Print

Print


We were seeing elevated levels of multicast, but most of what we were receiving was unicast well in excess of what we normally see.

If MACs were flapping between ports due to a bridging loop, the switch may have disabled MAC learning in the VLAN, leading to unicast flooding after learned MACs timed out.

Steven Bertsch
Engineer III
OneNeck(r) IT Solutions, a TDS(r) Company
Direct: 612.395.8966
Cell: 612.232.1181
Email: [log in to unmask]
Website: www.oneneck.com

-----Original Message-----
From: MICE Discuss [mailto:[log in to unmask]] On Behalf Of Danny Meister
Sent: Wednesday, February 19, 2014 4:08 PM
To: [log in to unmask]
Subject: Re: [MICE-DISCUSS] Mice Issues

We were seeing strange traffic making it to our MICE port before we shut
it down. Other MICE members' http traffic destined to addresses not on our
network. As if unicast packets were getting flooded.

-Danny


Danny Meister  Network Engineer, Level II

Atomic Data
615 North 3rd Street
Minneapolis, MN 55401
612.466.2000 Main Line
612.466.2071 Direct Dial
Simple. Safe. Smart.
www.atomicdata.com









On 2/19/14, 4:04 PM, "Steve Howard" <[log in to unmask]> wrote:

>On 02/19/2014 03:48 PM, Doug McIntyre wrote:
>> On Wed, Feb 19, 2014 at 03:30:09PM -0600, Doug McIntyre wrote:
>>> Did somebody make a loop/packet storm?
>>> Going through the switch now, very slow to see if I can identify
>>>who/what/where.
>>
>> At the moment, it looks to be coming from Mankato, unless somebody
>> can tell me I'm reading things wrong.
>>
>> The logs are filling up with
>>
>> Feb 19 15:34:18  MICE-SW1 master
>>MRVL-L2:mrvl_fdb_mac_entry_uc_set(),966:FDb SP HW-overwrite failed(3)
>>for VLANIdx=3:00:04:96:37:14:c3/48:IFL=105
>> Feb 19 15:34:18  MICE-SW1 backup
>>MRVL-L2:mrvl_fdb_mac_entry_uc_set(),966:FDb SP HW-overwrite failed(3)
>>for VLANIdx=3:00:04:96:37:14:c3/48:IFL=105
>> Feb 19 15:34:18  MICE-SW1 backup
>>MRVL-L2:mrvl_fdb_mac_entry_uc_set(),966:FDb SP HW-overwrite failed(3)
>>for VLANIdx=3:00:04:96:37:14:c3/48:IFL=105
>> Feb 19 15:34:18  MICE-SW1 master
>>MRVL-L2:mrvl_fdb_mac_entry_uc_set(),966:FDb SP HW-overwrite failed(3)
>>for VLANIdx=3:00:04:96:37:14:c3/48:IFL=105
>> Feb 19 15:34:18  MICE-SW1 master
>>MRVL-L2:mrvl_fdb_mac_entry_uc_set(),966:FDb SP HW-overwrite failed(3)
>>for VLANIdx=3:00:04:96:37:14:c3/48:IFL=105
>> Feb 19 15:34:18  MICE-SW1 backup
>>MRVL-L2:mrvl_fdb_mac_entry_uc_set(),966:FDb SP HW-overwrite failed(3)
>>for VLANIdx=3:00:04:96:37:14:c3/48:IFL=105
>>
>>
>> That MAC address is learned from Mankato's remote 10G link
>>
>> dmcintyre@MICE-SW1> show ethernet-switching mac-learning-log | match
>>00:04:96:37:14:c3
>> Wed Feb 19 15:11:44 2014  vlan_name default mac 00:04:96:37:14:c3 was
>>deleted on xe-0/0/37.0
>> Wed Feb 19 15:11:44 2014  vlan_name default mac 00:04:96:37:14:c3 was
>>learned on xe-0/0/37.0
>>
>>
>> But, I'm not getting an extraordinary level of input traffic from
>>there. 
>>
>> Juniper PR695200 says this error message can be harmless though, so I'm
>>not
>> convinced this is the root cause.
>>
>
>Are you a bunch of broadcast/multicast traffic?  The CNS switch is
>seeing ~5000pps of broadcast traffic from the MICE main switch.  I don't
>know what the normal rate is, but it seems like it is a bit high.
>Especially given that the average broadcast cost over the uptime of the
>switch is about 20pps.
>
>If the Mankato switch has a high broadcast rate, I'd shut down the port
>and see if things stabilize.
>
>########################################################################
>
>To unsubscribe from the MICE-DISCUSS list, click the following link:
>http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

########################################################################

To unsubscribe from the MICE-DISCUSS list, click the following link:
http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1

########################################################################

To unsubscribe from the MICE-DISCUSS list, click the following link:
http://lists.iphouse.net/cgi-bin/wa?SUBED1=MICE-DISCUSS&A=1