Question on the display of 'show logg'

[bulgogi09]

Hello,

Can someone please explain to me what the '.' in front of these messages mean?

May 22 10:17:34.956: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

May 22 10:17:41.776: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.6.99 (Tunnel0) is up: new adjacency

May 22 10:18:54.468: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is down: retry limit exceeded

May 22 10:18:54.640: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

May 22 10:20:14.156: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is down: retry limit exceeded

May 22 10:20:17.060: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

.May 22 10:21:36.572: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is down: retry limit exceeded

.May 22 10:21:40.360: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

.May 22 10:22:03.664: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.6.190 (Tunnel0) is up: new adjacency

.May 22 10:22:07.792: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.47 (Tunnel0) is down: holding time expired

.May 22 10:22:10.352: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.6.131 (Tunnel0) is down: holding time expired

.May 22 10:22:36.976: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.6.131 (Tunnel0) is up: new adjacency

.May 22 10:22:37.072: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.47 (Tunnel0) is up: new adjacency

.May 22 10:23:00.048: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is down: retry limit exceeded

.May 22 10:23:03.388: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10205: Neighbor 10.205.3.138 (Tunnel0) is up: new adjacency

May 22 10:24:06.893: %DUAL-5-NBRCHANGE: IP-EIGRP(0) 10206: Neighbor 10.206.0.87 (Tunnel1) is down: Interface Goodbye received

May 2

Thank you.

[mike-greene]

Hi,

If your referring to the 956 in this number "10:17:34.956", I believe thats microseconds.

HTH

[Richard Burts · Accepted solution]

John

The log entries with a "." preceeding the date is an indicator that while the router believes that it knows what time it is, that the time is not authoritative (and potentially not accurate). My guess is that this router is running NTP to learn time and while these messages about EIGRP neighbors going down and coming up that the router lost (temporarily) its connection to the NTP server. When the log messages start having the date with no "." preceeding it is a sign that the router has re-established its connection to the NTP server and that the time stamp is now authoritative (and accurate).

HTH

Rick