[c-nsp] CPU SPAN on Sup2T / IOS 15?

[Pete Lumbis]

Peter,

CPU span on sup2t is unfortunately not implemented. It sounds like there
are both software and hardware limitations to making it happen so it may
never show up. There's an internal but I'll work on pushing external
(meaning currently it's pretty useless but give it 24-48 hours), CSCsz68416.

You can use flexible netflow on the control-plane interface, but that won't
be very helpful here.
You could rely on netdr to capture packets and tie it to an EEM script to
stop a circular capture when the problem happens.
https://supportforums.cisco.com/document/59956/troubleshooting-netdr-capture-sup7206500




On Tue, Apr 22, 2014 at 4:04 AM, Peter Rathlev <peter at rathlev.dk> wrote:

> Would anyone know how to SPAN the CPU of a Sup2T running IOS 15? The
> monitor session configuration doesn't include "source cpu" anymore:
>
> Sup2T(config)#monitor session 1 type erspan-source
> Sup2T(config-mon-erspan-src)#source ?
>   interface                   SPAN source interface
>   intrusion-detection-module  SPAN source intrusion-detection-module
>   vlan                        SPAN source VLAN
>
> Sup2T(config-mon-erspan-src)#exit
> Sup2T(config)#
> Sup2T(config)#monitor session 2 source ?
>   interface                   SPAN source interface
>   intrusion-detection-module  SPAN source intrusion-detection-module
>   remote                      SPAN source Remote
>   vlan                        SPAN source VLAN
>
> Sup2T(config)#
> Sup2T(config)#do show version | include image file
> System image file is "bootdisk:/s2t54-advipservicesk9-mz.SPA.151-1.SY3.bin"
> Sup2T(config)#
>
> We have a box the sometimes loses IS-IS adjacencies to several neighbors
> and even though the CPU (a per "show processes cpu history") does not
> seem to be overloaded I feel it's related to some kind of flooding on a
> locally connected VLAN. So I'd like to see what is sent to the RP when
> it happens.
>
> Suggestion of other ways of capturing traffic to the RP are welcome.
>
> I found the same question here with no answer:
>
>
> https://supportforums.cisco.com/discussion/11613461/source-cpu-command-not-15x
>
> TIA.
>
> --
> Peter
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>