sh cef drop high Encap_fail counters on 6509

Unanswered Question
Aug 6th, 2009
User Badges:

I've been experiencing drops from the server network to clients intermittently.

doing a sh cef drop on the L3 switch that the servers are connected to the Encap_fail counters increase about 10 per second. Do I have a cef problem?

I'm on version 12.2(18)SXF13

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Laurent Aubert Fri, 08/07/2009 - 06:02
User Badges:
  • Cisco Employee,


This counter means no ARP entry had been found for this IP packet. There are two root cause:

1- No answer to ARP request. Yo uwill see the cef entry marked as glean in this case

2- No ARP request send due to the throttling which protects the CPU in case of ARP request flooding.

To see if it's related, you should see if the MAC entries for your servers are stable. You could also check for any congestion point between the servers and the clients



rmoneal Fri, 08/07/2009 - 06:11
User Badges:

The mac entries are not stable. Even after pinging its IP successfully, the MAC address was not in the table:

Error: Destination Mac address not found.

Layer2 trace aborted.


This Discussion