[c-nsp] CoPP IS-IS traffic on N7k

[Phil Mayers]

On 01/24/2011 11:02 PM, Brandon Ewing wrote:
> On Tue, Jan 25, 2011 at 05:44:30AM +0700, Roland Dobbins wrote:
>>
>> On Jan 25, 2011, at 5:37 AM, Lincoln Dale wrote:
>>
>>> key is probably to find out what traffic is hitting it.
>>
>> NetFlow may be useful to help determine this, as well.
>>
>
> Out of curiousity, what "interface" does the Sup720 list in Netflow when
> control plane traffic is passed to the route processor?  I tried the ones

For the sake of clarity, I note the OP is not talking about a sup720.

But on *our* sup720 boxes, it's "0". I usually use:

nfdump -r.... "out if 0"

...unfortunately that catches ACL drops (if you have netflow export for 
those enabled) as well as a few other things.

I can't remember if it matches Null0. Tediously inconsistent :o(

I normally end up using ERSPAN for any serious "what hitting the CPU" 
diagnosis.