Error message on Cat4507.

shahaij · ‎08-01-2005

Dear Sir.,

I got some error messages on my cat4507.

"

%C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTE: Unable to determine whether to route or bridge replicated software-processed packet with source address 00:0D:60:F3:52:8E and destination address 00:00:0C:07:AC:5A

"

%C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTE: (Suppressed 11 times)Unable to determine whether to route or bridge replicated software-processed packet with source address 00:0B:DB:A1:1F:3B and destination address 00:00:0C:07:AC:96

"

What does it mean? I search it on cco. it seems that means IOS don't know how to handle such packet -- route or bridge. Why such situation happens? is it harmless?

Thank you very much.

Regards,

Sha

Georg Pauwen · ‎08-01-2005

Hello Sha,

I guess you already saw this explanation on CCO:

Error Message C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTE:Unable to determine whether to route or bridge replicated software-processed packet with source address [mac-addr] and destination address [mac-addr]

Explanation When a replicated packet is sent to the software by an output ACL, the hardware does not indicate whether the packet needs to be bridged or routed.

When resources are exhausted or when the ACLs programmed in the hardware cannot handle processing directly (such as ACLs matching TCP flags), the Supervisor Engine III sends the packets to software for processing. If the software cannot determine whether to bridge or route, the packet might be dropped. This drop indicates that the packet was directed to a Hot Standby Routing Protocol (HSRP) router group MAC address.

Can you determine the source address (the MAC address is given in the error message) ? Is that a machine on your network, and if so, can you find out what kind of traffic that source is trying to send ?

Regards,

GP

huizhan.zhang · ‎08-06-2005

hi,

I have the same issue:

Aug 2 15:25:59.714: %C4K_PKTPROCESSING-4-UNKNOWNBRIDGEORROUTE: (Suppressed 1 times)Unable to determine whether to route or bridge replicated software-processed packet with source address 00:06:29:DC:95:E8 and destination address 00:00:0C:07:AC:22

I have check the MAC ADDRESS ,and find 00:06:29:DC:95:E8 is a IBM server running SNA LLC2.

I get sh ver:

sh ver

Cisco Internetwork Operating System Software

IOS (tm) Catalyst 4000 L3 Switch Software (cat4000-IS-M), Version 12.1(13)EW1, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)

TAC Support: http://www.cisco.com/tac

Compiled Tue 18-Mar-03 07:33 by hqluong

Image text-base: 0x00000000, data-base: 0x00E64034

ROM: 12.1(20r)EW1

Dagobah Revision 53, Swamp Revision 16

SA40SW01 uptime is 1 year, 5 weeks, 4 days, 15 hours, 1 minute

System returned to ROM by power-on

System restarted at 18:52:44 UTC Sat Jun 26 2004

System image file is "bootflash:cat4000-is-mz.121-13.EW1.bin"

cisco WS-C4006 (MPC8245) processor (revision 7) with 262144K bytes of memory.

Processor board ID FOX062900WK

Last reset from PowerUp

48 FastEthernet/IEEE 802.3 interface(s)

2 Gigabit Ethernet/IEEE 802.3 interface(s)

467K bytes of non-volatile configuration memory.

Configuration register is 0x2102

Prashanth Krishnappa · ‎08-07-2005

This typically is a relatively rare transient condition that can happen when the mac address table for an adjacent router has timed out (but the arp entry is still there) and for some reason the switch is directing those packets to the CPU.

This condition is corrected when the location of the host is learned.

One of the most common conditions causing such messages could be assymetric routing, where cam aging time is 5 minute by default and arp time is 4 hours by default.

Few commands you might want to use to track this issue..

- show mac-address <--- this is for the mac address that you are getting in the logs.

- show arp | incl

Furthermore, there are couple workarounds.

Option 1

========

interface vlan

arp timeout 240

no ip unreachables [ this will prevent the denied packets to go to CPU ]

Option 2

=======

You should be able to stop the message from coming up by putting in static cam entry.