Ways to Check Leaesd-line Traffic

fwpsam123 · ‎03-03-2005

Dear all,

My Company has a leased-line between two locations, the speed seems quite slow these days. I use the following command to view it:

___________________________________________________

sh int s0/0

Serial0/0 is up, line protocol is up

Hardware is PowerQUICC Serial

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec,

reliability 255/255, txload 12/255, rxload 2/255

Encapsulation FRAME-RELAY, loopback not set

Keepalive set (10 sec)

LMI enq sent 1037007, LMI stat recvd 1037007, LMI upd recvd 0, DTE LMI up

LMI enq recvd 0, LMI stat sent 0, LMI upd sent 0

LMI DLCI 1023 LMI type is CISCO frame relay DTE

Broadcast queue 0/64, broadcasts sent/dropped 4828047/0, interface broadcasts

4482470

Last input 00:00:07, output 00:00:00, output hang never

Last clearing of "show interface" counters 17w1d

Queueing strategy: fifo

Output queue 0/40, 35450 drops; input queue 0/75, 0 drops

5 minute input rate 15000 bits/sec, 28 packets/sec

5 minute output rate 76000 bits/sec, 14 packets/sec

108156378 packets input, 1819518435 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

74519354 packets output, 2227756625 bytes, 0 underruns

0 output errors, 0 collisions, 1 interface resets

0 output buffer failures, 0 output buffers swapped out

0 carrier transitions

DCD=up DSR=up DTR=up RTS=up CTS=up

___________________________________________________

This log is captured when the speed is normal, but i want to ask which entrys should i force on and what value should they be and what other commands i can use to check it?

Thanks in advance.

Br,

Sam

Thanks in advance.

dgahm · ‎03-03-2005

Sam,

There are many possibilities here.

Can you provide more info:

1. What is your frame relay port speed?

2. What is the PVC CIR and burst?

3. Can you post your configuration for this interface, and any subinterfaces?

4. Post the results of a 'show frame pvc'

fwpsam123 · ‎03-06-2005

Thanks dgahm,

The followign is the #sh run

--------------------------------------------------

abc#sh run

Building configuration...

Current configuration : 1285 bytes

!

version 12.1

service timestamps debug uptime

service timestamps log datetime localtime

no service password-encryption

!

hostname abc

!

logging buffered 8192 debugging

enable password xxx

!

ip subnet-zero

no ip finger

!

interface Loopback1

no ip address

!

interface Ethernet0/0

ip address 202.146.107.254 255.255.255.0

ip helper-address 192.168.108.1

ip directed-broadcast

!

interface Serial0/0

no ip address

ip directed-broadcast

encapsulation frame-relay

no fair-queue

frame-relay traffic-shaping

!

interface Serial0/0.1 point-to-point

ip address 10.1.1.1 255.255.255.252

ip directed-broadcast

frame-relay interface-dlci 100

class 128k

!

interface Serial0/0.2 point-to-point

ip address 10.1.2.1 255.255.255.252

router eigrp 100

network 10.0.0.0

network 202.146.107.0

auto-summary

no eigrp log-neighbor-changes

!

ip classless

ip route 0.0.0.0 0.0.0.0 202.146.107.91

ip http server

!

map-class frame-relay 128k

frame-relay adaptive-shaping becn

frame-relay cir 256000

frame-relay bc 32000

frame-relay mincir 208000

frame-relay fair-queue

!

line con 0

transport input none

line aux 0

transport input all

line vty 0 4

password xxx

login

transport input pad v120 telnet rlogin udptn

!

end

--------------------------------------------------

While this is the #sh frame pvc

--------------------------------------------------

abc#sh frame pvc

PVC Statistics for interface Serial0/0 (Frame Relay DTE)

Active Inactive Deleted Static

Local 2 0 0 0

Switched 0 0 0 0

Unused 0 0 0 0

DLCI = 100, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial0/0.1

input pkts 110114704 output pkts 73041792 in bytes 2027985003

out bytes 2987280735 dropped pkts 1 in FECN pkts 0

in BECN pkts 4726329 out FECN pkts 0 out BECN pkts 0

in DE pkts 0 out DE pkts 0

out bcast pkts 2472802 out bcast bytes 198263147

Shaping adapts to BECN

pvc create time 17w3d, last time pvc status changed 1d17h

DLCI = 800, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Serial0/0.2

input pkts 355432 output pkts 2473207 in bytes 34120192

out bytes 198293169 dropped pkts 0 in FECN pkts 0

in BECN pkts 0 out FECN pkts 0 out BECN pkts 0

in DE pkts 0 out DE pkts 0

out bcast pkts 2473190 out bcast bytes 198292273

pvc create time 17w3d, last time pvc status changed 17w3d

----------------------------------------------------

Actually, I am not sure this is due to the large traffic as this only happens recently. For normal case, the ping response would be around 100ms. While for abnormal case, the response would be under 300ms or even more than 1000ms.

Thanks in advance.

Br,

Sam

dgahm · ‎03-07-2005

Sam,

The large number of BECNs would suggest that you need more bandwidth, and that your symptoms are the result of congestion. You may want to determine the source of the extra traffic, as it may be something you don't want on your network. If this is the case you could use CBWFQ or policing to prevent the low priority traffic from hogging the pipe.

IP accounting is the easiest way to identify source and destination of the big talkers.

interface Serial0/0.1 point-to-point

ip accounting output-packets

When the slowdowns occur:

'clear ip accounting'

To restart the count.

'show ip accounting'

Watch the packet count and repeat.

fwpsam123 · ‎03-07-2005

Many Thanks~~!!!

Does this command uses lots of CPU resources? Can I keep it on?

When i used the command 'show processes cpu' to show the cpu utilization, how can i sort them by ascending cpu usage when display?

Also, can i limit the traffic of a IP on the router? how to do so?

Thanks in advance.

Br,

Sam

dgahm · ‎03-08-2005

IP accounting is safe, and will not load up the processor.

What is your 'show proc' level? I am not aware of any way to get the output of 'show proc cpu' to be shown in order of cpu usage. It is usually pretty easy to scan through and see what process is the offender.

There are many QOS features available to manage or avoid congestion. The 1st step is to profile your normal traffic, and identify what traffic flows are present on your network. Then you can decide if it makes sense to try to limit particular flows or whether you need to add bandwidth.

fwpsam123 · ‎03-08-2005

Thanks dgahm,

Actually, there are two main traffic flow in our leased-line, Oracle Application and Email.

There are Oracle and Email Server on A Location while some mobile clients on B Location, I guess the traffic congnestion is due to email, that there are some mobile users sending/receiving large size email in the B Location that congests the traffic.

I am wondering if I can control these users traffic by their IP or by the Email Protocol? and How to implement it?

Thanks in advance.

Br,

Sam

dgahm · ‎03-09-2005

Sam,

Here is a good doc on configuring class based weighted fair queueing for frame relay:

http://www.cisco.com/en/US/customer/tech/tk713/tk237/technologies_configuration_example09186a008009486b.shtml

This will allow you to guarantee bandwidth to your critical traffic. Both your critical apps can be bandwidth intensive, so CBWFQ may not solve your problem, unless there is other non-critical traffic that is part of the mix.

Sometimes the right answer is to simply buy a bigger pipe.

Dave