Another Thing,
On Slot 5 the next two interesting processes with a significant load are :
- "Connection Mainteannce" 2.7% 5min, i don't know what it is, you can check
for persistent in-band session (telnet, ssh)
- "Router ICMP error generation"messages" 2.7% 5min, take a look to your
routing table to check for multiple next hop in the same vlan, if ICMP redirect
is a not needed feature you can disable it globally or by interface vlan. Take
a look to the ARP table for unreasovled addresses it can indicate misconfigured
ARP table timeout or unexpected network trafic (scan, inventory, viruses, etc.)
Good Luck,
Sylvain CONTI
Coordinateur technique
+33 1 64 53 14 12 +33 6 78 78 07 47
INTEGRATEUR RESEAUX et SECURITE
Agence Ile de France, Immeuble Le Montréal - 19bis av. du Québec - ZA
Courtaboeuf - 91140 Villebon sur Yvette T : +33 1 64 53 14 14 F : +33 1 69 32
14 02
Siège social - Espace Jacques Cartier - BP 96031 - 35360 Montauban de Bretagne
T : +33 2 99 06 61 61 F : +33 2 99 06 36 36
[email protected] www.retis.fr
-----Message d'origine-----
De : Sylvain Conti [mailto:[email protected]]
Envoyé : vendredi 6 mai 2011 10:13
À : Enterasys Customer Mailing List
Objet : RE: RE:[enterasys] show ip accounting on S series.
Sorry,
I read the file from my BlackBerry and forbade to do "next" ...
The Switch Packet Processing indicates an heavy load with packet switching,
Netflow v9 could be a good solution to identify top talkers as already
suggested. Scrutinizer is available for evaluation purpose and after a fresh
install you only have to enable Netflow v9 on your switch and redirect the
information to the software this should be enough.
Also you can check for MIB-2 interface or RMON counters using CLI or Netsight
Console to track specific interfaces, with heavy traffic or errors. You can
take a network trace to check for unusual flooding or anything else, you can
check for too many mac on specific port, etc...
Bye,
Sylvain CONTI
Coordinateur technique
+33 1 64 53 14 12 +33 6 78 78 07 47
INTEGRATEUR RESEAUX et SECURITE
Agence Ile de France, Immeuble Le Montréal - 19bis av. du Québec - ZA
Courtaboeuf - 91140 Villebon sur Yvette T : +33 1 64 53 14 14 F : +33 1 69 32
14 02
Siège social - Espace Jacques Cartier - BP 96031 - 35360 Montauban de Bretagne
T : +33 2 99 06 61 61 F : +33 2 99 06 36 36
[email protected] www.retis.fr
-----Message d'origine-----
De : Sylvain Conti [mailto:[email protected]] Envoyé : vendredi 6 mai 2011 09:36
À : Enterasys Customer Mailing List Objet : RE: RE:[enterasys] show ip
accounting on S series.
Hi,
The screenshot sent do not contain the detailed processes for slot 5 which the
one who encounter medium cpu load.
Bye,
Sylvain CONTI
Coordinateur technique
+33 1 64 53 14 12 +33 6 78 78 07 47
INTEGRATEUR RESEAUX et SECURITE
Agence Ile de France, Immeuble Le Montréal - 19bis av. du Québec - ZA
Courtaboeuf - 91140 Villebon sur Yvette T : +33 1 64 53 14 14 F : +33 1 69 32
14 02
Siège social - Espace Jacques Cartier - BP 96031 - 35360 Montauban de Bretagne
T : +33 2 99 06 61 61 F : +33 2 99 06 36 36
[email protected] www.retis.fr
-----Message d'origine-----
De : Arturo Aguilar [mailto:[email protected]] Envoyé : jeudi 5 mai 2011
23:44 À : Enterasys Customer Mailing List Objet : RE:[enterasys] show ip
accounting on S series.
I´m attaching the output of the commands show system utilization cpu and show
system utilization process. I think that only with Netflow like Lou Goddard
said is the only way to see what flow is using the S.
---
To unsubscribe from enterasys, send email to [email protected] with the body:
unsubscribe enterasys [email protected]
---
To unsubscribe from enterasys, send email to [email protected] with the body:
unsubscribe enterasys [email protected]
---
To unsubscribe from enterasys, send email to [email protected] with the body:
unsubscribe enterasys [email protected]
---
To unsubscribe from enterasys, send email to [email protected] with the body:
unsubscribe enterasys [email protected]
