Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Question on the display of 'show logg'

Hello,

Can someone please explain to me what the '.' in front of these messages mean?

May 22 10:17:34.956: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

May 22 10:17:41.776: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.6.99 (Tunnel0) is up: new adjacency

May 22 10:18:54.468: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is down: retry limit exceeded

May 22 10:18:54.640: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

May 22 10:20:14.156: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is down: retry limit exceeded

May 22 10:20:17.060: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

.May 22 10:21:36.572: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is down: retry limit exceeded

.May 22 10:21:40.360: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

.May 22 10:22:03.664: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.6.190 (Tunnel0) is up: new adjacency

.May 22 10:22:07.792: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.47 (Tunnel0) is down: holding time expired

.May 22 10:22:10.352: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.6.131 (Tunnel0) is down: holding time expired

.May 22 10:22:36.976: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.6.131 (Tunnel0) is up: new adjacency

.May 22 10:22:37.072: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.47 (Tunnel0) is up: new adjacency

.May 22 10:23:00.048: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is down: retry limit exceeded

.May 22 10:23:03.388: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

May 22 10:24:06.893: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10206: Neighbor 10.206.0.87 (Tunnel1) is down: Interface Goodbye received

May 2

Thank you.

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Gold

Re: Question on the display of 'show logg'

John

The log entries with a "." preceeding the date is an indicator that while the router believes that it knows what time it is, that the time is not authoritative (and potentially not accurate). My guess is that this router is running NTP to learn time and while these messages about EIGRP neighbors going down and coming up that the router lost (temporarily) its connection to the NTP server. When the log messages start having the date with no "." preceeding it is a sign that the router has re-established its connection to the NTP server and that the time stamp is now authoritative (and accurate).

HTH

Rick

2 REPLIES
Bronze

Re: Question on the display of 'show logg'

Hi,

If your referring to the 956 in this number "10:17:34.956", I believe thats microseconds.

HTH

Hall of Fame Super Gold

Re: Question on the display of 'show logg'

John

The log entries with a "." preceeding the date is an indicator that while the router believes that it knows what time it is, that the time is not authoritative (and potentially not accurate). My guess is that this router is running NTP to learn time and while these messages about EIGRP neighbors going down and coming up that the router lost (temporarily) its connection to the NTP server. When the log messages start having the date with no "." preceeding it is a sign that the router has re-established its connection to the NTP server and that the time stamp is now authoritative (and accurate).

HTH

Rick

304
Views
0
Helpful
2
Replies
CreatePlease to create content