Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results forĀ 
Search instead forĀ 
Did you mean:Ā 
cancel
Start a conversation
7460
Views
5
Helpful
2
Replies

Show IP ospf events Bad pkt rcvd

Sudeb Das
Level 1
Level 1

ā€Ž05-20-2016 09:29 AM - edited ā€Ž03-05-2019 04:03 AM

Show IP ospf events 

ABCD# show ip ospf event

OSPF Router with ID (1.1.1.2) (Process ID 100)

1 May 20 21:35:31.495: Bad pkt rcvd: 172.19.122.894
2 May 20 21:35:31.475: Bad pkt rcvd: 172.19.122.904
3 May 20 21:35:31.351: Bad pkt rcvd: 172.19.122.905
4 May 20 21:35:31.243: Bad pkt rcvd: 172.19.122.891
5 May 20 21:35:30.363: Bad pkt rcvd: 172.19.122.894
6 May 20 21:35:30.307: Bad pkt rcvd: 172.19.122.894
7 May 20 21:35:29.503: Bad pkt rcvd: 172.19.122.894
8 May 20 21:35:29.483: Bad pkt rcvd: 172.19.122.904
9 May 20 21:35:29.351: Bad pkt rcvd: 172.19.122.905
10 May 20 21:35:28.579: Bad pkt rcvd: 172.19.122.901
11 May 20 21:35:28.463: Bad pkt rcvd: 172.19.122.895

HI,

We are running 4 routers on ospf area 0. They have different router-ids configure & working fine.

When we've check with the command -  'Show IP ospf events' on each router the above error is showing. It's happening all day along & it generates 5 events within 1 seconds. All events are same. I'm quite confuse with the ip showing in logs. neighbor IPs are 89 & 90 in last octet of the above router but its showing an extra digit. e.g 895, 901, 905

Please help me with the explanation of the above events. We are not having any service affection yet but we are concerning about future.  

Scenario - routers are connected like below in area 0

A----B
|       |
|       |
C----D

1 person had this problem
Labels:
0 Helpful
2 Replies 2

Jose Solano
Level 4
Level 4

ā€Ž05-20-2016 12:16 PM

Hi,

This normally means that there are OSPF packets with bad headers, you can run the command show ip ospf traffic gigx/x or interface that faces the neighbor and check under the OSPF header errors to see which one is increasing.

Then you may want to run a debug ip ospf adj to see if you can capture more details about the packets received.

Hope this helps,

Jose

0 Helpful

Carlos Villagran
Cisco Employee
Cisco Employee

ā€Ž05-23-2016 05:51 AM

Hi!

1 May 20 21:35:31.495: Bad pkt rcvd: 172.19.122.894 

This log means you are receiving an OSPF packet type 4 (LSU) with a header error, you can check this information by observing which counter is incrementing in the  show ip ospf traffic giga x/x.

This may be because you are receiving OSPF packets from a neighbor which is not even in the same subnet if bad source counters are incrementing.

Hope it helps, best regards!

JC

Customers Also Viewed These Support Documents