[c-nsp] Crazy control-plane CoPP counters?

[Robert Williams]

Hi,

I found that this can be cleared with a global "clear counters" however, it obviously resets everything, which is not ideal. So does anybody have a more specific 'clear' command for this?

Also, the massive counters issue was resolved by un-attaching *all* policy maps from *all* interfaces. (Not just the control-plane) - This was a last-ditch effort to resolve it and it worked. I guess that means software bug then...!

Cheers,



Robert Williams
Custodian Data Centre
Email: Robert at CustodianDC.com
http://www.CustodianDC.com

-----Original Message-----
From: cisco-nsp [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Robert Williams
Sent: 01 June 2013 16:30
To: 'ftpftp'
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Crazy control-plane CoPP counters?

Hi,

Yup - unfortunately that command doesn’t seem to be present on 15.1(1)SY or 12.2(33)SXJ

Cheers!



Robert Williams
Custodian Data Centre
Email: Robert at CustodianDC.com
http://www.CustodianDC.com

-----Original Message-----
From: ftpftp [mailto:ftpftp at volny.cz]
Sent: 01 June 2013 16:27
To: Robert Williams
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Crazy control-plane CoPP counters?

Dne 1.6.2013 16:50, Robert Williams napsal(a):
> Hi All,
>
> Does anyone know the command to clear the control-plane CoPP counters on a 6500 / Sup-720?
clear control-plane *

Works for me, but I presume you have already tried this.

(WS-C6509-E) - 122-33.SRE3

   Supervisor Engine 720 (Active)         WS-SUP720-3BXL
   Supervisor Engine 720 (Hot)            WS-SUP720-3BXL


J.Ondracek
Dial Telecom, a.s.

>
> Or to debug why a particular counter is incrementing at an impossible rate?
>
> We have a couple of counters which are going crazy (output below) and reading rates per second which are simply impossible. Even for the whole chassis.
>
> #sh policy-map control-plane input
>      class-map: CoPP-routing-ebgp-xxxxxx (match-any)
>        Match: access-group 121
>        police :
>          175000 bps 250000 limit 250000 extended limit
>        Earl in slot 1 :
>          0 bytes
>          5 minute offered rate 0 bps
>          aggregate-forwarded 0 bytes action: transmit
>          exceeded 0 bytes action: drop
>          aggregate-forward 0 bps exceed 0 bps
>        Earl in slot 5 :
>          859 bytes
>          5 minute offered rate 48 bps
>          aggregate-forwarded 859 bytes action: transmit
>          exceeded 0 bytes action: drop
>          aggregate-forward 56 bps exceed 0 bps
>        Earl in slot 8 :
>          18446463698244514645 bytes
>          5 minute offered rate 32755018000 bps
>          aggregate-forwarded 0 bytes action: transmit
>          exceeded 18446463698244514645 bytes action: drop
>          aggregate-forward 0 bps exceed 3689348814741941472 bps
>        Earl in slot 9 :
>          0 bytes
>          5 minute offered rate 0 bps
>          aggregate-forwarded 0 bytes action: transmit
>          exceeded 0 bytes action: drop
>          aggregate-forward 0 bps exceed 0 bps
>
>
> The class-map is:
> Class Map match-any CoPP-routing-ebgp-xxxxxxx (id 37)
>     Match access-group  121
>
> The access list it matches is:
> Extended IP access list 121
>      10 permit tcp host x.x.x.x eq bgp any gt 1024 (168533 matches)
>      20 permit tcp host x.x.x.x gt 1024 any eq bgp (1607 matches)
>
>
> A different class-map is doing a similar thing, but for the Earl in slot 9, instead of slot 8. There are around 45 classes on the device, many of them have similar configs (matching ebgp sessions) and only two of them are behaving this way.
>
> Running 15.1(1)SY with dual Supervisors. We have tried removing and re-attaching the CoPP itself, as well as completely deleting it and re-sending it, but nothing seems to clear the counter, or fix the underlying issue.
>
> Modules are:
>
> Mod Ports Card Type                              Model
> --- ----- -------------------------------------- ------------------
>    1    4  CEF720 4 port 10-Gigabit Ethernet      WS-X6704-10GE
>    4   16  SFM-capable 16 port 10/100/1000mb RJ45 WS-X6516-GE-TX
>    5    2  Supervisor Engine 720 (Active)         WS-SUP720-3BXL
>    6    2  Supervisor Engine 720 (Hot)            WS-SUP720-3BXL
>    7   16  SFM-capable 16 port 1000mb GBIC        WS-X6516A-GBIC
>    8    4  CEF720 4 port 10-Gigabit Ethernet      WS-X6704-10GE
>    9    8  CEF720 8 port 10GE with DFC            WS-X6708-10GE
>
> Any pointers appreciated!
>
> Best wishes,
>
> Robert Williams
> Custodian Data Centre
> Email: Robert at CustodianDC.com
> http://www.CustodianDC.com
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/