RP CPU thng c dng x l (control+ data) traffic layer 3 m khng th chuyn mch hardware.

V d:
+ Control traffic L3: Open Shortest Path First (OSPF), Enhanced Interior Gateway Routing Protocol
(EIGRP), Border Gateway Protocol (BGP), and Protocol Independent Multicast (PIM)
+ Data traffic L3: cc packet khng th chuyn mch hardware nh packet vi IP option set, Time to
Live(TTL) =1, packets i hi fragmentation.
SP CPU thng c dng x l layer2 control traffic. Nh Spanning Tree Protocol (STP), Cisco
Discovery Protocol (CDP), and VLAN Trunking Protocol (VTP) packets.
Netdr capture c thc hin MSFC CPU controller. l ni gn nht c th capture packet trn
MSFC xc nh nguyn nhn ti sao traffic a ti SP hay RP CPU trn MSFC. Vi sup720 cho php
capture packet trn RP v SP inband.
Netdr tool c dng capture transmit (Tx) and receive (Rx) packets trn internal inband CPU
software switching path.
Netdr c dng troubleshoot high-CPU
+ show process cpu history
+ remote command switch show process cpu history

Lnh Troubleshoot:
Cat6500#debug netdr capture ?

+ continuous: Switch s capture packet trn RP-inband lin tc cho ti khi y capture buffer(4096
packets) v bt u vit buffer trong FIFO fashion
+ rx + tx: capture packet n cpu v ra khi cpu
+ and-filter v or-filter: ch nh and hay or gia 2 option
Vi d: debug netdr and-filter option#1 option#2
+ vlan: capture packet ca vlan c th. Vlan ch nh c th l mt internal VLAN lin kt L3 interface.
show vlan internal usage thy internal VLAN ti L3 interface-mapping
+ LTL(local target logic) l 1 internal software representation ca 1 interface. Src_indx(source index)
v dst_indx( destination index) c dng capture tt c cc gi packet m match ch s source LTL
v destination LTL
+ Interface: cho php capture packet ti v ri 1 interface c th. Interface c th l 1 SVI hay L3
interface trn switch.
Note: interface option cho php capture packets ti v ri L3 interface(SVI or physical). Srcindex or
dstindex cho php capture Tx v Rx packet trn L2 interface. Srcindex v dstindex option hot ng c
L2 v L3 interface.
+ ethertype: capture tt c packet match Ethernet ch nh
+ source-ip-address v destination-ip-address: cho php capture packet c source, dest ch nh trc.
Troubleshoot

Cc bc troubleshoot Netdr
1. Cat6500#debug netdr capture rx
2. Cat6500#show netdr capture
A total of 4096 packets have been captured
The capture buffer wrapped 0 times
Total capture capacity: 4096 packets
------- dump of incoming inband packet ------interface NULL, routine mistral_process_rx_packet_inlin, timestamp 06:35:39.498
dbus info: src_vlan 0x3F1(1009), src_indx 0x102(258), len 0x40(64)
bpdu 0, index_dir 1, flood 0, dont_lrn 1, dest_indx 0x387(903)
05000018 03F16000 01020000 40000000 00117F00 00157F00 00100000 03870000
mistral hdr: req_token 0x0(0), src_index 0x102(258), rx_offset 0x76(118)
requeue 0, obl_pkt 0, vlan 0x3F1(1009)
destmac 00.1A.A2.2D.B3.A4, srcmac 00.00.00.00.AA.AA, protocol 0800
protocol ip: version 0x04, hlen 0x05, tos 0x00, totlen 46, identifier 8207
df 0, mf 0, fo 0, ttl 32, >src 127.0.0.16, dst 127.0.0.21
udp src 68, dst 67 len 26 checksum 0xB8BC
3. Review packets xc nh: Source MAC (srcmac) address, Destination MAC (destmac)
address, Source and Destination (src & dst) IP addresses, and Source Index (src_indx).
Cat6500#show netdr capture | include srcmac
destmac 00.1A.A2.2D.B3.A4, srcmac 00.00.00.00.AA.AA, protocol 0800
destmac 00.1A.A2.2D.B3.A4, srcmac 00.00.00.00.AA.AA, protocol 0800
destmac 00.1A.A2.2D.B3.A4, srcmac 00.00.00.00.AA.AA, protocol 0800
destmac 00.1A.A2.2D.B3.A4, srcmac 00.00.00.00.AA.AA, protocol 0800
Cat6500#show netdr capture | inc src_indx
dbus info: src_vlan 0x3F1(1009), src_indx 0x102(258), len 0x40(64)
dbus info: src_vlan 0x3F1(1009), src_indx 0x102(258), len 0x40(64)
dbus info: src_vlan 0x3F1(1009), src_indx 0x102(258), len 0x40(64)
dbus info: src_vlan 0x3F1(1009), src_indx 0x102(258), len 0x40(64)
4. Gii m src_indx and dest_indx discover source v dest interface ca packet.
Cat6500#remote command switch test mcast ltl-info index 102
index 0x102 contain ports 5/3
! This is the physical interface sourcing the packet going to the CPU.
Cat6500#remote command switch test mcast ltl-info index 387
index 0x387 contain ports 5/R
!5/R refers to RP CPU on the supervisor engine in slot 5
Cc lnh tham kho thm:

Show netdr captured-packets | i interface

Show netdr captured-packets | i srcmac
Show netdr captured-packets | i destmac
Show netdr captured-packets | i src-info

Cc cu lnh bn di dng tm ra ti so traffic khng chuyn mch trong phn hardware

Show ip interface <gig>| i ip|CEF|UP
Show fm summary
show mls cef exception status
show mls cef maximum-routes.
show ip cef switching statistics
show ip cef switching statistics feature
show tcam interface <>

Thc hin Netdr capture trn Router:

6500-2#sh netdr cap
A total of 4096 packets have been captured
The capture buffer wrapped 0 times
Total capture capacity: 4096 packets
------- dump of incoming inband packet ------interface Vl10, routine mistral_process_rx_packet_inlin, timestamp 00:00:11
dbus info: src_vlan 0xA(10), src_indx 0xC0(192), len 0x40(64)
bpdu 0, index_dir 0, flood 0, dont_lrn 0, dest_indx 0x380(896)
10020400 000A0000 00C00000 40080000 00060468 0E000040 00000000 03800000
mistral hdr: req_token 0x0(0), src_index 0xC0(192), rx_offset 0x76(118)

requeue 0, obl_pkt 0, vlan 0xA(10)

destmac 00.15.C7.26.FB.80, srcmac 00.00.01.00.06.00, protocol 0800
protocol ip: version 0x04, hlen 0x05, tos 0x00, totlen 46, identifier 0
df 0, mf 0, fo 0, ttl 100, src 10.10.10.2, dst 10.100.101.10
tcp src 0, dst 0, seq 0, ack 0, win 0 off 5 checksum 0x265C
Red = Ingress Vlan ca traffic
Blue = packet i vo Layer 3 interface
Green = Ethertype v SRC/DST MAC addresses
Purple = IP Header
Orange = SRC index (source of ingress traffic).
Black = Dest Index (where traffic is being sent).
Aqua = Flood bit
C th theo di ni m traffic gi ti bng cch theo di mac-address:
6500-2#show mac-address address 0000.0100.0600
Legend: * - primary entry
age - seconds since last seen
n/a - not available
vlan mac address

type

learn

age

ports

------+----------------+--------+-----+----------+-------------------------Active Supervisor:
* 10 0000.0100.0600 dynamic Yes

0 Gi4/1

Ta c th nhn v tr ng vo ca traffic ly source index/ltl index

LTL c dng bi sup720 phn bit v tr forward 1 packet. Nhng indexs c th c
ch ti 1port hay ti 1 internal location trn switch. V d bn di dng index xc nh
ingress port ca traffic.
Source LTL index 0xC0 c nhn thy trn.
6500-2#remote command switch test mcast ltl index c0
index 0xC0 contain ports 4/1

-> traffic n t port4/1

Traffic ny ang c gi ti destination index 0x380:

6500-2#rem com sw test mcast ltl ind 380
index 0x380 contain ports 2/R
2/R = module/Router
6500-2#show module
Mod Ports Card Type

Model

Serial No.

--- ----- -------------------------------------- ------------------ ----------2

2 Supervisor Engine 720 (Active)

WS-SUP720-BASE

SAD074205FP

4 48 CEF720 48 port 10/100/1000mb Ethernet WS-X6748-GE-TX

SAL1107GS80

C th thy module 2 l supervisor vi R ch nh RP CPU.

Nu packet m capture c flood bit set trong netdr capture, traffic c flood ti tt c cc port
trong vlan. thy nhng port bao gm trong index ny ta cn thay i destination index. S thay
i ny s c thc hin add 8 ti index u tin ca destination( ngha l bit u tin trong LTL)
V d ARP request c flooded ti CPU v tt c cc port trong 1 vlan.

6500-2#sh netdr cap

A total of 1 packets have been captured
The capture buffer wrapped 0 times
Total capture capacity: 4096 packets

------- dump of incoming inband packet ------interface Vl10, routine mistral_process_rx_packet_inlin, timestamp 00:00:03
dbus info: src_vlan 0xA(10), src_indx 0xC0(192), len 0x40(64)
bpdu 0, index_dir 0, flood 1, dont_lrn 0, dest_indx 0x400A(16394)
38020400 000A0000 00C00000 40080000 E0000060 8E0FFBFC 00000008 400A0000
mistral hdr: req_token 0x0(0), src_index 0xC0(192), rx_offset 0x76(118)
requeue 0, obl_pkt 0, vlan 0xA(10)
destmac FF.FF.FF.FF.FF.FF, srcmac 00.0C.29.21.DE.6E, protocol 0806
layer 3 data: 00010800 06040001 000C2921 DE6EAC10 3E800000 00000000
AC103E02 FFFF0000 00000000 00000000 00000000 00000000
00000000 00000000 0000FFFF
Destination index l 0x400A v flood bit l 1. Trong trng hp ny xem nhng ni m gi
packet gi ti ta cn add 8 ti gi tr u tin trong index. V d 0x400A->0xC00A. Nu 1 index ch
c 3 Hex value:0xC12 ->0x8C12.
Trong 2 trng hp trn th packet c flooded trong Vlan(a=10) v Vlan 3090(c12=3090).

6500-2#remote command switch test mcast ltl index C00A

index 0xC00A contain ports 2/R,, 4/1
Nu chng ta khng chnh index khi flood c ci t th index s b lit k empty:
6500-2#remote command switch test mcast ltl index 400A
index 0x400A contain ports * empty *