I was exactly looking to this document: http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note0918 6a00804916e0.shtml#utilities
Where the SPAN and the command you mentioned are. But the document mentions a surprising thing: "In this output, you can see that the incoming traffic is Layer 3-switched instead of Layer 2-switched. This indicates that the traffic is being punted to the CPU." This is not correct, right ? In my case I just see the L3 in/out Switched value increasing. Regards, Antonio Soares, CCIE #18473 (R&S/SP) amsoa...@netcabo.pt http://www.ccie18473.net -----Original Message----- From: cisco-nsp [mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Dale W. Carder Sent: terça-feira, 7 de Maio de 2013 20:37 To: Saku Ytti Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] 6704-10GE huge input drops (flushes) Thus spake Saku Ytti (s...@ytti.fi) on Tue, May 07, 2013 at 02:23:27PM +0300: > On (2013-05-07 12:11 +0100), Antonio Soares wrote: > > > Yes, back-to-back L3 interface to a GSR. No MPLS, no sub-interfaces. Only IPv4/IPv6 addressing and ISIS there. > > > > When the last occurrence happened, we saw an increase of 5 million drops. > > > > It's a sporadic thing, it lasts a couple of minutes then everything returns to normal. > > I would probably setup ERSPAN of SP/RP traffic and wait for drop > counter to increase and see if I have something dodgy on capture. > But I'm bit worried if they're seen by that capture, as drop equals > flush precisely. You could also run "show buffers input-interface <blah> dump" to see what is getting punted. Dale _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/