[c-nsp] Cisco 7204VXR with NPE-G1 high CPU and output drops

[Yap Chin Hoong -]

Hi Youssef,
   Try to enable 'ip route-cache flow' command on the interfaces and use the 'show ip cache flow' command to find out the PC. Try to see which machine are initiating connections in sequence, eg: you see a particular IP address initiating connections to 192.168.1.1, 192.168.1.2, 192.168.1.3, ...
   Another technology that you may look into is NBAR. Hope this helps. :-)
regards,YapCHhttp://itcertguides.blogspot.com/

Date: Thu, 22 Apr 2010 23:30:55 +0200
Subject: Re: [c-nsp] Cisco 7204VXR with NPE-G1 high CPU and output drops
From: youssef at 720.fr
To: yapchinhoong at hotmail.com
CC: cisco-nsp at puck.nether.net

Hello,



Looks like my miseries are related to some kind of creepy dirty client DSL link
 with a zombie PC that's spamming or something like that. It's not a question of volume but more a matter of packets to forward :-/



For information, the problem moved from one router to another identical 
one and I can see the exact same symptoms. Gotta find the guilty bastard ;-)



The router has an NPE-G1 and it's Gig interface that's experiencing the problem.

Does someone have some advice / tool / magical command to mitigate this kind of problem ?

Thanks for your advice.


Y.

 		 	   		  
_________________________________________________________________
Hotmail is redefining busy with tools for the New Busy. Get more from your inbox.
http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_2