1. Home
  2. Cisco Systems
  3. Cat 4000 Crazy Port Statistics.

Cat 4000 Crazy Port Statistics.

Hey Guys

This Problem has been giving me sleepless nights from a Month now.

We have a cisco 4006. We run OSPF and BGP. There are two ports on the switch that are connected to the Core Routers. The Stats on these ports are crazy. Here is what I get when I see these Interfaces

FastEthernet2/48 is up, line protocol is up Hardware is Fast Ethernet Port, address is Internet address is X.X.X.251/28 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 251/255, rxload 3/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output never, output hang never Last clearing of "show interface" counters 6w2d Input queue: 31402/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 1383000 bits/sec, 920 packets/sec 5 minute output rate 500224000 bits/sec, 33987277 packets/sec 2481037660 packets input, 454955876 bytes, 0 no buffer Received 3267143 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected 2047853408 packets output, 1214833509 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out

FastEthernet2/47 is up, line protocol is up Hardware is Fast Ethernet Port, address is Internet address is X.X.X.232/28 MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec, reliability 255/255, txload 246/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output never, output hang never Last clearing of "show interface" counters 6w2d Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 0 bits/sec, 0 packets/sec 5 minute output rate 96648000 bits/sec, 5310567 packets/sec 1046861 packets input, 123914863 bytes, 0 no buffer Received 934185 broadcasts, 0 runts, 0 giants, 0 throttles 1987 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 input packets with dribble condition detected 363290167 packets output, 3566189248 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out

These are 100Mb ports. Howcan they do like 500 Mb/sec. Doesnt make sense to me. The Ports would be less than 100Mb at one moment and then just shoot up to 300-400 Mb another moment with millions of packets per second. Doesnt make sense to me. However, the MRTG never shows more than 9-10 Mb. Any Clues.

Any help will be appreciated.

Thanx

Reply to
hmadra
Loading thread data ...

There is no evedince here of a need to worry.

The thing here is that you have another 'opinion' on the stats. The equipment on the other end of the links should have the opposite readings. If they disagree then at least one of them is wrong.

The above line often does not seem to have the correct info.

Input Queue is ridiculous.

1,400 bit average packet size. OK.
15 bit average packet size. Standard says min is 512 bits.

In summary as you state these counters are impossible. The switch has a bug or bugs, most likely in the software but I guess just possibly a hardware fault.

My first idea is to instead use the counters on the other end of the link.

Cisco counters are usually quite reliable although I have seen, I think, something like it before.

/Much/ worwse that the 500Mbps (i.e. x5) are the

34 Million packets per second. This is say 200 times the max packet rate of a fast ethernet which is 144,000 packets per second.

If you have a support consider contract upgrading the software.

If you post a show ver from the switches then I will have a look for reported bugs.

One possibility is that the counters go wrong after time. I would try issuing a "clear counters" and see if the numbers are sane for a while. If you have never done that before then I suggest that you do it out of production hours. Just in case.

Good luck.

Reply to
anybody43

Hi hmadra

If the hardware is OK, Maybe is a Virus or Spyware problem. Do you sniffer this port? To find out which traffic could lead so high txload. At normal network situation, Have this ratio of TX and RX Maybe Cable problem or interference problem. Change a cable maybe fix this problem . Is there a UPS nearby? this is my 2 cent.

kevin.rong

Reply to
kevin

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.