[c-nsp] Cisco 7204VXR with NPE-G1 high CPU and output drops

[Youssef Bengelloun-Zahr]

Hello,

We are talking about DSL links here.

I think I have to activate this under the interface Virtual-template in
order to see what link is flooding my equipment with packets.

Still, I am concerned with the impact on the performances of my router.

Any advice ?

Best regards.

Y.



2010/4/23 Yap Chin Hoong - <yapchinhoong at hotmail.com>

>  Hi Youssef,
>
>    Try to enable 'ip route-cache flow' command on the interfaces and use
> the 'show ip cache flow' command to find out the PC. Try to see which
> machine are initiating connections in sequence, eg: you see a particular IP
> address initiating connections to 192.168.1.1, 192.168.1.2, 192.168.1.3, ...
>
>    Another technology that you may look into is NBAR. Hope this helps. :-)
>
> regards,
> YapCH
> http://itcertguides.blogspot.com/
>
> ------------------------------
> Date: Thu, 22 Apr 2010 23:30:55 +0200
>
> Subject: Re: [c-nsp] Cisco 7204VXR with NPE-G1 high CPU and output drops
> From: youssef at 720.fr
> To: yapchinhoong at hotmail.com
> CC: cisco-nsp at puck.nether.net
>
> Hello,
>
> Looks like my miseries are related to some kind of creepy dirty client DSL
> link with a zombie PC that's spamming or something like that. It's not a
> question of volume but more a matter of packets to forward :-/
>
> For information, the problem moved from one router to another identical one
> and I can see the exact same symptoms. Gotta find the guilty bastard ;-)
>
> The router has an NPE-G1 and it's Gig interface that's experiencing the
> problem.
>
> Does someone have some advice / tool / magical command to mitigate this
> kind of problem ?
>
> Thanks for your advice.
>
> Y.
>
>
> ------------------------------
> Hotmail is redefining busy with tools for the New Busy. Get more from your
> inbox. See how.<http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_2>
>



-- 
Youssef BENGELLOUN-ZAHR ………………………………………………
Ingénieur Réseaux et Télécoms


Technopole de l'Aube  en Champagne - BP 601 - 10901 TROYES  Cedex 9
Agence Paris : 6, rue Charles Floquet - 92120 MONTROUGE
Tel                 +33 (0) 825 000 720
Tel. direct      +33 (0) 1 77 35 59 14
Tel. portable  +33 (0) 6 22 42 63 80
Email            ybz at 720.fr
……………………………………………………………………………….....www.720.fr