Hi,
We have large global network using PfR in IOS-XE version 3.13.02s. When troubleshooting IPSec anti-reply issues we notice that most of our PfR probe traffic is apperaing as DROPPED. Due to the fact that we have issues with stability in the PfR solution I need to verify if this in fact is happening.............
PARRTR01#show platform packet-trace summary
Pkt Input Output State Reason
0 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
1 Gi0/0/0 Gi0/0/2.19 FWD
2 Gi0/0/0 Gi0/0/2.19 FWD
3 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
4 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
5 Gi0/0/0 Gi0/0/2.19 FWD
6 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
7 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
8 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
9 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
10 Gi0/0/0 Gi0/0/2.19 FWD
11 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
12 Gi0/0/0 Gi0/0/2.19 FWD
13 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
14 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
15 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
16 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
17 Gi0/0/0 Gi0/0/2.19 FWD
18 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
19 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
20 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
21 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
22 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
23 Gi0/0/0 Gi0/0/2.19 FWD
24 Gi0/0/0 Gi0/0/2.19 FWD
25 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
26 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
27 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
28 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
29 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
30 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
31 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
32 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
33 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
34 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
35 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
36 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
37 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
38 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
.....
80 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
....
88 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
89 Gi0/0/0 Tu100 DROP 405 (NoStatsUpdate)
XXXRTR01#show platform packet-trace packet 255
Packet: 255 CBUG ID: 44678
Summary
Input : GigabitEthernet0/0/0
Output : Tunnel100
State : DROP 405 (NoStatsUpdate)
Timestamp
Start : 168953903253185 ns (09/21/2016 06:35:32.434176 UTC)
Stop : 168953903588368 ns (09/21/2016 06:35:32.434511 UTC)
Path Trace
Feature: IPV4
Source : 162.92.2.213
Destination : 192.168.1.14
Protocol : 17 (UDP)
SrcPort : 4500
DstPort : 4500
Feature: CFT
API : cft_handle_pkt
packet capabilities : 0x0000008c
input vrf_idx : 0
calling feature : STILE
direction : Input
triplet.vrf_idx : 2
triplet.network_start : 0x0100410e
triplet.triplet_flags : 0x00000000
triplet.counter : 52
cft_bucket_number : 1682516
cft_l3_payload_size : 144
cft_pkt_ind_flags : 0x00000240
cft_pkt_ind_valid : 0x00009bff
tuple.src_ip : 162.92.2.213
tuple.dst_ip : 192.168.1.14
tuple.src_port : 4500
tuple.dst_port : 4500
tuple.vrfid : 2
tuple.l4_protocol : UDP
tuple.l3_protocol : IPV4
pkt_sb_state : 0
pkt_sb.num_flows : 1
pkt_sb.tuple_epoch : 52
returned cft_error : 0
returned fid : 0xe9aa2b50
Feature: NBAR
Packet number in flow: N/A
Classification state: Final
Classification name: unknown
Classification ID: [CANA-L7:1]
Number of matched sub-classifications: 1
Number of extracted fields: 0
Is PA (split) packet: False
TPH-MQC bitmask value: 0x0
Feature: IPSec
Action : DECRYPT
SA Handle : 41
SPI : 0xf97589e5
Peer Addr : 162.92.2.213
Local Addr: 192.168.1.14
Feature: CFT
API : cft_handle_pkt
packet capabilities : 0x0000008c
input vrf_idx : 0
calling feature : STILE
direction : Input
triplet.vrf_idx : 0
triplet.network_start : 0x0100c12c
triplet.triplet_flags : 0x00000000
triplet.counter : 52
cft_bucket_number : 1638952
cft_l3_payload_size : 60
cft_pkt_ind_flags : 0x00000202
cft_pkt_ind_valid : 0x00009bff
tuple.src_ip : 10.255.255.254
tuple.dst_ip : 10.255.255.114
tuple.src_port : 18000
tuple.dst_port : 19000
tuple.vrfid : 0
tuple.l4_protocol : UDP
tuple.l3_protocol : IPV4
pkt_sb_state : 0
pkt_sb.num_flows : 2
pkt_sb.tuple_epoch : 52
returned cft_error : 0
returned fid : 0xe9b10320
Feature: NBAR
Packet number in flow: 3
Classification state: Final
Classification name: rtp-audio
Classification ID: [CANA-L7:566]
Number of matched sub-classifications: 0
Number of extracted fields: 0
Is PA (split) packet: False
TPH-MQC bitmask value: 0x0
