05-22-2008 03:14 AM
I'm receiving a lot of messages from DFM 3.0.3 about High Discard Rate on 2650 switches running 12.1.19.EA1 IOS or 12.1-22.EA11 IOS
Here below the message:
EVENT ID = 000032R
ALERT ID = 000015M
TIME = Thu 22-May-2008 13:07:38 CEST
STATUS = Active
SEVERITY = Critical
MANAGED OBJECT = EPE-C2950T-40
MANAGED OBJECT TYPE = Switches and Hubs
EVENT DESCRIPTION = HighDiscardRate::Component=PORT-EPE-C2950T-40/0.26 [Gi0/2] ["Lien 100TX vers C2950SX-30"];ComponentClass=Port;ComponentEventCode=1048;Type=ETHERNETCSMACD;OutputPacketDiscardRate=0.0 PPS;MaxSpeed=100000000;InputPacketRate=1.7896142E7 PPS;MinimumDisc
I checked and checked again on interface and there is no discard on interface.
Here below some indicators about interface :
EPE-C2950T-40#sh controllers ethernet-controller gi0/2
Transmit Receive
2753458867 Bytes 229595350 Bytes
165237242 Frames 2125895994 Frames
507279 Multicast frames 2 FCS errors
185977 Broadcast frames 2864901552 Multicast frames
0 Pause frames 268001458 Broadcast frames
0 Single defer frames 0 Control frames
0 Multiple defer frames 0 Pause frames
0 1 collision frames 0 Unknown opcode frames
0 2-15 collisions 0 Alignment errors
0 Late collisions 0 Length out of range
0 Excessive collisions 0 Symbol error frames
0 Total collisions 2 False carrier errors
0 Control frames 0 Valid frames, too small
0 VLAN discard frames 0 Valid frames, too large
0 Too old frames 0 Invalid frames, too small
160579422 Tagged frames 0 Invalid frames, too large
0 Aborted Tx frames 0 Discarded frames
Transmit and Receive
10362321 Minimum size frames
3229838505 65 to 127 byte frames
Any ideas?
Thanks in advance.
05-22-2008 07:41 AM
The discard rate is clearly bogus (1.79x10^7 PPS). The device could be reporting bogus data via SNMP. It would help to see a sniffer trace covering two polling intervals of DFM to see exactly the data DFM is seeing.
05-27-2008 11:46 PM
Please find a sniffer trace (attachment)between LMS and switch at the time LMS sent a message.
Here below message from LMS:
EVENT ID = 00004WL
ALERT ID = 000017M
TIME = Tue 27-May-2008 22:07:38 CEST
STATUS = Active
SEVERITY = Critical
MANAGED OBJECT = EPE-C2950T-40
MANAGED OBJECT TYPE = Switches and Hubs
EVENT DESCRIPTION = HighDiscardRate::Component=PORT-EPE-C2950T-40/0.26 [Gi0/2] ["Lien 100TX vers C2950SX-30"];ComponentClass=Port;ComponentEventCode=1048;Type=ETHERNETCSMACD;OutputPacketDiscardRate=0.0 PPS;MaxSpeed=100000000;InputPacketRate=1.7821884E7 PPS;MinimumDisc
05-28-2008 09:37 AM
This decode is corrupt. Please post the binary sniffer file.
05-30-2008 07:21 AM
For security reason, I prefer to send you the decode directly. Is it possible?
05-30-2008 08:23 AM
You should open a TAC service request with this information then. That way you can have more privacy for your data.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: