topic Re: MARS - inbound packet error rate high for unrouted VLAN in Network Security

MARS - inbound packet error rate high for unrouted VLAN

richard.gu — Sun, 10 Mar 2019 10:21:35 GMT

After upgrade to 4.2.2, we are getting lots of inbound packet error rate high for some unrouted vlan in Cisco 6509. I did some sniff and find that MARS try to get ifInErrors of those unrouted vlan. But the unrouted vlan only support ifOutUcastPkts and ifInUcastPkts.

I just wondering is there some bug in the MARS or there are some kind of database corruption.

Re: MARS - inbound packet error rate high for unrouted VLAN

sadbulali — Tue, 12 Dec 2006 20:48:03 GMT

Try this:

go to Admin>Security Monitoring Devices> select the device you have this

issue with Edit it and put Monitoring resources in to no state.

Try this link:

http://www.cisco.com/en/US/products/ps6241/products_user_guide_chapter09186a008075038a.html

Re: MARS - inbound packet error rate high for unrouted VLAN

john.stark — Wed, 13 Dec 2006 19:36:43 GMT

It would make more sense for Cisco to fix the problem with the monitoring than to turn off the monitoring function. Why even have it as an option if it does not work?

Re: MARS - inbound packet error rate high for unrouted VLAN

jevans — Wed, 14 Mar 2007 14:30:22 GMT

was their ever a fix posted for this issue. I am running 4.2.4 code and having this same issue with 6513.

Re: MARS - inbound packet error rate high for unrouted VLAN

Solobone22 — Thu, 06 Mar 2008 22:31:58 GMT

so is that the final answer on this issue? just turn off monitoring to the affected device or deal with a bunch of unnecessary alerts. could it possibly be anything else, like broadcast storms or loops etc.

Re: MARS - inbound packet error rate high for unrouted VLAN

mhellman — Fri, 07 Mar 2008 13:57:55 GMT

Any reason you wouldn't just create a drop rule or modify the inspection rule that is firing?

btw, have a look here to make sure it isn't the same issue:

http://groups.google.com/group/cs-mars-ug/browse_thread/thread/9431fe079f7245ef/f4516dea991132da?lnk=gst&q=ingress&rnum=1#

Re: MARS - inbound packet error rate high for unrouted VLAN

Solobone22 — Fri, 07 Mar 2008 19:44:18 GMT

yup... that was it. i don't have access to actual devices just security monitoring. when i was able to get the clients it staff to look at the logs from the actual device in question it reported no errors. thanks.