[c-nsp] Storm control - find out which vlan hits the limit

["Rolf Hanßen"]

Hi,

nobody an idea?
Tried Mini Protocol Analyzer but as far as I see I cannot combine with a
MAC address ACL.
In the meantime I got a server connected to the router and could export
the traffic via SPAN but still see no unusal broad-/multicast-spikes.

Can anybody confirm that the physical interface bandwidth is used for the
percentage calculation and not the current traffic?
I.e. 0.35% on a 10Gbit interface with 200MBit traffic will make storm
control drop everything above 35MBit (10000MBit*0.35%) and not 0.7MBit
(200MBit*0.35%), correct?

kind regards
Rolf


> Hello,
>
> I have a switchport interface (6704 card, Sup2T, IOS 15.1(2)SY1) with a
> few vlans (L2 + L3 mixed) on it that drops packets caused by storm
> control.
>
> sh interfaces counters storm-control:
> Port             UcastSupp %     McastSupp %     BcastSupp %
> TotalSuppDiscards
> Te9/3                 100.00            0.35            0.35
> 5800188
>
> I now would like to find out on which vlan I receive them.
> Unfortunatelly the non-unicast counters for all vlan-interfaces show 0,
> example:
>
> sh int vl300 | inc cast
>   L2 Switched: ucast: 8023503 pkt, 2642606815 bytes - mcast: 0 pkt, 0
> bytes
>   L3 in Switched: ucast: 120002757406 pkt, 16510187670768 bytes - mcast: 0
> pkt, 0 bytes
>   L3 out Switched: ucast: 75127991555 pkt, 65410581551697 bytes - mcast: 0
> pkt, 0 bytes
>      Received 0 broadcasts (0 IP multicasts)
>
> sh vlan id xxx counters also schows zeroes only for all vlans:
> Vlan Id                                            : 300
> L2 Unicast Packets                                 : 8023503
> L2 Unicast Octets                                  : 2642606815
> L3 Input Unicast Packets                           : 120008317418
> L3 Input Unicast Octets                            : 16512241861042
> L3 Output Unicast Packets                          : 75144910816
> L3 Output Unicast Octets                           : 65423693432219
> L3 Output Multicast Packets                        : 0
> L3 Output Multicast Octets                         : 0
> L3 Input Multicast Packets                         : 0
> L3 Input Multicast Octets                          : 0
> L2 Multicast Packets                               : 0
> L2 Multicast Octets                                : 0
>
> Is there a way to enable those counters or to find out which vlan receives
> those peaks without exporting the traffic to another system
> (SPAN,netflow,...)?
>
> kind regards
> Rolf
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>