Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

sh logg

can anybody tell me following :

sh logg

Syslog logging: enabled (0 messages dropped, 15568 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)

Console logging: level critical, 1007 messages logged, xml disabled,

filtering disabled

Monitor logging: level debugging, 0 messages logged, xml disabled,

filtering disabled

Buffer logging: level debugging, 113688 messages logged, xml disabled,

filtering disabled

Exception Logging: size (8192 bytes)

Count and timestamp logging messages: disabled

Trap logging: level informational, 113693 message lines logged

Logging to 59.144.127.82, 3400 message lines logged, xml disabled,

filtering disabled

--More--

Log Buffer (4096 bytes):

113673: Apr 13 03:06:06: %C4K_REDUNDANCY-5-CONFIGSYNC: The startup-config has been successfully synchronized to the standby supervisor

113674: Apr 13 03:06:07: %C4K_REDUNDANCY-5-CONFIGSYNC: The private-config has been successfully synchronized to the standby supervisor

113675: Apr 13 10:36:15: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113676: Apr 13 13:10:09: %C4K_EBM-4-HOSTFLAPPING: Host 00:16:C8:A5:AC:80 in vlan 150 is flapping between port Po3 and port Gi4/47

113677: Apr 13 13:58:54: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113678: .Apr 13 18:09:53: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113679: .Apr 13 18:50:07: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113680: Apr 13 22:20:14: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113681: Apr 14 01:05:11: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113682: Apr 14 01:22:13: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

--More-- 113683: Apr 14 01:22:13: %C4K_EBM-4-HOSTFLAPPING: Host 00:16:C8:A5:AC:80 in vlan 150 is flapping between port Po3 and port Gi4/47

113684: Apr 14 02:56:40: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113685: Apr 14 07:26:08: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113686: Apr 14 10:49:04: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113687: Apr 14 12:06:42: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

113688: Apr 14 13:58:05: %C4K_EBM-4-HOSTFLAPPING: Host 00:17:5A:D9:DE:3F in vlan 140 is flapping between port Po3 and port Gi1/2

PUNE4507CAGG_1#

what is host flapping ?

wht could be the possible soln

3 REPLIES
Community Member

Re: sh logg

This could be one of your etherchannel ports, the mac address maybe the switch at the other end, pls check!!

Community Member

Re: sh logg

A look in the Cisco documentations says:

Cause

The issue can occur due to Spanning Tree Protocol (STP) loops in the network that cause packet drops from the specific host. In addition to packet drops, STP loops lead to several other symptoms, which are listed here:

Loss of connectivity to, from, and through affected network regions.

High link utilization (often 100 percent).

High switch backplane utilization (compared to the baseline utilization).

Syslog messages that indicate packet looping in the network (for example, HSRP duplicate IP address messages).

Syslog messages that indicate constant address relearning or MAC address flapping messages.

An increase in the number of output drops on many interfaces.

Found in:

http://www.cisco.com/en/US/products/hw/switches/ps4324/products_tech_note09186a008063c36f.shtml

Hall of Fame Super Silver

Re: sh logg

Hello Kaustubh,

host flapping means that a MAC address is seen altenatively as source MAC address in frames from the two ports.

Because the MAC address is a Cisco MAC as you can check here

http://standards.ieee.org/regauth/oui/index.shtml

and the ports involved are a port-channel and a gi1/2 there are chances that on the other side the port-channel includes also the port connected to port gi1/2.

So check the state of etherchannels using

sh etherchannel summary

on the local switch and on the remote end.

using sh cdp n on member links you can find out what port of the second switch is connected to the local node

Hope to help

Giuseppe

199
Views
0
Helpful
3
Replies
CreatePlease to create content