[c-nsp] 6500 - What determines whether certain traffic is punted or not?

[Dean Smith]

Having spent the day chasing something identical.....for us is was that the
traffic was being redirected to another router on the inbound VLAN - every
packet needing a redirect gets punted. A few changes to topology and the
redirect requirement was removed and the traffic returned to being hardware
routed.

We also had span the RP before we worked out why the traffic was being
punted.

Dean

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Drew Weaver
Sent: 24 November 2009 16:33
To: Cisco-nsp
Subject: [c-nsp] 6500 - What determines whether certain traffic is punted or
not?

Howdy,

I've been having some issues with queue drops/CLI sluggishness on a 6500 and
I wanted to check what kind of volume of traffic I was getting punted to the
RP.

I made a span session and began checking out the traffic with tethereal.

It seems like a huge (30,000) or so packets every few seconds of just UDP
traffic is being punted.

The system is a Sup720-3BXL.

Does anyone know how to determine what kind of traffic should be punted to
the RP and more importantly why this UDP traffic is hitting the RP?

It almost looks like p2p traffic, but I also see other types of traffic, tcp
445, DNS, port 80, etc.

thanks,
-Drew

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/