05-05-2012 09:51 AM - edited 03-07-2019 06:31 AM
I am having some issues on my network and i think i have narrowed them down to a single switch.
On this switch the following logs can be seen
2147482407 05-May-2012 15:40:54 Informational %AAA-I-CONNECT: New http connection for user admin, source 10.0.5.135 destination 10.0.5.172 ACCEPTED
2147482431 05-May-2012 09:03:31 Warning %STP-W-PORTSTATUS: g13: STP status Forwarding
2147482432 05-May-2012 09:03:01 Informational %LINK-I-Up: g13
2147482433 05-May-2012 09:02:59 Warning %LINK-W-Down: g13
2147482434 05-May-2012 09:02:50 Informational %LINK-I-Up: g13
2147482435 05-May-2012 09:02:48 Warning %LINK-W-Down: g13
2147482436 05-May-2012 09:02:34 Informational %LINK-I-Up: g13
2147482437 05-May-2012 09:02:31 Warning %LINK-W-Down: g13
2147482438 05-May-2012 09:02:29 Informational %LINK-I-Up: g13
2147482439 05-May-2012 09:02:27 Warning %LINK-W-Down: g13
2147482440 05-May-2012 09:02:19 Informational %LINK-I-Up: g13
2147482441 05-May-2012 09:02:16 Warning %LINK-W-Down: g13
2147482442 05-May-2012 09:02:09 Informational %LINK-I-Up: g13
2147482443 05-May-2012 09:02:07 Warning %LINK-W-Down: g13
2147482444 05-May-2012 09:01:58 Informational %LINK-I-Up: g13
2147482445 05-May-2012 09:01:56 Warning %LINK-W-Down: g13
2147482446 05-May-2012 09:01:42 Informational %LINK-I-Up: g13
2147482447 05-May-2012 09:01:39 Warning %LINK-W-Down: g13
2147482448 05-May-2012 09:01:36 Informational %LINK-I-Up: g13
2147482449 05-May-2012 09:01:34 Warning %LINK-W-Down: g13
2147482450 05-May-2012 09:01:28 Informational %LINK-I-Up: g13
2147482451 05-May-2012 09:01:26 Warning %LINK-W-Down: g13
2147482455 05-May-2012 08:04:07 Warning %AAA-W-REJECT: New http connection for user unKnown, source 10.0.5.29 destination 10.0.5.172 REJECTED
2147482456 05-May-2012 08:03:10 Warning %SNMP-W-SNMPAUTHFAIL: Access attempted by unauthorized NMS
2147482478 05-May-2012 02:08:22 Warning %STP-W-PORTSTATUS: g27: STP status Forwarding
2147482479 05-May-2012 02:07:52 Informational %LINK-I-Up: g27
2147482480 05-May-2012 02:07:50 Warning %LINK-W-Down: g27
2147482482 05-May-2012 02:01:54 Warning %LINK-W-Down: g39
2147482483 05-May-2012 01:59:21 Warning %STP-W-PORTSTATUS: g39: STP status Forwarding
2147482484 05-May-2012 01:58:51 Informational %LINK-I-Up: g39
2147482485 05-May-2012 01:58:49 Warning %LINK-W-Down: g39
2147482486 05-May-2012 01:58:34 Warning %STP-W-PORTSTATUS: g39: STP status Forwarding
2147482487 05-May-2012 01:58:04 Informational %LINK-I-Up: g39
2147482501 04-May-2012 22:20:36 Warning %STP-W-PORTSTATUS: g7: STP status Forwarding
2147482503 04-May-2012 22:20:08 Informational %LINK-I-Up: g7
2147482504 04-May-2012 22:20:04 Warning %LINK-W-Down: g7
2147482506 04-May-2012 21:56:27 Warning %LINK-W-Down: g25
2147482509 04-May-2012 21:20:39 Warning %STP-W-PORTSTATUS: g7: STP status Forwarding
2147482510 04-May-2012 21:20:09 Informational %LINK-I-Up: g7
2147482511 04-May-2012 21:20:07 Warning %LINK-W-Down: g7
2147482512 04-May-2012 21:14:22 Informational %AAA-I-DISCONNECT: http connection for user admin, source 10.0.5.135 destination 10.0.5.172 TERMINATED
2147482514 04-May-2012 21:07:16 Warning %LINK-W-Down: g31
2147482515 04-May-2012 21:02:57 Warning %LINK-W-Down: g35
2147482516 04-May-2012 20:56:59 Warning %LINK-W-Down: g28
2147482518 04-May-2012 20:52:33 Warning %LINK-W-Down: g42
2147482519 04-May-2012 20:44:27 Informational %LINK-I-Up: g31
2147482520 04-May-2012 20:44:15 Informational %AAA-I-DISCONNECT: http connection for user admin, source 10.0.5.32 destination 10.0.5.172 TERMINATED
2147482522 14-Nov-2009 14:50:39 Warning %LINK-W-Down: g39
2147482523 14-Nov-2009 14:46:34 Informational %AAA-I-CONNECT: New http connection for user admin, source 10.0.5.135 destination 10.0.5.172 ACCEPTED
2147482524 14-Nov-2009 14:44:51 Warning %LINK-W-Down: g31
2147482525 14-Nov-2009 14:37:46 Informational %AAA-I-CONNECT: New http connection for user admin, source 10.0.5.32 destination 10.0.5.172 ACCEPTED
2147482526 14-Nov-2009 14:34:42 Informational %AAA-I-DISCONNECT: http connection for user admin, source 10.0.5.135 destination 10.0.5.172 TERMINATED
2147482527 14-Nov-2009 14:23:23 Informational %LINK-I-Up: g31
2147482528 14-Nov-2009 14:21:25 Informational %AAA-I-CONNECT: New http connection for user admin, source 10.0.5.135 destination 10.0.5.172 ACCEPTED
2147482529 14-Nov-2009 14:19:38 Warning %STP-W-PORTSTATUS: g42: STP status Forwarding
2147482530 14-Nov-2009 14:19:08 Informational %LINK-I-Up: g42
2147482531 14-Nov-2009 14:17:37 Warning %AAA-W-REJECT: New http connection for user unKnown, source 10.0.5.29 destination 10.0.5.172 REJECTED
2147482532 14-Nov-2009 14:16:56 Warning %SNMP-W-SNMPAUTHFAIL: Access attempted by unauthorized NMS
2147482533 14-Nov-2009 14:15:11 Informational %AAA-I-DISCONNECT: http connection for user admin, source 10.0.5.135 destination 10.0.5.172 TERMINATED
2147482534 14-Nov-2009 14:14:14 Warning %LINK-W-Down: g42
2147482535 14-Nov-2009 14:03:36 Informational %AAA-I-CONNECT: New http connection for user admin, source 10.0.5.135 destination 10.0.5.172 ACCEPTED
2147482536 14-Nov-2009 14:00:38 Warning %STP-W-PORTSTATUS: g42: STP status Forwarding
2147482537 14-Nov-2009 14:00:08 Informational %LINK-I-Up: g42
2147482538 14-Nov-2009 14:00:05 Warning %LINK-W-Down: g42
2147482539 14-Nov-2009 13:59:41 Informational %LINK-I-Up: g42
2147482540 14-Nov-2009 13:59:21 Warning %LINK-W-Down: g42
2147482541 14-Nov-2009 13:57:48 Informational %AAA-I-DISCONNECT: http connection for user admin, source 10.0.5.135 destination 10.0.5.172 TERMINATED
2147482542 14-Nov-2009 13:45:43 Informational %AAA-I-CONNECT: New http connection for user admin, source 10.0.5.135 destination 10.0.5.172 ACCEPTED
2147482544 14-Nov-2009 13:35:32 Warning %LINK-W-Down: g26
2147482545 14-Nov-2009 12:30:38 Warning %STP-W-PORTSTATUS: g13: STP status Forwarding
2147482546 14-Nov-2009 12:30:08 Informational %LINK-I-Up: g13
2147482547 14-Nov-2009 12:30:06 Warning %LINK-W-Down: g13
2147482548 14-Nov-2009 11:51:41 Warning %LINK-W-Down: g1
2147482550 14-Nov-2009 10:05:51 Warning %STP-W-PORTSTATUS: g26: STP status Forwarding
2147482551 14-Nov-2009 10:05:21 Informational %LINK-I-Up: g26
2147482552 14-Nov-2009 10:05:18 Warning %LINK-W-Down: g26
2147482553 14-Nov-2009 09:53:06 Warning %STP-W-PORTSTATUS: g26: STP status Forwarding
2147482554 14-Nov-2009 09:52:36 Informational %LINK-I-Up: g26
2147482555 14-Nov-2009 09:52:34 Warning %LINK-W-Down: g26
2147482556 14-Nov-2009 09:22:04 Warning %STP-W-PORTSTATUS: g1: STP status Forwarding
2147482557 14-Nov-2009 09:21:34 Informational %LINK-I-Up: g1
2147482558 14-Nov-2009 09:21:32 Warning %LINK-W-Down: g1
2147482559 14-Nov-2009 09:21:31 Informational %LINK-I-Up: g1
2147482560 14-Nov-2009 09:21:28 Warning %LINK-W-Down: g1
2147482561 14-Nov-2009 09:21:06 Informational %LINK-I-Up: g1
2147482562 14-Nov-2009 09:20:58 Warning %LINK-W-Down: g1
2147482563 14-Nov-2009 09:17:05 Warning %STP-W-PORTSTATUS: g7: STP status Forwarding
2147482564 14-Nov-2009 09:16:35 Informational %LINK-I-Up: g7
2147482565 14-Nov-2009 09:16:28 Warning %LINK-W-Down: g7
2147482566 14-Nov-2009 09:16:15 Informational %LINK-I-Up: g7
2147482567 14-Nov-2009 09:16:12 Warning %LINK-W-Down: g7
2147482568 14-Nov-2009 09:16:00 Informational %LINK-I-Up: g7
2147482569 14-Nov-2009 09:14:46 Warning %LINK-W-Down: g7
2147482570 14-Nov-2009 08:52:46 Warning %STP-W-PORTSTATUS: g13: STP status Forwarding
2147482571 14-Nov-2009 08:52:16 Informational %LINK-I-Up: g13
2147482572 14-Nov-2009 08:52:14 Warning %LINK-W-Down: g13
2147482573 14-Nov-2009 08:50:28 Warning %STP-W-PORTSTATUS: g13: STP status Forwarding
2147482574 14-Nov-2009 08:49:58 Informational %LINK-I-Up: g13
2147482575 14-Nov-2009 08:49:56 Warning %LINK-W-Down: g13
2147482576 14-Nov-2009 08:48:16 Warning %STP-W-PORTSTATUS: g26: STP status Forwarding
2147482577 14-Nov-2009 08:47:50 Warning %STP-W-PORTSTATUS: g13: STP status Forwarding
2147482578 14-Nov-2009 08:47:46 Informational %LINK-I-Up: g26
2147482579 14-Nov-2009 08:47:43 Warning %LINK-W-Down: g26
2147482580 14-Nov-2009 08:47:20 Informational %LINK-I-Up: g13
2147482581 14-Nov-2009 08:47:16 Informational %LINK-I-Up: g26
2147482582 14-Nov-2009 08:47:16 Warning %LINK-W-Down: g13
2147482583 14-Nov-2009 08:47:15 Warning %LINK-W-Down: g26
2147482584 14-Nov-2009 08:47:01 Informational %LINK-I-Up: g26
2147482585 14-Nov-2009 08:46:58 Warning %LINK-W-Down: g26
2147482586 14-Nov-2009 08:38:06 Informational %AAA-I-DISCONNECT: http connection for user admin, source 10.0.5.135 destination 10.0.5.172 TERMINATED
2147482587 14-Nov-2009 08:26:45 Informational %AAA-I-CONNECT: New http connection for user admin, source 10.0.5.135 destination 10.0.5.172 ACCEPTED
2147482588 14-Nov-2009 08:13:10 Warning %STP-W-PORTSTATUS: g1: STP status Forwarding
2147482589 14-Nov-2009 08:12:40 Informational %LINK-I-Up: g1
2147482590 14-Nov-2009 08:12:38 Warning %LINK-W-Down: g1
2147482591 14-Nov-2009 08:12:37 Informational %LINK-I-Up: g1
All other switches are ok and do not show anything in their logs
I am trying to figure out what could be going wrong. Spanning tree is enabled on all switches. The switch tihs is happening on, ends in the ip 172 and is where all building cables connect to. They also connect to 174.
I have attached an image of the infrastructure so you can visually see what i mean.
Can anyone point me in the correct direction to start solving this issue?
Thanks,
Dani
05-05-2012 10:56 AM
Whats the problem?
Looks like access ports going up down maybe when end devices are turned on/off.
05-05-2012 11:04 AM
the issue is that the network almost seizes up when this happends. On 1 specific computer you notice the network icon in windows 7 show that yellow sign and then no network connections work for a few minutes. Once the network sign goes away the network connection works again. When that happends you see these messages in the logs.
Also i am noticing high ping times on lan clients and wifi connections are extremely slow.
Wether or not the wifi issue is related i have yet to figure out.
05-05-2012 11:08 AM
Sounds more like a loop to me. Does it only happen on this switch? Or if not loop, could be errant NIC flooding network. I have seen this recently at a site, brought down the entire site (was on Extreme Networks sw). It was discovered when I plugged in a packet sniffer, I was seeing 700+ SSDP pps fromn this one PC. Does a packet sniffer hooked directly up to that sw show you anything useful?
05-05-2012 07:30 PM
Do you mean plug literally into the problem switch and run wireshark? doesnt a switch direct packets to their intended destination and not broadcast it across all ports?
Anyways i did run wireshark on the computer i was thinking was the problem but from what i can see i dont see an issue.
I can post the logs tomorrow when i get a hold of them, i left them at work.
So maybe it could still be a loop or errant NIC. How can i view the whole network? I am thinking more or less though that i will need to individualy check each workstation...
05-06-2012 07:37 AM
If its an access layer switch, then put the port in the same vlan. Doesnt always point to a smoking gun, sometimes though. Doubt its a loop, because unless someone is contantly plugging/unplugging it ( or the switch is smart enough to err disable the port then bring it back up), a loop would disable your network w/o proper safe guards.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: