[c-nsp] Crazy control-plane CoPP counters?

[Robert Williams]

Hi All,

Does anyone know the command to clear the control-plane CoPP counters on a 6500 / Sup-720?

Or to debug why a particular counter is incrementing at an impossible rate?

We have a couple of counters which are going crazy (output below) and reading rates per second which are simply impossible. Even for the whole chassis.

#sh policy-map control-plane input
    class-map: CoPP-routing-ebgp-xxxxxx (match-any)
      Match: access-group 121
      police :
        175000 bps 250000 limit 250000 extended limit
      Earl in slot 1 :
        0 bytes
        5 minute offered rate 0 bps
        aggregate-forwarded 0 bytes action: transmit
        exceeded 0 bytes action: drop
        aggregate-forward 0 bps exceed 0 bps
      Earl in slot 5 :
        859 bytes
        5 minute offered rate 48 bps
        aggregate-forwarded 859 bytes action: transmit
        exceeded 0 bytes action: drop
        aggregate-forward 56 bps exceed 0 bps
      Earl in slot 8 :
        18446463698244514645 bytes
        5 minute offered rate 32755018000 bps
        aggregate-forwarded 0 bytes action: transmit
        exceeded 18446463698244514645 bytes action: drop
        aggregate-forward 0 bps exceed 3689348814741941472 bps
      Earl in slot 9 :
        0 bytes
        5 minute offered rate 0 bps
        aggregate-forwarded 0 bytes action: transmit
        exceeded 0 bytes action: drop
        aggregate-forward 0 bps exceed 0 bps


The class-map is:
Class Map match-any CoPP-routing-ebgp-xxxxxxx (id 37)
   Match access-group  121

The access list it matches is:
Extended IP access list 121
    10 permit tcp host x.x.x.x eq bgp any gt 1024 (168533 matches)
    20 permit tcp host x.x.x.x gt 1024 any eq bgp (1607 matches)


A different class-map is doing a similar thing, but for the Earl in slot 9, instead of slot 8. There are around 45 classes on the device, many of them have similar configs (matching ebgp sessions) and only two of them are behaving this way.

Running 15.1(1)SY with dual Supervisors. We have tried removing and re-attaching the CoPP itself, as well as completely deleting it and re-sending it, but nothing seems to clear the counter, or fix the underlying issue.

Modules are:

Mod Ports Card Type                              Model
--- ----- -------------------------------------- ------------------
  1    4  CEF720 4 port 10-Gigabit Ethernet      WS-X6704-10GE
  4   16  SFM-capable 16 port 10/100/1000mb RJ45 WS-X6516-GE-TX
  5    2  Supervisor Engine 720 (Active)         WS-SUP720-3BXL
  6    2  Supervisor Engine 720 (Hot)            WS-SUP720-3BXL
  7   16  SFM-capable 16 port 1000mb GBIC        WS-X6516A-GBIC
  8    4  CEF720 4 port 10-Gigabit Ethernet      WS-X6704-10GE
  9    8  CEF720 8 port 10GE with DFC            WS-X6708-10GE

Any pointers appreciated!

Best wishes,

Robert Williams
Custodian Data Centre
Email: Robert at CustodianDC.com
http://www.CustodianDC.com