[c-nsp] RP PAS iEdge output drops
Renato Ornelas
renato at openx.com.br
Wed Jul 10 21:14:18 EDT 2013
Hello!
I have a Cisco 7206-NPE-G1 (Version 15.2(4)M3) used as PPPOE access server.
With about 180Mbit/s (input traffic on G0/1) i have about 65% of CPU usage
(1.8k users, 75% CPU). Right now there's about 1450 PPPoE sessions up on 26
VLANs (all on G0/2).
CPU usage is very high due to interrupts:
CPU utilization for five seconds: 62%/53%; one minute: 63%; five minutes:
64%
On my debugging I saw the *RP PAS iEdge output* increasing very much, but
didn't find any docs about iEdge.
PPPOE-BOX#sh ip cef switching statistics feature
IPv4 CEF input features:
Path Feature Drop Consume Punt Punt2Host Gave
route
RP PAS iEdge 891047 0 0 0
0
Total 891047 0 0 0
0
IPv4 CEF output features:
Path Feature Drop Consume Punt Punt2Host New
i/f
RP PAS iEdge 7345601 0 0 0
0
Total 7345601 0 0 0
0
Some of the traffic I got on the debuggin ip cef drops (the source IP
normally is from google or akamai servers):
*Jul 10 14:23:21.444: CEF-Drop: Packet from 208.117.252.52 (Gi0/1)
to xx.xx.xx.185 (Vi2.1174), Output feature iEdge
*Jul 10 14:23:21.444: ihl=20, length=1492, tos=0, ttl=58, checksum=65421,
offset=0 DF
*Jul 10 14:23:21.444: TCP src=80, dst=20172, seq=2348994103,
ack=2111570742, win=320 ACK
*Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.196 (Gi0/1)
to xx.xx.xx.40 (Vi2.42), Output feature iEdge
*Jul 10 14:23:21.444: ihl=20, length=1470, tos=0, ttl=58, checksum=14648,
offset=0
*Jul 10 14:23:21.444: TCP src=443, dst=49451, seq=3087091975,
ack=922028286, win=1002 ACK
*Jul 10 14:23:21.444: CEF-Drop: Packet from 74.125.234.34 (Gi0/1)
to xx.xx.xx.90 (Vi2.1366), Output feature iEdge
*Jul 10 14:23:21.444: ihl=20, length=1470, tos=0, ttl=59, checksum=28825,
offset=0
*Jul 10 14:23:21.444: TCP src=80, dst=2855, seq=1014058092,
ack=1851824944, win=63784 ACK
*Jul 10 14:23:21.448: CEF-Drop: Packet from 74.125.234.34 (Gi0/1)
to xx.xx.xx.90 (Vi2.1366), Output feature iEdge
*Jul 10 14:23:21.448: ihl=20, length=1470, tos=0, ttl=59, checksum=28824,
offset=0
*Jul 10 14:23:21.448: TCP src=80, dst=2855, seq=1014059522,
ack=1851824944, win=63784 ACK
Thanks for your attention!
--
*Renato Ornelas | **Open X *- Soluções para ISPs
(31) 9145.0190
renato at openx.com.br
http://www.openx.com.br
More information about the cisco-nsp
mailing list