2 messages in net.nether.puck.cisco-nsp[c-nsp] Netflow TCAM threshold exceeded
FromSent OnAttachments
Kim OnnelJan 1, 2005 8:44 am 
Nicolaj OttsenJan 2, 2005 6:22 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[c-nsp] Netflow TCAM threshold exceededActions...
From:Nicolaj Ottsen (no@webpartner.dk)
Date:Jan 2, 2005 6:22:04 am
List:net.nether.puck.cisco-nsp

Hi,

You can monitor the TCAM utils using "sh mls netflow table-contention detailed". To get a historical view of lost flows, type "sh mls netflow table-contention aggregate" and look for "Netflow creation failueres".

If you keep getting "Netflow creation failueres", you need to tweek the aging settings.

Our settings has been altered to :

mls aging fast time 5 threshold 32 mls aging long 300 mls aging normal 60 mls flow ip full

If you still get creation failueres, you need to enable netflow aggreation, or upgrade to PFC3BXL witch has room for twice the amount og netflow entries.

About aging, it is important to notice that the Fast, Normal and Long, options does not relate to the speed with witch a flows get aged out, it is a description og THREE different flow "types". Fx. Fast aging relates to dns quieries, Long aging relates to streaming radio, normal aging relates to all the rest.

See http://www.cisco.com/en/US/products/hw/switches/ps708/products_configura tion_guide_chapter09186a0080160a2b.html for further details.

Nicolaj

-----Original Message----- From: Kim Onnel [mailto:kari@gmail.com] Sent: 1. januar 2005 14:44 To: cisc@puck.nether.net Subject: [c-nsp] Netflow TCAM threshold exceeded

Hi,

On my 7609, with IOS 12.2(18)SXD with 512 MB of RAM, Netflow was enabled but only showing Process switched ones, but then i let it show the full CEF + process switched, the processing is Ok, but i am getting this all over my log

Dec 31 22:57:14: %EARL_NETFLOW-SP-4-TCAM_THRLD: Netflow TCAM threshold exceeded, TCAM Utilization [97%]

Dec 31 22:58:20: %EARL_NETFLOW-SP-4-TCAM_THRLD: Netflow TCAM threshold exceeded, TCAM Utilization [99%]

Dec 31 22:59:32: %EARL_NETFLOW-SP-4-TCAM_THRLD: Netflow TCAM threshold exceeded, TCAM Utilization [94%]

So, i googled troubleshooting tcam, but didnt find anything useful,

i'd welcome any comments, my questions is :

1) how do i know if this is affecting anything else 2) incase its not, how do i not log this msg, increase the Netflow tcam space or filter log ? 3) how do i really know my tcam is not full ?

Regards