topic Re: New log? "Packet is neither ipv4 nor ipv6" in Routing and SD-WAN

New log? "Packet is neither ipv4 nor ipv6"

Rasmus Kiilerich — Tue, 05 Mar 2019 17:50:03 GMT

On a 892FSP router running Version 15.7(3)M1 I get a new type of messages in my log. The router is connected to the internet, with at inbound ACL on the interface, and it runs DMVPN.

I do get all the normal scanning attempts from the internet but also this new entry "Packet is neither ipv4 nor ipv6"

What is this all about? I have google´d it but did not find anything from cisco.

Jan 28 07:52:17.786: %SEC-6-IPACCESSLOGP: list outside_in denied udp 167.114.46.166(5062) -> xxx.xxx.xxx.xxx(5060), 1 packet
Jan 28 07:52:21.014: %SEC-6-IPACCESSLOGP: list outside_in denied tcp 101.99.6.176(27059) -> xxx.xxx.xxx.xxx(445), 1 packet
Jan 28 07:52:44.138: %SEC-6-IPACCESSLOGDP: list outside_in denied icmp 206.117.25.90 -> xxx.xxx.xxx.xxx (8/0), 1 packet
Jan 28 07:52:54.086: Packet is neither ipv4 nor ipv6

Re: New log? "Packet is neither ipv4 nor ipv6"

Georg Pauwen — Sun, 28 Jan 2018 08:29:37 GMT

Hello,

I have tried to access the IP addresses in your log.

This one is especially interesting:

206.117.25.90

https://ant.isi.edu/datasets/about.html

Re: New log? "Packet is neither ipv4 nor ipv6"

mark.ozga — Sun, 28 Jan 2018 23:23:22 GMT

We too are seeing this with version 157-3.M1.bin but how can we filter these from eating up our syslog and spewing to the terminal? We are seeing them every 10 seconds.

Re: New log? "Packet is neither ipv4 nor ipv6"

Brian Schultz — Mon, 05 Mar 2018 03:56:08 GMT

Did you figure out what was causing this? I'm seeing this same message after upgrading some 2921's to 15.5(3)M7.

-Brian

Re: New log? "Packet is neither ipv4 nor ipv6"

mark.ozga — Mon, 05 Mar 2018 11:17:35 GMT

It's most likely a software issue. I was able to keep it from filling the logs by installing a logging discriminator that matches a regular expression filter like so:

logging discriminator PACKET mnemonics drops _Packet is neither ipv4 nor ipv6
logging buffered discriminator PACKET 4096

Re: New log? "Packet is neither ipv4 nor ipv6"

Bob Goal — Tue, 06 Mar 2018 10:17:28 GMT

I have also got this issue on C897VA-K9 with 15.5(3)M7. The issue was not present on 15.5(3)M6a

Mar  6 11:13:13: Packet is neither ipv4 nor ipv6

Could somebody open a TAC case for this? I haven't seen any bug id related to the issue. This particular device is not curently covered with the service contract.

Re: New log? "Packet is neither ipv4 nor ipv6"

Brian Schultz — Mon, 12 Mar 2018 22:06:07 GMT

In my case, I was able to eliminate this log from appearing after disabling CDP on my DMVPN tunnel interface.

Re: New log? "Packet is neither ipv4 nor ipv6"

Bob Goal — Tue, 13 Mar 2018 06:37:47 GMT

Disabling CDP on DMVPN interface resolved the issue!

Re: New log? "Packet is neither ipv4 nor ipv6"

Brian Schultz — Wed, 14 Mar 2018 17:50:42 GMT

This is now documented under bug ID - CSCvi42835.

Re: New log? "Packet is neither ipv4 nor ipv6"

dinger.sergey — Thu, 29 Mar 2018 11:33:36 GMT

In my case, I see such messages even if the CDP is disabled globally. I also do not have a DMVPN.

Cisco 3925e - 15.5(3)M7.

Re: New log? "Packet is neither ipv4 nor ipv6"

Rasmus Kiilerich — Sun, 27 May 2018 07:17:41 GMT

Thanks.

Not really the best "solution". Really hope Cisco will fix it but I still see this, even in the newest 15.7 😞