cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
510
Views
0
Helpful
3
Replies

switch error

glen.grant
VIP Alumni
VIP Alumni

Anyone know what this error means ? This makes no sense as the port isn't even a valid port as you can see . We have seen this type problem on a number of different switches and it usually references an invalid port number . There is no such thing as port 4/59 . This is on a Cat 5509 but we have seen this stuff on Cata. 4000 too .

%SYS-4-P2_WARN: 4/Invalid traffic from multicast source address 91:0e:00:13:aa:aa on port 4/59 .

3 Replies 3

oz
Level 1
Level 1

%SYS-4-P2_WARN: 1/Invalid traffic from multicast source address

Problem: The switch is generating "Invalid traffic from multicast source address" messages.

Platform: Catalyst 4000 family switches

The following is an example of the syslog output you will see when this error occurs:

%SYS-4-P2_WARN: 1/Invalid traffic from multicast source address 81:00:01:00:00:00 on port 2/1

%SYS-4-P2_WARN: 1/Invalid traffic from multicast source address 81:00:01:01:00:00 on port 2/1

The "Invalid traffic from multicast source address" syslog message is generated when the switch receives packets with a multicast MAC address as the source MAC. Using a broadcast or multicast MAC address as the source MAC for a frame is not standards-compliant behavior. However, the switch still forwards traffic sourced from a multicast MAC address.

The syslog message indicates the multicast MAC address in the source MAC field of the frame, and the port on which the traffic was received.

The workaround is to try to identify the end station that is generating frames with a multicast source MAC address. Typically, such frames are transmitted from a traffic generator (for example, SmartBits) or third party devices that share a multicast MAC address (for example, load balancing firewall or server products).

HTH

Oz

j.chenevey
Level 1
Level 1

See the following link to Cisco:

http://www.cisco.com/warp/customer/473/34.shtml#MCAST_SOURCE_MAC

If you can't read that here is text:

%SYS-4-P2_WARN: 1/Invalid traffic from multicast source address

Problem: The switch is generating "Invalid traffic from multicast source address" messages.

Platform: Catalyst 4000 family switches

The following is an example of the syslog output you will see when this error occurs:

%SYS-4-P2_WARN: 1/Invalid traffic from multicast source address 81:00:01:00:00:00 on port 2/1

%SYS-4-P2_WARN: 1/Invalid traffic from multicast source address 81:00:01:01:00:00 on port 2/1

The "Invalid traffic from multicast source address" syslog message is generated when the switch receives packets with a multicast MAC address as the source MAC. Using a broadcast or multicast MAC address as the source MAC for a frame is not standards-compliant behavior. However, the switch still forwards traffic sourced from a multicast MAC address.

The syslog message indicates the multicast MAC address in the source MAC field of the frame, and the port on which the traffic was received.

The workaround is to try to identify the end station that is generating frames with a multicast source MAC address. Typically, such frames are transmitted from a traffic generator (for example, SmartBits) or third party devices that share a multicast MAC address (for example, load balancing firewall or server products).

This also may be associated with code problems as well so you may want to dig into your syslog files and look for other questionable messages. In our case, a Cat2926 switch was also getting EARL-2:LKUPRAM (Cisco bug ID CSCdk75035) errors.

That was a "blackcomb" parity error as we later found out (bug id CSCdk75035), caused the switch to create/propagate the "invalid traffic" (SYS-4-P2_WARN.

Fix: Code upgrade on affected switches. Note Cat2926 is a fixed chassis Cat5002. Code you put on will depend what your switch can support & your requirement but I'd recommend GD only 4.5(13a) or 5.5(13a).

glefebvr
Level 1
Level 1

I have been getting the same error for some time as well; but ONLY on a Cat5509.

%SYS-4-P2_WARN: 8/Invalid traffic from multicast source add

ress ff:ff:ff:ff:ff:ff on port 8/60

As you can see, this port is also invalid. The error only appeared after the introduction of an WS-X5410 Gigabit mod, SW 5.1(1)

As far as I can tell; it hasn't adversely affected the switch; but I'd sure like to know where the error is coming from as well.