[j-nsp] Flow sampling broken?

Alfred Schweder alf at all.de
Tue Dec 11 11:00:33 EST 2012


Hello

I use flow sampling for a long time, but after a software update to
11.4R5.5 it seems to be broken. Some other software versions seems
also affected. Which junos version support netflow sampling with
an advanced service pic again?

NTP is working fine, and the configuration is working:
alf at m40e# show forwarding-options sampling 
input {
    rate 1000;
    run-length 2;
    max-packets-per-second 2000;
}
family inet {
    output {
        aggregate-export-interval 150;
        flow-inactive-timeout 15;
        flow-active-timeout 60;
        flow-server 192.168.214.53 {
            port 5556;
            autonomous-system-type origin;
            no-local-dump;
            source-address 192.168.214.40;
            version 5;
        }
        interface sp-7/0/0 {
            engine-id 65;
            engine-type 189;
            source-address 192.168.214.40;
        }
    }
}

After the pic is started all seems to be fine - for a while:
alf at m40e# run show chassis pic fpc-slot 7 pic-slot 0    
FPC slot 7, PIC slot 0 information:
  Type                             Adaptive Services
  State                            Online    
  PIC version                 1.13
  CPU load average               0 percent
  Interrupt load average         1 percent
  Total DRAM size              256 MB
  Memory buffer utilization      0 percent
  Memory heap utilization       66 percent
  Uptime                         4 minutes, 19 seconds

alf at m40e# run show services accounting errors  
Service Accounting interface: sp-7/0/0, Local interface index: 142
Service name: (default sampling)
Interface state: Accounting
  Error information
    Packets dropped (no memory): 0, Packets dropped (not IP): 0
    Packets dropped (not IPv4): 0, Packets dropped (header too small): 0
    Memory allocation failures: 0, Memory free failures: 0
    Memory free list failures: 0
    Memory warning: No, Memory overload: No, PPS overload: No, BPS overload: No

alf at m40e# run show services accounting flow    
Service Accounting interface: sp-7/0/0, Local interface index: 151
Service name: (default sampling)
Interface state: Accounting
  Flow information
    Flow packets: 14691, Flow bytes: 5850186
    Flow packets 10-second rate: 67, Flow bytes 10-second rate: 25961
    Active flows: 529, Total flows: 8110
    Flows exported: 7591, Flows packets exported: 343
    Flows inactive timed out: 7581, Flows active timed out: 18

But the ASP Heap is increasing:

alf at m40e# run show chassis pic fpc-slot 7 pic-slot 0    
FPC slot 7, PIC slot 0 information:
  Type                             Adaptive Services
  State                            Online    
  PIC version                 1.13
  CPU load average               0 percent
  Interrupt load average         0 percent
  Total DRAM size              256 MB
  Memory buffer utilization      0 percent
  Memory heap utilization       93 percent
  Uptime                         9 minutes, 35 seconds

When the heap reach 98/99 percent, sampling is stop:

alf at m40e# run show services accounting flow      
Service Accounting interface: sp-7/0/0, Local interface index: 151
Service name: (default sampling)
Interface state: Accounting
  Flow information
    Flow packets: 17672, Flow bytes: 7044996
    Flow packets 10-second rate: 0, Flow bytes 10-second rate: 0
    Active flows: 0, Total flows: 9381
    Flows exported: 9391, Flows packets exported: 429
    Flows inactive timed out: 9381, Flows active timed out: 18

alf at m40e# run show services accounting errors    
Service Accounting interface: sp-7/0/0, Local interface index: 151
Service name: (default sampling)
Interface state: Accounting
  Error information
    Packets dropped (no memory): 58079, Packets dropped (not IP): 0
    Packets dropped (not IPv4): 0, Packets dropped (header too small): 0
    Memory allocation failures: 0, Memory free failures: 0
    Memory free list failures: 5
    Memory warning: Yes, Memory overload: No, PPS overload: No, BPS overload: No

-- 
Regards,
Alf



More information about the juniper-nsp mailing list