Hi guys,
I noticed that from last week, I am getting practically every minute or less, a log message like this in ASR log:
Jul 26 2023 14:26:46.158: %IOSXE-5-PLATFORM: F0: cpp_cp: QFP:0.1 Thread:199 TS:00084795299536916500 %PUNT_INJECT-5-DROP_PUNT_CAUSE: punt cause policer drop packet casue 7
show platform hardware qfp active infrastructure punt config cause 7:
QFP Punt Table Configuration
Punt table base addr : 0x48846010
punt cause index 7
punt cause name ARP request or response
maximum instances 1
punt table address : 0x4884602C
instance[0] ptr : 0x4884683C
QFP interface handle : 2
Interface name : internal0/0/rp:0
instance address : 0x4884683C
fast failover address : 0x4882B864
Low priority policer : 12
High priority policer : 13
show platform hardware qfp active infrastructure punt statistics type per-cause
Global Per Cause Statistics
Number of punt causes = 127
Per Punt Cause Statistics
Packets Packets
Counter ID Punt Cause Name Received Transmitted
------------------------------------------------------------------------------------------------
000 Reserved 0 0
001 MPLS ICMP Can't Fragment 0 0
002 IPv4 Options 113565441 79835255
003 Layer2 control and legacy 88146354 88146350
004 PPP Control 0 0
005 CLNS IS-IS Control 0 0
006 HDLC keepalives 0 0
007 ARP request or response 611501834 556717600
008 Reverse ARP request or repsonse 31869 31869
009 Frame-relay LMI Control 0 0
010 Incomplete adjacency 15558 15558
And this one being empty:
show platform hardware qfp active infrastructure punt statistics type punt-intf-drop latest
Punt Intf Drop Statistics (lastest 1000 dropped packets):
Interface Packets
----------------------------------------------
Is there a chance I can somehow pinpoint the interface/source of ARPs, so I can see what to do about it?
I have plenty of interfaces (physical and BDIs) so trying to find some "easy" way to find the guilty one!
Any other kind of help/suggestion/proposal is more than welcome!
Thank you all in advance!
