[c-nsp] Netflow TCAM threshold exceeded

[Nicolaj Ottsen]

Hi, 

You can monitor the TCAM utils using "sh mls netflow table-contention
detailed". To get a historical view of lost flows, type "sh mls netflow
table-contention aggregate" and look for "Netflow creation failueres".

If you keep getting "Netflow creation failueres", you need to tweek the
aging settings. 

Our settings has been altered to :

mls aging fast time 5 threshold 32
mls aging long 300
mls aging normal 60
mls flow ip full

If you still get creation failueres, you need to enable netflow
aggreation, or upgrade to PFC3BXL witch has room for twice the amount og
netflow entries.

About aging, it is important to notice that the Fast, Normal and Long,
options does not relate to the speed with witch a flows get aged out, it
is a description og THREE different flow "types".  Fx. Fast aging
relates to dns quieries, Long aging relates to streaming radio, normal
aging relates to all the rest.

See
http://www.cisco.com/en/US/products/hw/switches/ps708/products_configura
tion_guide_chapter09186a0080160a2b.html for further details.

Nicolaj

> -----Original Message-----
> From: Kim Onnel [mailto:karim.adel at gmail.com] 
> Sent: 1. januar 2005 14:44
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] Netflow TCAM threshold exceeded
> 
> Hi,
> 
> On my 7609, with IOS 12.2(18)SXD with 512 MB of RAM, Netflow 
> was enabled but only showing Process switched ones, but then 
> i let it show the full CEF + process switched, the processing 
> is Ok, but i am getting  this all over my log
> 
> Dec 31 22:57:14: %EARL_NETFLOW-SP-4-TCAM_THRLD: Netflow TCAM 
> threshold exceeded, TCAM Utilization [97%]
> 
> Dec 31 22:58:20: %EARL_NETFLOW-SP-4-TCAM_THRLD: Netflow TCAM 
> threshold exceeded, TCAM Utilization [99%]
> 
> Dec 31 22:59:32: %EARL_NETFLOW-SP-4-TCAM_THRLD: Netflow TCAM 
> threshold exceeded, TCAM Utilization [94%]
> 
> So, i googled troubleshooting tcam, but didnt find anything useful, 
> 
> i'd welcome any comments, my questions is :
> 
> 1) how do i know if this is affecting anything else
> 2) incase its not, how do i not log this msg, increase the 
> Netflow tcam space or filter log ?
> 3) how do i really know my tcam is not full ?
> 
> Regards
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
>