Do you have a 'sh mls netflow table-contention detail'? These figures don't match. The ICAM 99% doesn't match the actual alias count.
Mack -----Original Message----- From: Stas Bakulin [mailto:[email protected]] Sent: Wednesday, August 10, 2011 12:37 PM To: Mack McBride Cc: Peter Rathlev; [email protected] Subject: Re: [c-nsp] Netflow export error from C6506 (WS-X6704-10GE) On two DFC simultaneously?) 6506#sh mls netflow table-contention summary Earl in Module 2 Summary of Netflow CAM Utilization (as a percentage) ==================================================== TCAM Utilization : 2% ICAM Utilization : 99% Netflow Creation Failures : 109465 Netflow CAM aliases : 38 Earl in Module 3 Summary of Netflow CAM Utilization (as a percentage) ==================================================== TCAM Utilization : 2% ICAM Utilization : 99% Netflow Creation Failures : 323735 Netflow CAM aliases : 97 Earl in Module 6 Summary of Netflow CAM Utilization (as a percentage) ==================================================== TCAM Utilization : 89% ICAM Utilization : 1% Netflow Creation Failures : 0 Netflow CAM aliases : 0 Stas Bakulin ---------------------------------------------------------------------- [email protected] | www.kvant-telecom.ru Tel: +7 473 233 0330 (128) On 10 August 2011 22:00, Mack McBride <[email protected]> wrote: > It sounds like a hardware problem on the 6704s DFC. > Getting that many collisions in the TCAM is really odd. > You had the flow mask set to interface-full already. > I can't see it getting any better. > I can't think of anything causing that except a set of crafted packets. > > Mack > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Stas Bakulin > Sent: Wednesday, August 10, 2011 4:52 AM > To: Peter Rathlev > Cc: [email protected] > Subject: Re: [c-nsp] Netflow export error from C6506 (WS-X6704-10GE) > >> Stas: What kind of traffic does this box see? Is it Internet or >> something else? Does the situation allow you to try changing the >> flow-mask to see how that makes a difference? > > Internet. > Changing flow-mask gave nothing. > > Stas Bakulin > ---------------------------------------------------------------------- > [email protected] | www.kvant-telecom.ru > Tel: +7 473 233 0330 (128) > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
