[c-nsp] Netflow export error from C6506 (WS-X6704-10GE)

[Mack McBride]

Do you have a 'sh mls netflow table-contention detail'?
These figures don't match.
The ICAM 99% doesn't match the actual alias count.

Mack

-----Original Message-----
From: Stas Bakulin [mailto:stasbakulin at gmail.com] 
Sent: Wednesday, August 10, 2011 12:37 PM
To: Mack McBride
Cc: Peter Rathlev; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Netflow export error from C6506 (WS-X6704-10GE)

On two DFC simultaneously?)

6506#sh mls netflow table-contention summary
Earl in Module 2
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization             :   2%
ICAM Utilization             :   99%
Netflow Creation Failures    :   109465
Netflow CAM aliases          :   38
Earl in Module 3
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization             :   2%
ICAM Utilization             :   99%
Netflow Creation Failures    :   323735
Netflow CAM aliases          :   97
Earl in Module 6
Summary of Netflow CAM Utilization (as a percentage)
====================================================
TCAM Utilization             :   89%
ICAM Utilization             :   1%
Netflow Creation Failures    :   0
Netflow CAM aliases          :   0


Stas Bakulin
----------------------------------------------------------------------
ogion at kvant-telecom.ru | www.kvant-telecom.ru
Tel: +7 473 233 0330 (128)




On 10 August 2011 22:00, Mack McBride <mack.mcbride at viawest.com> wrote:
> It sounds like a hardware problem on the 6704s DFC.
> Getting that many collisions in the TCAM is really odd.
> You had the flow mask set to interface-full already.
> I can't see it getting any better.
> I can't think of anything causing that except a set of crafted packets.
>
> Mack
>
>
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Stas Bakulin
> Sent: Wednesday, August 10, 2011 4:52 AM
> To: Peter Rathlev
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] Netflow export error from C6506 (WS-X6704-10GE)
>
>> Stas: What kind of traffic does this box see? Is it Internet or
>> something else? Does the situation allow you to try changing the
>> flow-mask to see how that makes a difference?
>
> Internet.
> Changing flow-mask gave nothing.
>
> Stas Bakulin
> ----------------------------------------------------------------------
> ogion at kvant-telecom.ru | www.kvant-telecom.ru
> Tel: +7 473 233 0330 (128)
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>