[c-nsp] IOS to XR IOS Conversion
Dear All, Is there is any tool can be used to convert from Cisco IOS to XR IOS , in order to save some time during the migration from Cisco IOS to XR IOS ? I think if there is any tool like this , it will be very usefull to me Appreciate your help. Thanks alot Regards Jason CCIE#24775 ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] IOS to XR IOS Conversion
AFAIK no On Sun, Feb 28, 2010 at 10:24 AM, Jason Alex amr.c...@gmail.com wrote: Dear All, Is there is any tool can be used to convert from Cisco IOS to XR IOS , in order to save some time during the migration from Cisco IOS to XR IOS ? I think if there is any tool like this , it will be very usefull to me Appreciate your help. Thanks alot Regards Jason CCIE#24775 ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] compact flash modules for Sup720-3bxl..
Hi, Just a note - we're using a 4GB CF in our sup32. Not sure on the make/model of the CF though I think it's a sandisk. James Greig -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Peter Kranz Sent: 26 February 2010 22:24 To: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] compact flash modules for Sup720-3bxl.. And the max capacity for a Sup720 is 1GB right, no 2GB and up modules allowed? Peter Kranz Founder/CEO - Unwired Ltd www.UnwiredLtd.com Desk: 510-868-1614 x100 Mobile: 510-207- pkr...@unwiredltd.com -Original Message- From: cisco-nsp-boun...@puck.nether.net [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Randy McAnally Sent: Friday, February 26, 2010 2:18 PM To: Dan Holme; Jason Gurtz Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] compact flash modules for Sup720-3bxl.. Ours are SanDisk. They were sold to us by a vendor who assured us of the compatibility. -- Randy www.FastServ.com -- Original Message --- From: Dan Holme dan.ho...@gmail.com To: Jason Gurtz jasongu...@npumail.com Cc: cisco-nsp@puck.nether.net Sent: Fri, 26 Feb 2010 21:34:37 + Subject: Re: [c-nsp] compact flash modules for Sup720-3bxl.. Well, that would fit my experiences Jason. Looking through a few other SUPs running 12.2SR they all seem to have SanDisk CF in. However the ones I have running 12.2SX do not show the vendor of the CF. Not sure whether that is IOS or CF related. On Fri, Feb 26, 2010 at 9:19 PM, Jason Gurtz jasongu...@npumail.com wrote: Unfortunately you can't just use any flash card in the 6500/7600. Theoretically all that is required is a standard ATA CF but I have found that not all work. You can find more info on the CF card like so show disk0: filesys I have only had good experiences with: ATA CARD GEOMETRY Manufacturer Name SanDisk ..but I am sure there are others that work okay. Recently, on another mailing list, a developer working with ATA drivers made claim that SanDisk is known to follow the ATA specs accurately, unlike many other manufacturers. Something about a RESET command or something. Maybe the SUP is sensitive to these kind of things and doesn't have workarounds coded up. Around here SanDisk isn't too expensive, so it seems like good peace of mind. ~JasonG ___ cisco-nsp mailing list cisco-...@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ -- Dan Holme ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ --- End of Original Message --- ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
[c-nsp] Safe operating temps - Somewhat OT
Hi all, The AC unit in my little datacenter room was recently upgraded/serviced. Since then I have started to monitor the my 6500's temp. I have been noticing a swing in the RP in/out on a Sup32 going from 37c to 39c and then back to 37 within 30-40 minutes timeframe. Room temp seems to be stable right at 25c, all the time. Are these safe swings? Or are these too dramatic only to shorten the life of the box this much sooner. Unfortunately I don't have any previous history data on the sups, only the room. Thanks, -graham ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] IOS to XR IOS Conversion
there was a tool available to make this conversion (available to cisco SE) maybe you can talk to them. cheers Mario On Sun, Feb 28, 2010 at 5:58 AM, Manu Chao linux.ya...@gmail.com wrote: AFAIK no On Sun, Feb 28, 2010 at 10:24 AM, Jason Alex amr.c...@gmail.com wrote: Dear All, Is there is any tool can be used to convert from Cisco IOS to XR IOS , in order to save some time during the migration from Cisco IOS to XR IOS ? I think if there is any tool like this , it will be very usefull to me Appreciate your help. Thanks alot Regards Jason CCIE#24775 ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Input queue flushes and drops
Thanks guys. 12.4(13r)T, we have a policy-map with 4 classes: policy-map QOS-OUT class DSCP-OUT-RT-VO priority 1110 138750 police cir 111 bc 138750 be 138750 conform-action set-dscp-transmit ef exceed-action set-dscp-transmit ef violate-action set-dscp-transmit ef class DSCP-OUT-D1-RT bandwidth percent 7 random-detect dscp-based random-detect dscp 34 25 75 20 random-detect dscp 36 12 24 20 service-policy QOS-OUT-D1-RT class DSCP-OUT-D2-BA bandwidth percent 55 random-detect dscp-based random-detect dscp 18 61 122 20 random-detect dscp 20 34 68 20 service-policy QOS-OUT-D2-BA class DSCP-OUT-D3-TO bandwidth percent 21 random-detect dscp-based random-detect dscp 10 48 96 20 random-detect dscp 12 31 62 20 service-policy QOS-OUT-D3-TO class DSCP-OUT-RT-VI bandwidth percent 6 queue-limit 30 packets police 46 57500 57500 conform-action set-dscp-transmit af43 exceed-action set-dscp-transmit af21 violate-action set-dscp-transmit default And sh int stats: GigabitEthernet0/1 Switching pathPkts InChars In Pkts Out Chars Out Processor311249998 1622425452 311496548 1640497685 Route cache910779860 166070169 883679645 1324432555 Total 1222029858 1788495621 1195176193 2964930240 I'll increase the interface input queue and monitor for a few hours. Cheers, Javi On Sun, Feb 28, 2010 at 11:26 AM, Rodney Dunn rod...@cisco.com wrote: On 2/26/10 1:57 AM, Javi in AUS wrote: Gents, We have a WAN facing Cisco 3845 which is showing the numbers below on it's Gi0/1 interface: Input queue: 0/75/9/71805 (size/max/drops/flushes); Total output drops: 714432 Turn off SPD: config t no spd enable end Of course, these counters are increasing and we have a bunch of users at the other side of the link complaining about poor VoIP performance (they hear us intermittently although we can hear them Ok). CEF is enabled globaly, input queue is set to default (75). GigabitEthernet0/1 is up, line protocol is up Hardware is BCM1125 Internal MAC, address is 001b.d37d.f8a2 (bia 001b.d37d.f8a2) Internet address is 10.83.2.17/30 MTU 1500 bytes, BW 2 Kbit/sec, DLY 100 usec, reliability 255/255, txload 11/255, rxload 10/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex, 100Mb/s, media type is RJ45 output flow-control is XON, input flow-control is XON ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:00, output 00:00:00, output hang never Last clearing of show interface counters 3w3d Input queue: 0/75/9/71805 (size/max/drops/flushes); Total output drops: 714432 Queueing strategy: Class-based queueing Output queue: 0/1000/0 (size/max total/drops) 30 second input rate 848000 bits/sec, 634 packets/sec 30 second output rate 874000 bits/sec, 604 packets/sec 1146444284 packets input, 1913512714 bytes, 0 no buffer Received 1785 broadcasts, 0 runts, 0 giants, 1 throttles 0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored 0 watchdog, 6993 multicast, 0 pause input 0 input packets with dribble condition detected 1121611018 packets output, 2544901813 bytes, 0 underruns 0 output errors, 0 collisions, 0 interface resets 0 unknown protocol drops 0 babbles, 0 late collision, 0 deferred 0 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out What is your policy doing on that interface for the output drops? sh policy-map interface gig 0/1 What does 'sh int stat' show...the input queue is only for process switched traffic so you need to figure that out? What code?...12.4(20)T and later you can do an EPC trace on the punt path coming in the interface to see what traffic it is. Or try to catch the packets in 'sh buffers input-interface gig 0/1 packet' Should we increase the input queue size to 150,200,250, etc ? Could these flushed/drops be the cause of the poor VoIP performance? Yeah..set it to the max of 4096. Rodney Many thanks, P ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Safe operating temps - Somewhat OT
On 2/28/10 6:55 AM, Graham Wooden wrote: Hi all, The AC unit in my little datacenter room was recently upgraded/serviced. Since then I have started to monitor the my 6500's temp. I have been noticing a swing in the RP in/out on a Sup32 going from 37c to 39c and then back to 37 within 30-40 minutes timeframe. Room temp seems to be stable right at 25c, all the time. Are these safe swings? Or are these too dramatic only to shorten the life of the box this much sooner. Unfortunately I don't have any previous history data on the sups, only the room. I see 2 degree shifts continuously with all of the Cisco stuff that I graph temperature on. I think it's unlikely to be a problem since it's been like that for as long as I can remember without any failures. ~Seth ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
[c-nsp] ASA Debug
Hello, I am interested to know if there is some more information relating to the debugging of the Cisco ASA products/software. I have extensive experience with other firewall/security products and have been unable to find how to do flow debugging on the ASA's. What I am trying to diagnose is why we keep getting Deny/Drop packets for SIP on a random basis. I would like to diagnose/debug the flow of the packet through the device so that we can see why its not being inspected by the SIP ALG and in turn gets dropped. I've set the following options logging monitor debugging logging buffered debugging logging trap debugging And it still does not really go into any further detail. I've also setup captures so that we can analyse the packets coming in. If I compare one working SIP call to a dropped incoming call then there is no obvious difference. Any additional advice would be greatly appreciated. Regards, Jimmy Stewpot. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] Safe operating temps - Somewhat OT
Thanks Seth for the reply. I never really had to think of this stuff before, but wearing new hats everyday. -graham On 2/28/10 8:26 PM, Seth Mattinen se...@rollernet.us wrote: On 2/28/10 6:55 AM, Graham Wooden wrote: Hi all, The AC unit in my little datacenter room was recently upgraded/serviced. Since then I have started to monitor the my 6500's temp. I have been noticing a swing in the RP in/out on a Sup32 going from 37c to 39c and then back to 37 within 30-40 minutes timeframe. Room temp seems to be stable right at 25c, all the time. Are these safe swings? Or are these too dramatic only to shorten the life of the box this much sooner. Unfortunately I don't have any previous history data on the sups, only the room. I see 2 degree shifts continuously with all of the Cisco stuff that I graph temperature on. I think it's unlikely to be a problem since it's been like that for as long as I can remember without any failures. ~Seth ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] IOS to XR IOS Conversion
On Sun, Feb 28, 2010 at 02:23:31PM -0600, Mario Velazquez wrote: there was a tool available to make this conversion (available to cisco SE) maybe you can talk to them. SOX. To my knowledge only Cisco-internal, so yes, ask your friendly SE :-) (you want them being involved anyway to identify any differences between IOS and IOX that you otherwise may find out too late) Regards, Marc On Sun, Feb 28, 2010 at 5:58 AM, Manu Chao linux.ya...@gmail.com wrote: AFAIK no On Sun, Feb 28, 2010 at 10:24 AM, Jason Alex amr.c...@gmail.com wrote: Dear All, Is there is any tool can be used to convert from Cisco IOS to XR IOS , in order to save some time during the migration from Cisco IOS to XR IOS ? I think if there is any tool like this , it will be very usefull to me Appreciate your help. Thanks alot Regards Jason CCIE#24775 -- Marc Binderbergerm...@sniff.de ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] ASA Debug
On Mon, Mar 01, 2010 at 03:32:08AM +, Jimmy Stewpot wrote: I am interested to know if there is some more information relating to the debugging of the Cisco ASA products/software. I have extensive experience with other firewall/security products and have been unable to find how to do flow debugging on the ASA's. What I am trying to diagnose is why we keep getting Deny/Drop packets for SIP on a random basis. I would like to diagnose/debug the flow of the packet through the device so that we can see why its not being inspected by the SIP ALG and in turn gets dropped. I've set the following options logging monitor debugging logging buffered debugging logging trap debugging And it still does not really go into any further detail. I've also setup captures so that we can analyse the packets coming in. If I compare one working SIP call to a dropped incoming call then there is no obvious difference. Any additional advice would be greatly appreciated. Please try packet tracer. It's a builtin tool (cli and gui) that simulates the processing of a specific packet (src and dst ip and port etc). Don't expect immediate results: Reading and interpreting the results *may* take some getting used to in the less trivial cases. Ciao Joerg -- Joerg Mayer jma...@loplof.de We are stuck with technology when what we really want is just stuff that works. Some say that should read Microsoft instead of technology. ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
Re: [c-nsp] cisco-nsp Digest, Vol 87, Issue 93
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Jens, The time window in the summary lines includes all flows in the flow file not only those passed the filter. It should actually be limited to the filtered flows. However, it does not explain, why you see flows ending in the future. I'll fix the time window issue. - Peter Peter Haag wrote: Hi Jens, I will look into that. - Peter Dear all, I've encountered a strange behavior of nfdump when running it with the -s and -t options. Sometimes it works as expected, sometimes it gives me strange values in Time window:, e.g. Time window: 2010-01-01 00:00:22 - 2010-03-13 04:34:32 when running with -t 2010/01/01.00:00:00-2010/01/31.00:00:00 details see: http://paste.debian.net/61554/ what could be the explanation? NTP issues on the router, or qualifies for a bug report? best regards Jens Neu Health Services Network Administration Phone: +49 (0) 30 68905-2412 Mail: jens@biotronik.de -- ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp End of cisco-nsp Digest, Vol 87, Issue 93 * - -- ___ SWITCH - The Swiss Education and Research Network __ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland E-mail: peter.h...@switch.ch Web: http://www.switch.ch/ -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (Darwin) iQCVAwUBS4to8P5AbZRALNr/AQL7mAP9E8giNLkq1S012c7RdiyL4OcCIHbWUMEE WaXyZJ/C4Fg30dUhipZ+AWnmy0W5j10QZzmMSQWH2N5w4F3GIpQPon/jHpMnixx+ zR3HJ2hstCOkDIx2As7+1ym51UTxtqrwpsAO8F1MSUj7pgaGIriebzbtGzCaLs/U V7zNjaLWvc4= =d2fd -END PGP SIGNATURE- ___ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
