[c-nsp] much to much filtered packets punted to CPU on 7604

2010-10-08 Thread Jan Sandmaier
Hi all, monitoring the control plane traffic on my 7604 with 12.2(33)SRD3 through a SPAN session I see much to much in/outbound filtered traffic punted to the CPU which I thought to be dropped in hardware. Actually I see both counters from sh access-list and sh tcam interface.. increasing at

Re: [c-nsp] much to much filtered packets punted to CPU on 7604

2010-10-08 Thread Brian Turnbow
see both counters from sh access-list and sh tcam interface.. increasing at nearly the same rate (see below). I use 2 extended ACLs applied to an interface for filtering inbound/outbound traffic. There is plenty of TCAM space, I don't use log statement, no ip unreachables is configured