[c-nsp] Risk of enabling ip accounting

Gert Doering gert at greenie.muc.de
Wed Oct 24 17:27:06 EDT 2007


Hi,

On Tue, Oct 23, 2007 at 10:37:56PM +0200, Vincent De Keyzer wrote:
> what is the level of risk involved in enabling IP accounting on an 
> interface?

Instant CPU death...

> More specifically, this is about a Catalyst 4948 doing L2/L3 and 
> switching a total of 100 Mbits in and out (CPU is around 15%).

I can't speak for the 4948, but my gut feeling is that you won't 
see proper numbers in there - most likely it will permit it, but then
only count packets that the CPU sees, but none of the packets being
forwarde by hardware.  (Which is what happens in 12.1 on the 3750s).

gert
-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert at greenie.muc.de
fax: +49-89-35655025                        gert at net.informatik.tu-muenchen.de


More information about the cisco-nsp mailing list