Hi all,
Our C3850 in stack which version is 16.6.5. The cpu will high periodictity.
I have read some document .
sw-241#sho platform software fed switch active punt cause summary
Statistics for all causes
Cause Cause Info Rcvd Dropped
------------------------------------------------------------------------------
2 IPv4 Options 18663 0
7 ARP request or response 153 0
11 For-us data 5054935 0
21 RP<->QFP keepalive 1119537 0
24 Glean adjacency 47433240 26706276
29 RP handled ICMP 1093571542 0
55 For-us control 37951750 0
58 Layer2 bridge domain data packe 3266962 0
60 IP subnet or broadcast packet 34677317 0
79 dhcp snoop 16576921 0
92 ICMP unreachables 23694862 0
96 Layer2 control protocols 30311004 0
109 snoop packets 107910308 0
------------------------------------------------------------------------------
sw-241#sho platform software fed switch active cpu-interface
queue retrieved dropped invalid hol-block
-------------------------------------------------------------------------
Routing Protocol 54841463 0 0 0
L2 Protocol 29198978 0 0 0
sw forwarding 47452615 26706612 0 0
broadcast 34687442 9206 0 0
icmp gen 0 0 0 0
icmp redirect 1116174398 0 0 0
logging 0 0 0 0
rpf-fail 0 0 0 0
DOT1X authentication 0 0 0 0
Forus Traffic 5055168 0 0 0
Forus Resolution 153 0 0 0
Inter FED 0 0 0 0
L2 LVX control 0 0 0 0
EWLC control 0 0 0 0
EWLC data 0 0 0 0
L2 LVX data 0 0 0 0
Openflow 0 0 0 0
Topology control 1112883 0 0 0
Proto snooping 91029483 0 0 0
DHCP snooping 16577696 0 0 0
Transit Traffic 0 0 0 0
Multi End station 3267023 0 0 0
Webauth 0 0 0 0
Crypto control 0 0 0 0
Exception 0 0 0 0
System Critical 0 0 0 0
NFL sampled data 0 0 0 0
Low latency 0 0 0 0
EGR exception 1216584 0 0 0
Stackwise Virtual OOB 0 0 0 0
Multicast data 0 0 0 0
Gold packet 0 0 0 0
sw-241# sho platform hardware fed switch active qos queue stats internal cpu policer
CPU Queue Statistics
============================================================================================
(default) (set) Queue
QId PlcIdx Queue Name Enabled Rate Rate Drop(Bytes)
-----------------------------------------------------------------------------
0 11 DOT1X Auth Yes 1000 1000 0
1 1 L2 Control Yes 2000 2000 0
2 14 Forus traffic Yes 1000 1000 0
3 0 ICMP GEN Yes 600 2000 0
4 2 Routing Control Yes 5400 5400 0
5 14 Forus Address resolution Yes 1000 1000 0
6 0 ICMP Redirect Yes 600 2000 10818586425
7 16 Unused Yes 1000 1000 0
8 4 L2 LVX Cont Pack Yes 1000 1000 0
9 16 EWLC Control Yes 1000 1000 0
10 16 EWLC Data Yes 1000 1000 0
11 13 L2 LVX Data Pack Yes 1000 1000 0
12 0 BROADCAST Yes 600 2000 98013654
13 10 Openflow Yes 100 200 0
14 13 Sw forwarding Yes 1000 1000 0
15 8 Topology Control Yes 13000 13000 0
16 12 Proto Snooping Yes 2000 2000 0
17 16 DHCP Snooping Yes 1000 1000 133289562
18 9 Transit Traffic Yes 500 400 0
19 10 RPF Failed Yes 100 200 0
20 15 MCAST END STATION Yes 2000 2000 0
21 13 LOGGING Yes 1000 1000 0
22 7 Punt Webauth Yes 1000 1000 0
23 10 Crypto Control Yes 100 200 0
24 10 Exception Yes 100 200 0
25 3 System Critical Yes 1000 1000 0
26 10 NFL SAMPLED DATA Yes 100 200 0
27 2 Low Latency Yes 5400 5400 0
28 10 EGR Exception Yes 100 200 0
29 5 Stackwise Virtual OOB Yes 8000 8000 0
30 9 MCAST Data Yes 500 400 0
31 3 Gold Pkt Yes 1000 1000 0
* NOTE: CPU queue policer rates are configured to the closest hardware supported value
CPU Queue Policer Statistics
====================================================================
Policer Policer Accept Policer Drop
Index Bytes Bytes
------------------------------------------------
0 92911824896 11049889641
1 1819294729 0
2 4036724775 0 3 0 0
4 0 0
5 0 0
6 0 0
7 0 0
8 49379392 0
9 0 0
10 52195393 0
11 0 0
12 4066946516 0
13 2979005705 0
14 499958665 0
15 106716242 0
16 0 0
17 0 0
There are a lot of drop packets of ICMP Redirect & BROADCAST & DHCP Snooping
I have configured the monitor capture
sw-241#sho monitor capture
Status Information for Capture cpucap
Target Type:
Interface: Control Plane, Direction: IN
Status : Inactive
Filter Details:
Capture all packets
Buffer Details:
Buffer Type: LINEAR (default)
File Details:
Associated file name: flash:cpucap.pcap
Limit Details:
Number of Packets to capture: 0 (no limit)
Packet Capture duration: 0 (no limit)
Packet Size to capture: 0 (no limit)
Packet sampling rate: 0 (no sampling)
sw-241#sho monitor capture file flash:cpucap.pcap
66 0.021104 10.80.203.103 -> 10.181.1.61 TCP 64 6165 b^F^R 62216 [ACK] Seq=1 Ack=14851 Win=4134 Len=0 [ETHERNET FRAME CHECK SEQUENCE INCORRECT]
67 0.021442 10.80.203.103 -> 10.181.1.61 TCP 64 6165 b^F^R 62216 [ACK] Seq=1 Ack=17551 Win=4134 Len=0 [ETHERNET FRAME CHECK SEQUENCE INCORRECT]
68 0.021556 10.80.203.103 -> 10.181.1.61 TCP 64 6165 b^F^R 62216 [ACK] Seq=1 Ack=20251 Win=4134 Len=0 [ETHERNET FRAME CHECK SEQUENCE INCORRECT]
69 0.021713 10.80.203.103 -> 10.181.1.61 TCP 64 6165 b^F^R 62218 [ACK] Seq=1 Ack=17551 Win=4134 Len=0 [ETHERNET FRAME CHECK SEQUENCE INCORRECT]
70 0.021834 10.80.203.103 -> 10.181.1.61 TCP 64 6165 b^F^R 62218 [ACK] Seq=1 Ack=20251 Win=4134 Len=0 [ETHERNET FRAME CHECK SEQUENCE INCORRECT]
71 0.022485 10.80.203.103 -> 10.181.1.61 TCP 64 6165 b^F^R 62217 [ACK] Seq=1 Ack=40501 Win=4134 Len=0 [ETHERNET
I saw lots of packets of [ETHERNET FRAME CHECK SEQUENCE INCORRECT]
Hopefully someone can direct me in the correct direction.
Thank you
