30Mbps metro link from us. Even at 17Mbps link utilization they are facing packet drops. Our side policer is implemented for 30Mbps. There are no errors on customer or our interfaces. But I can see exceed packets under 'show policy-map interface' . Used maximum Bc. Does customer required to implement shaping his end with same CIR and Bc.
    Regards
    Siva K

    Hi Siva,
    It is not a mandatory rule that Customer should also have the same CIR configured with shaping.
    When Customer have 30 Mbps circuit SLA with Service Provider, he may be able to pump ta line rate from CE side. But on PE side, it will be policied and excess traffic will be dropped.
    To avoid Customer's traffic getting dropped at PE, It is advisible to configure shaping at CE side so that the traffic SLA will be maintained without or with less number of packet loss.
    Can you post your config and show policy-map interface output with traffic?.
    Regards,
    Nagendra

  • IP accounting / output-packets / access-violations

    I applied an access list to a VLAN interface and also added IP accounting output-packets and ip accounting access-violations. Interestingly, the devices that are allowed off the subnet can the ones that should be blocked are blocked by the ACL and show up in the show IP accounting access-v command. What I don't understand is why the show IP accounting doesn't show any packets. Also why a show access-list doesn't show any hits on the list. Is it because I'm using a VLAN interface? I would think I should see output packets and hits on the ACL. I do see dropped packets on the ACL for the violators.

    Hello,
    On certain platforms (hw/sw) packets are switched in hardware and not software. The RP doesn't have to make a forwarding decision. The ip accounting output-packets tracks statistics for packets via the RP. Applying a an ACL to a VLAN would typically breaks the flow of hardware switching and forces those packets to be further interrogated.
    More granular traffic flows and statistics can be recorded with netflow switching. This does work on an SVI.
    I hope this helps.
    Regards,
    James

  • QoS - output queues dropped.

    Hi, i have a phone thats no working fine, it unregister all the time from the sip server. 
    The port connected to the phone has output queues dropped on queue 1. ¿That's normal? ¿What could be the cause that there drop packet?
    Thanks!
    I have this configuration for Qos on the switch port:
    interface FastEthernet0/15
     switchport mode access
     switchport voice vlan 15
     priority-queue out
     mls qos trust cos
     spanning-tree portfast
    sh mls qos int fa0/15 st
    FastEthernet0/15 (All statistics are in packets)
      dscp: incoming
      0 -  4 :      184994            0            0            0            0
      5 -  9 :           0            0            0            0            0
     10 - 14 :           0            0            0            0            0
     15 - 19 :           0            0            0            0            0
     20 - 24 :           0            0            0            0            0
     25 - 29 :           0      2298420            0            0            0
     30 - 34 :           0            0            0            0            0
     35 - 39 :           0            0            0            0            0
     40 - 44 :           0            0            0            0            0
     45 - 49 :           0      4806226            0        16934            0
     50 - 54 :           0            0            0            0            0
     55 - 59 :           0            0            0            0            0
     60 - 64 :           0            0            0            0
      dscp: outgoing
      0 -  4 :     8134930            0            0            0            0
      5 -  9 :           0            0            0            0            0
     10 - 14 :           0            0            0            0            0
     15 - 19 :           0            0            0            0            0
     20 - 24 :           0            0            0            0            0
     25 - 29 :           0            0            0            0            0
     30 - 34 :           0            0            0            0            0
     35 - 39 :           0            0            0            0            0
     40 - 44 :         861            0            0            0            0
     45 - 49 :           0            0            0            5            0
     50 - 54 :           0            0            0            0            0
     55 - 59 :           0            0            0            0            0
     60 - 64 :           0            0            0            0
      cos: incoming
      0 -  4 :      875001            0            0            0            0
      5 -  7 :     6544104            0            0
      cos: outgoing
      0 -  4 :     8781009            3            6            1            2
      5 -  7 :      275463            5        17983
      output queues enqueued:
     queue:    threshold1   threshold2   threshold3
     queue 0:      292615           0           0
     queue 1:     8562114       44049     5388502
     queue 2:           0           0           0
     queue 3:       17982           0      183824
      output queues dropped:
     queue:    threshold1   threshold2   threshold3
     queue 0:           0           0           0
     queue 1:        5349           0           0
     queue 2:           0           0           0
     queue 3:           0           0           0
    Policer: Inprofile:            0 OutofProfile:            0

    Martin,
    Refer to this link you need to modify your buffers etc. :http://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-switches/116089-technote-switches-output-drops-qos-00.html
    -Terry
    Please rate all helpful posts

  • RX Invalid nwid packets on my wifi interface

    Hello,
    I've got a problem with my WIFI connection using Madwifi :
    When I'm under Linux, I can activate my connection with :
    #ifconfig ath0 up
    #iwconfig ath0 essid myAP
    #iwcomfig ath0 key my:wep:64:bits:key
    #dhclient ath0
    And it usually works but I recieve a very large ammount of "rx invalids
    nwid" packets, and so my connection is always unstable and very slow.
    At the beginnin I thought that the problem was the distance between me
    and the a.p. , but then I tryed to connect under windows (with the
    default connection manager), and it works perfectly.
    Does anyone know what could be the problem ?
    Thanks a lot

    Hello,
    Here are some new informations I got ... If somebody can find what's wrong, it'd help me very much. I compare my params under windows (where the connection works very well) with the params under arch(where the connection is unstable)
    On Linux :
    $ ifconfig
    ath0      Link encap:Ethernet  HWaddr 00:14:A4:43:7C:0E
              inet addr:192.168.0.105  Bcast:192.168.0.255  Mask:255.255.255.0
              inet6 addr: fe80::214:a4ff:fe43:7c0e/64 Scope:Link
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:5 errors:0 dropped:0 overruns:0 frame:0
              TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:0
              RX bytes:752 (752.0 b)  TX bytes:986 (986.0 b)
    lo        Link encap:Local Loopback
              inet addr:127.0.0.1  Mask:255.0.0.0
              inet6 addr: ::1/128 Scope:Host
              UP LOOPBACK RUNNING  MTU:16436  Metric:1
              RX packets:8127 errors:0 dropped:0 overruns:0 frame:0
              TX packets:8127 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:0
              RX bytes:783380 (765.0 Kb)  TX bytes:783380 (765.0 Kb)
    wifi0     Link encap:UNSPEC  HWaddr 00-14-A4-43-7C-0E-00-00-00-00-00-00-00-00-00-00
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:672 errors:0 dropped:0 overruns:0 frame:273
              TX packets:38 errors:2 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:199
              RX bytes:57070 (55.7 Kb)  TX bytes:2588 (2.5 Kb)
              Interrupt:23 Memory:f9660000-f9670000
    $ iwconfig
    lo        no wireless extensions.
    eth0      no wireless extensions.
    wifi0     no wireless extensions.
    ath0      IEEE 802.11g  ESSID:"WLAN-NELSON"
              Mode:Managed  Frequency:2.447 GHz  Access Point: 00:15:E9:DE:D6:03
              Bit Rate:1 Mb/s   Tx-Power:8 dBm   Sensitivity=0/3
              Retry:off   RTS thr:off   Fragment thr:off
              Power Management:off
              Link Quality=12/94  Signal level=-83 dBm  Noise level=-95 dBm
              Rx invalid nwid:161  Rx invalid crypt:0  Rx invalid frag:0
              Tx excessive retries:0  Invalid misc:0   Missed beacon:0
    $ route
    Kernel IP routing table
    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
    192.168.0.0     *               255.255.255.0   U     0      0        0 ath0
    default         192.168.0.1     0.0.0.0         UG    0      0        0 ath0
    On Windows :
    ipconfig >
    Wifi Card:
            Description . . . . . . . . . . . : 11a/b/g Wireless LAN Mini PCI Adapte
    r II
            MAC . . . . . . . . .: 00-14-A4-43-7C-0E
            DHCP active. . . . . . . . . . . : Yes
            Configuration automatic . . . . : Yes
            Adresse IP. . . . . . . . . . . . : 192.168.0.105
            Mask . . . . . . : 255.255.255.0
            Default gateway. . . . . . : 192.168.0.1
            Server DHCP. . . . . . . . . . . : 192.168.0.1
            Servers DNS . . . . . . . . . .  : 213.191.74.18
                                                192.168.0.1
    route >
    ===========================================================================
    Interfaces
    0x1 ........................... MS TCP Loopback interface
    0x10003 ...00 14 a4 43 7c 0e ...... 11a/b/g Wireless LAN Mini PCI Adapter II
    0x10004 ...00 10 c6 dc a5 d5 ...... Broadcom NetXtreme Gigabit Ethernet
    0x10005 ...00 00 00 00 00 00 ...... Connexion TV/vidÚo Microsoft
    ===========================================================================
    DDestination          Mask             Gateway Adr. interface Métric
              0.0.0.0          0.0.0.0      192.168.0.1   192.168.0.105       10
            127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
          169.254.0.0      255.255.0.0    192.168.0.105   192.168.0.105       10
          192.168.0.0    255.255.255.0    192.168.0.105   192.168.0.105       10
        192.168.0.105  255.255.255.255        127.0.0.1       127.0.0.1       10
        192.168.0.255  255.255.255.255    192.168.0.105   192.168.0.105       10
            224.0.0.0        240.0.0.0    192.168.0.105   192.168.0.105       10
      255.255.255.255  255.255.255.255    192.168.0.105           10004       1
      255.255.255.255  255.255.255.255    192.168.0.105   192.168.0.105       1
    Default gateway :       192.168.0.1

  • Packet drops on v490 production server..help us

    Hello...
    We have v490 server with ce0 interface configured.. It gets down frequently & after some packet drops it makes itself up...
    Can anybody tell me what could be the reason behind this problem...
    I have checked switch & router by changing interface cables, still problem persists...no message on /var/adm/messages.
    Thanks in advance
    gmraj

    try a "snoop -d ce0" and verify messages
    also, perhaps the NIC is broken
    also, perhaps the duplex/speed of the NIC isn't set correctly (autoneg, forced, fullduplex, halfduplex etc.) and you have to define it with a "ndd -set "

  • Router Interface (7304 NSE100) QoS Input Scheduling

    Guys,
    I had great feedback on the Switch input scheduling question last week. Many thx to all online (and my colleagues at work) :)
    If you can apply input scheduling on a switch port, ie the SP or default queues, can you apply input scheduling on a router interface?
    switch
    input-q----------PFC----------output-q
    router
    input-int---------cef-or-rp----------output-int
    At the moment, most QoS for a router is done (in my expreience) on outbound scheduling, ie setting a CBWFQ bandwidth or priority and setting this policy-map outbound on the router egress interface
    Should we be doing it inbound for traffic coming into a router interface before the packet gets cef switched (or sent to the RP for process or fast switching)?
    So if two packets come into the router interface at the same time, based on a DSCP value, we should schedule a voice packet to be processed by CEF switching (or the RP) before an email packet?
    I am just applying the switch methodology that I learned about last week to a router device. I know all routers have different archetectures, so will probably be spefific to a platform. I am using NSE100s (PXF based) on a 7304 platform.
    Kindest regards,
    Ken

    Just to add i picked this from some site
    GSR:
    Engine 0: (Quad STM-1 POS/ATM, single STM-4 POS/ATM and others)
    Engine 1: (single GEth, 8 FEth, DPT 2XSTM-4)
    Engine 0 and 1 support CAR in sw; MDRR: in Engine 0 in sw
    Engine 2: STM-16, Enhanced Quad OC-12/STM-4 Packet-over-SONET/SDH - 4 ports, MPLS-capable -, 8 and 16 STM-1, 3 GEth, Enhanced OC-48/STM-16 Packet-over-SONET/SDH.
    no support of CAR, PIRC in hw instead; WRED in hw; MDRR in hw
    (See also Quad OC-12/STM-4; Rel. Notes 12.0 S )
    Engine 4: speed greater than 2.5 Gbps,
    CAR, WRED, MDRR in hw
    Note: no class-based shaping on GSR
    But it supports DTS
    http://www.cisco.com/en/US/products/sw/iosswrel/ps1829/products_feature_guide09186a00800811e5.html
    Tuf luck but hope this helps

  • Packet drops and High CPU on Cisco 3845 Switch

    Hello Experts,
    We are facing a lot of packet drops in our LAN.
    When we try to ping one of the access switches from the CE router, we get the follwoing output:
    pdel1799#ping 10.132.136.17 so 10.132.164.1 si 100 re 500
    Type escape  sequence to abort.
    Sending 500, 100-byte ICMP Echos to 10.132.136.17, timeout  is 2 seconds:
    Packet sent with a source address of  10.132.164.1
    Success  rate is 98 percent (491/500), round-trip min/avg/max = 1/9/44  ms
    pdel1799#
    Success  rate is 98 percent (491/500), round-trip min/avg/max = 1/9/44  ms
    pdel1799#
    Some command outputs and show tech of all switches attached from the customer which I have attached.
    I have also attached a diagram but the only router''s IP address is correct in the diagram while IP address of switches in the diagram are incorrect. Here are the correct IPs of the switches:
    Core Switch : 10.132.139.2
    Access Switches:
    10.132.136.17
    10.132.136.18
    10.132.136.29
    Apart from packet drops on VLAN 1 we are seeing  high CPU utilization on core switch
    ingur-msl-coresw#sh processes cpu sorted | ex 0.0
    Core 0: CPU utilization for five seconds: 61%; one minute: 45%;  five minutes: 47%
    Core 1: CPU utilization for five seconds: 63%; one minute: 46%;  five minutes: 56%
    Core 2: CPU utilization for five seconds: 36%; one minute: 74%;  five minutes: 69%
    Core 3: CPU utilization for five seconds: 85%; one minute: 69%;  five minutes: 65%
    PID    Runtime(ms) Invoked  uSecs  5Sec     1Min     5Min     TTY   Process
    5638   2374911     23863975 131    52.03    52.24    52.58    1088  fed               
    9227   43623       21191441 182    8.36     5.53     5.71     0     iosd              
    6146   1437288     13888905 56     0.95     0.68     0.70     0     pdsd              
    5639   1292905     86276135 11     0.13     0.13     0.11     0     platform_mgr      
    6161   2831440     20952285 955    0.13     0.12     0.10     0     cpumemd    
    I can get more details required to resolve this, please help!!

    Hi,
    I can see several Mac Flaps in the logs provided.... i.e. on int gi 1/1/3.  have you verified you don't have any bridging loop occurring on the network?
    Regards,
    Yaseen

  • CBWFQ: Question about the output of "show policy-map interface" command

    Hi everyone,
    I have a question about the output of "show policy-map interface" command.
    The following is the output of this command and lower side of the output shows
    (total queued/total drops/no-buffer drops) 0/342/0
    If the packets drop occur due to the situation of no enough buffer,
    "no-buffer drops" counted up. But "no-buffer drops" has not been counted up.
    The "no-buffer drops" is 0 (zero) but "total drops" are counted as 342.
    I guess there are other factors except "no-buffer drops" to add "total drops".
    But I can not find any information about "other factors".
    So I would like to know the "other factors" added to "total drops".
    reserch-3725#sh policy-map interface fastethernet0/1
    FastEthernet0/1
    Service-policy output: shaping
    Class-map: kdpc (match-all)
    146956873 packets, 115209221595 bytes
    5 minute offered rate 156000 bps, drop rate 0 bps
    Match: access-group name YOKOHAMA_to_CHINO
    Traffic Shaping
    Target/Average Byte Sustain Excess Interval Increment
    Rate Limit bits/int bits/int (ms) (bytes)
    9360000/9360000 58500 234000 234000 25 29250
    Adapt Queue Packets Bytes Packets Bytes Shaping
    Active Depth Delayed Delayed Active
    - 0 146956724 3539850811 2960247 3851843541 no
    Class-map: class-default (match-any)
    552458414 packets, 249687580329 bytes
    5 minute offered rate 242000 bps, drop rate 0 bps
    Match: any
    Traffic Shaping
    Target/Average Byte Sustain Excess Interval Increment
    Rate Limit bits/int bits/int (ms) (bytes)
    3072000/3072000 19200 76800 76800 25 9600
    Adapt Queue Packets Bytes Packets Bytes Shaping
    Active Depth Delayed Delayed Active
    - 0 552453209 573909865 30358216 2926188156 no
    Service-policy : policy1
    Class-map: dlsw (match-all)
    979578 packets, 264843255 bytes
    5 minute offered rate 0 bps, drop rate 0 bps
    Match: access-group name acl-dlsw
    Queueing
    Output Queue: Conversation 137
    Bandwidth 128 (kbps) Max Threshold 64 (packets)
    (pkts matched/bytes matched) 20922/17371500
    (depth/total drops/no-buffer drops) 0/0/0
    Class-map: telnet (match-all)
    29938 packets, 1806058 bytes
    5 minute offered rate 0 bps, drop rate 0 bps
    Match: access-group name acl-telnet
    Queueing
    Output Queue: Conversation 138
    Bandwidth 64 (kbps) Max Threshold 64 (packets)
    (pkts matched/bytes matched) 639/38900
    (depth/total drops/no-buffer drops) 0/0/0
    Class-map: class-default (match-any)
    551448911 packets, 249420939729 bytes
    5 minute offered rate 242000 bps, drop rate 0 bps
    Match: any
    Queueing
    Flow Based Fair Queueing
    Maximum Number of Hashed Queues 128
    (total queued/total drops/no-buffer drops) 0/342/0
    Your information would be appreciated.

    Details infomatiuon regarding show policy-map interface
    http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a008010dd6a.shtml
    http://www.cisco.com/en/US/tech/tk543/tk760/technologies_tech_note09186a0080108e2d.shtml
    http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/qos_r/qos_s2g.htm#wp1146884

  • Packet drop

    we have leased line between two sites.
    one side we have 2800 series router with fastethernet port and other side we have firewall with giga
    port.
    Replication is done from router to firewall.
    When the replication starts packet is droping when we ping to firewall outside interface.
    Lease line is of 10Mbps link

    What type of replication?
    where do you see packet drop?
    Do you see some sylogs?
    Please provide some more information on this
    Regards,
    Sachin

Maybe you are looking for

  • Can't view page transitions

    I have added page transition to a pdf in Acrobat PRO 9 but can't see any effects.  I have checked my preferences and the box to ignore transitions is not checked.  Can anyone help?

  • Embedding swf into Flex Desktop Application size/scale problem.

    Hello, I am embedding an swf animation into my desktop Flex desktop application. I am using SDK 4.6.0. I use the SWFLoader to embed the animation: <s:SWFLoader source="img/mch_anim_1.swf"/> When I run the application, the animation is loaded and is w

  • How do I prevent icloud from overwriting my contacts when doing a restore backup from PC to iphone?

    My icloud contact list is screwed up. I have my contact list in my PC backup. I've removed icloud from iphone AND changed apple ID and icloud ID, yet when I attempt to restore backup from PC to iphone, my correct contact list shows up momentarily, th

  • AE not working with Leopard and fed up

    It happened a while ago, and set it up again, and again, again. It all stated after upgrading to Leopard Today I was about to listen to some music through AE, and once again it didn't work. I had the green light on, it shows as connected in my router

  • IWEB! important question

    Is it possible to use Iweb without .Mac? Is it possible to publish a website made on Iweb without having a .mac account? Thanks a lot