Привет всем. Возникла такая странная проблема: имеется циска, недавно купленная, 7204VXR, NPE-400 c 512MB RAM. Два Fa интерфейса, один системный, другой для юзеров. Наблюдается такая картина: core#sh int fa 0/1 FastEthernet0/1 is up, line protocol is up Hardware is i82543 (Livengood), address is 0016.4622.dc06 (bia 0016.4622.dc06) MTU 1500 bytes, BW 10000000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 29155 Queueing strategy: fifo ^^^^^^^^^^^^^^ Output queue: 0/40 (size/max) 5 minute input rate 8829000 bits/sec, 1539 packets/sec 5 minute output rate 9221000 bits/sec, 1552 packets/sec 5142974 packets input, 3586703455 bytes Received 10763 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 6167849 packets output, 1602847003 bytes, 0 underruns 5 output errors, 0 collisions, 4 interface resets 0 babbles, 0 late collision, 0 deferred 5 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out И счетчик дропов постоянно растет. CPU utilization for five seconds: 12%/11%; one minute: 12%; five minutes: 15% Cisco 7204VXR (NPE400) processor (revision A) with 458752K/65536K bytes of memory. Processor board ID 33897223 R7000 CPU at 350MHz, Implementation 39, Rev 3.3, 256KB L2 Cache 4 slot VXR midplane, Version 2.11 System image file is "disk0:c7200-jk9o3s-mz.124-8.bin" Ктонить сталкивался с такой проблемой? ЗЫ: Патчкорд меняли, не помогло. -- Не важно, веришь ли ты в бога, важно верит ли он в тебя... -- SUI-UANIC GAS-RIPE ______________________________________________ --== ISP Zaporozhye On Line ==-- =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
Я так понимаю Fa0/1 - это интерфейс для юзеров?
И на нем стоят шейпера?
Тогда в total output drops попадают пакеты
которые дропаются из очередей этих шейперов.
----- Original Message -----
From: "Artem Grishin"
Привет всем.
Возникла такая странная проблема: имеется циска, недавно купленная, 7204VXR, NPE-400 c 512MB RAM.
Два Fa интерфейса, один системный, другой для юзеров. Наблюдается такая картина:
core#sh int fa 0/1 FastEthernet0/1 is up, line protocol is up Hardware is i82543 (Livengood), address is 0016.4622.dc06 (bia 0016.4622.dc06) MTU 1500 bytes, BW 10000000 Kbit, DLY 100 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, 100BaseTX/FX ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters never Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 29155 Queueing strategy: fifo ^^^^^^^^^^^^^^ Output queue: 0/40 (size/max) 5 minute input rate 8829000 bits/sec, 1539 packets/sec 5 minute output rate 9221000 bits/sec, 1552 packets/sec 5142974 packets input, 3586703455 bytes Received 10763 broadcasts, 0 runts, 0 giants, 0 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog 0 input packets with dribble condition detected 6167849 packets output, 1602847003 bytes, 0 underruns 5 output errors, 0 collisions, 4 interface resets 0 babbles, 0 late collision, 0 deferred 5 lost carrier, 0 no carrier 0 output buffer failures, 0 output buffers swapped out
И счетчик дропов постоянно растет.
CPU utilization for five seconds: 12%/11%; one minute: 12%; five minutes: 15%
Cisco 7204VXR (NPE400) processor (revision A) with 458752K/65536K bytes of memory. Processor board ID 33897223 R7000 CPU at 350MHz, Implementation 39, Rev 3.3, 256KB L2 Cache 4 slot VXR midplane, Version 2.11
System image file is "disk0:c7200-jk9o3s-mz.124-8.bin"
Ктонить сталкивался с такой проблемой? ЗЫ: Патчкорд меняли, не помогло.
-- Не важно, веришь ли ты в бога, важно верит ли он в тебя... -- SUI-UANIC GAS-RIPE ______________________________________________ --== ISP Zaporozhye On Line ==-- =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
=================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
On Tue, Oct 10, 2006 at 03:46:02PM +0300, Yury Yaroshevsky wrote:
Я так понимаю Fa0/1 - это интерфейс для юзеров? И на нем стоят шейпера?
Тогда в total output drops попадают пакеты которые дропаются из очередей этих шейперов.
Да, рейт-лимиты нарисованы. Но дело в том, что пакеты теряются. Пример: 15:53:10 root@suicide $ ping -i0.01 core ---cut--- --- core ping statistics --- 1034 packets transmitted, 1034 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.575/0.801/2.415/0.252 ms core#ping {мой тазик} source {адрес циски} rep 1000 Type escape sequence to abort. Sending 1000, 100-byte ICMP Echos to {мой тазик}, timeout is 2 seconds: Packet sent with a source address of {адрес циски} !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!. Success rate is 99 percent (995/1000), round-trip min/avg/max = 1/1/24 ms И так с любого интерфейса. -- Не важно, веришь ли ты в бога, важно верит ли он в тебя... -- SUI-UANIC GAS-RIPE ______________________________________________ --== ISP Zaporozhye On Line ==-- =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
On Tue, Oct 10, 2006 at 03:56:03PM +0300, Artem Grishin wrote:
On Tue, Oct 10, 2006 at 03:46:02PM +0300, Yury Yaroshevsky wrote:
Я так понимаю Fa0/1 - это интерфейс для юзеров? И на нем стоят шейпера?
Тогда в total output drops попадают пакеты которые дропаются из очередей этих шейперов.
Да, рейт-лимиты нарисованы. Но дело в том, что пакеты теряются. Пример: 15:53:10 root@suicide $ ping -i0.01 core ---cut---
--- core ping statistics --- 1034 packets transmitted, 1034 packets received, 0% packet loss round-trip min/avg/max/stddev = 0.575/0.801/2.415/0.252 ms
core#ping {мой тазик} source {адрес циски} rep 1000
Type escape sequence to abort. Sending 1000, 100-byte ICMP Echos to {мой тазик}, timeout is 2 seconds: Packet sent with a source address of {адрес циски} !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!.!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!!!!!!!!!!!!!!!!!!. Success rate is 99 percent (995/1000), round-trip min/avg/max = 1/1/24 ms
И так с любого интерфейса.
Все оказалось до простоты банально - Есть вышепоказанные потери: net.inet.icmp.icmplim=200 Нет вышеуказанных потерь: sysctl net.inet.icmp.icmplim=0 -- Не важно, веришь ли ты в бога, важно верит ли он в тебя... -- SUI-UANIC GAS-RIPE ______________________________________________ --== ISP Zaporozhye On Line ==-- =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message
participants (2)
-
Artem Grishin -
Yury Yaroshevsky