Re: Traceback logs on Cisco 1921 - Page 2

00upaijcn6kIJPjXI5d6 · ‎05-06-2021

Hi all,

Any idea about the traceback logs shown on my Cisco 1921 with IOS Version 15.2(2)

I tried to decode the logs but I wasn't lucky enough!

Traceback= 0x256D5600z 0x256F1FCCz 0x256F2074z 0x256F4C34z 0x25686FF0z 0x25687C54z 0x2412021Cz 0x241208A0z
Traceback= 2117CA64z 2117CBE0z 2117E18Cz 2117FD50z 21180230z 211649CCz 2117DB24z 21166510z 21166798z 21166878z 21166AB4z 23DE4920z 23DE4904z

00upaijcn6kIJPjXI5d6 · ‎05-12-2021

yes

Leo Laohoo · ‎05-10-2021

@00upaijcn6kIJPjXI5d6 wrote:

a) 1x 100 Mbps (backup one) + 1x200 Mbps (primary one)

1900 router cannot support >75 Mbps of WAN speed.

00upaijcn6kIJPjXI5d6 · ‎05-11-2021

75Mbps - this is not an issue, because at peak I have 30-33 % link saturation.

Late night the load is averages 1-2% when this tracback was captured.

Leo Laohoo · ‎05-11-2021

Post the complete output to the following commands:

sh version
sh interface <WAN ports>
sh interface <LAN ports>

IMPORTANT: Remove the IP address and/or Description. Do not remove/edit anything else.

00upaijcn6kIJPjXI5d6 · ‎05-12-2021

GigabitEthernet0/0 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is fc99.4794.3220 (bia fc99.4794.3220)
Description: WAN
Internet address is x.x.x.x/29
MTU 1500 bytes, BW 8000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 94/255, rxload 51/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is unsupported, input flow-control is unsupported
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/93500 (size/max/drops/flushes); Total output drops: 836
Queueing strategy: Class-based queueing
Output queue: 0/1000/836 (size/max total/drops)
5 minute input rate 1620000 bits/sec, 312 packets/sec
5 minute output rate 2979000 bits/sec, 378 packets/sec
68748987 packets input, 176946709 bytes, 441 no buffer
Received 77912 broadcasts (0 IP multicasts)
0 runts, 0 giants, 14 throttles
91465 input errors, 0 CRC, 0 frame, 91465 overrun, 0 ignored
0 watchdog, 8250 multicast, 0 pause input
63717681 packets output, 1000226462 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
1 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet0/1 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is fc99.4794.3221 (bia fc99.4794.3221)
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 1., loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/3222 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 2984000 bits/sec, 380 packets/sec
5 minute output rate 1631000 bits/sec, 317 packets/sec
65572425 packets input, 1538758483 bytes, 77 no buffer
Received 3192438 broadcasts (0 IP multicasts)
0 runts, 0 giants, 2 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 32992 multicast, 0 pause input
68034305 packets output, 3681168764 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
16497 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 1585534 pause output
0 output buffer failures, 0 output buffers swapped out
GigabitEthernet0/1.2 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is fc99.4794.3221 (bia fc99.4794.3221)
Internet address is 10.10.10.10/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 2.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive set (10 sec)
Last clearing of "show interface" counters never
GigabitEthernet0/1.10 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is fc99.4794.3221 (bia fc99.4794.3221)
Internet address is 10.0.99.200/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 10.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive set (10 sec)
Last clearing of "show interface" counters never
GigabitEthernet0/1.11 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is fc99.4794.3221 (bia fc99.4794.3221)
Internet address is 172.26.2.99/27
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 11.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive set (10 sec)
Last clearing of "show interface" counters never
GigabitEthernet0/1.12 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is fc99.4794.3221 (bia fc99.4794.3221)
Internet address is 172.26.88.33/27
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 12.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive set (10 sec)
Last clearing of "show interface" counters never
GigabitEthernet0/1.172 is up, line protocol is up
Hardware is CN Gigabit Ethernet, address is fc99.4794.3221 (bia fc99.4794.3221)
Internet address is 172.26.99.254/24
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation 802.1Q Virtual LAN, Vlan ID 172.
ARP type: ARPA, ARP Timeout 04:00:00
Keepalive set (10 sec)
Last clearing of "show interface" counters never
GigabitEthernet0/0/0 is up, line protocol is up
Hardware is EHWIC-1GE-SFP-CU, address is fc99.4794.3228 (bia fc99.4794.3228)
Description: BACKUP_WAN
Internet address is z.z.z.z/29
MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full Duplex, 1Gbps, media type is RJ45
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:00, output 00:00:01, output hang never
Last clearing of "show interface" counters never
Input queue: 0/75/0/5351 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 11000 bits/sec, 3 packets/sec
5 minute output rate 0 bits/sec, 0 packets/sec
1946372 packets input, 479692649 bytes, 0 no buffer
Received 464667 broadcasts (0 IP multicasts)
0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
70466 packets output, 18990513 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
1 unknown protocol drops
0 babbles, 0 late collision, 0 deferred
1 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped out

Gate#sh ver
Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.2(4)M11, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2020 by Cisco Systems, Inc.

ROM: System Bootstrap, Version 15.0(1r)M15, RELEASE SOFTWARE (fc1)

Gate_ uptime is 5 days, 17 hours, 33 minutes
System returned to ROM by reload at 16:35:51 CET Thu May 6 2021
System restarted at 16:37:49 CET Thu May 6 2021
System image file is "usbflash0:/c1900-universalk9-npe-mz.SPA.152-4.M11.bin"
Last reload type: Normal Reload
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Cisco CISCO1921/K9 (revision 1.0) with 487424K/36864K bytes of memory.
Processor board ID FCZ163379YQ
3 Gigabit Ethernet interfaces
1 terminal line
1 Virtual Private Network (VPN) Module
DRAM configuration is 64 bits wide with parity disabled.
255K bytes of non-volatile configuration memory.
249840K bytes of USB Flash usbflash0 (Read/Write)

License Info:

License UDI:

-------------------------------------------------
Device# PID SN
-------------------------------------------------
*1 CISCO1921/K9 FCZ163379YQ

Suite License Information for Module:'c1900'

--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9 None None None
securityk9
datak9

Technology Package License Information for Module:'c1900'

------------------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------
ipbase ipbasek9 Permanent ipbasek9
security securityk9 Permanent securityk9
data None None None

Configuration register is 0x2102

Leo Laohoo · ‎05-12-2021

@00upaijcn6kIJPjXI5d6 wrote:

GigabitEthernet0/0 is up, line protocol is up
 Full Duplex, 1Gbps, media type is RJ45
 91465 input errors, 0 CRC, 0 frame, 91465 overrun, 0 ignored

Speed duplex mismatch.

00upaijcn6kIJPjXI5d6 · ‎05-12-2021

i knew

Leo Laohoo · ‎05-12-2021

@00upaijcn6kIJPjXI5d6 wrote:
Total output drops: 836

Hmmmm ...

Leo Laohoo · ‎05-12-2021

@00upaijcn6kIJPjXI5d6 wrote:
security securityk9 Permanent securityk9

Is Firewall enabled on this router?

balaji.bandi · ‎05-12-2021

as @Leo Laohoo state, something not right as per the information.

check the cables first and repalce it. make sure it has stable link before go further.

also if the requirement is more, then time for uplift

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

00upaijcn6kIJPjXI5d6 · ‎05-12-2021

OK, I will do it now for sure - np

00upaijcn6kIJPjXI5d6 · ‎05-12-2021

yes of course, this traceback is imho a effect of a security breach

Leo Laohoo · ‎05-12-2021

I think the Traceback is caused by the firewall not able to handle when a microburst hits.

00upaijcn6kIJPjXI5d6 · ‎05-12-2021

Unfortunately no, the firewall was turned on 3 days ago,

after I was observed the traceback for the first time (29.04)