LAN Switch WS-C3560G-48PS UPLink port high Utilization

[HCL Support]

Hi Team,

There is one Switch PID#WS-C3560G-48PS installed at the customer site & this access switch uplink utilization is very high as reported today & need the cause of the same or any IOS, hardware related problem.

GigabitEthernet0/48 is up, line protocol is up (connected)

  Hardware is Gigabit Ethernet, address is fcfb.fb60.ed30 (bia fcfb.fb60.ed30)

  Description: "UPLINK to CS65RSM1.cok portGi1/5"

  MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,

     reliability 255/255, txload 8/255, rxload 249/255

  Encapsulation ARPA, loopback not set

  Keepalive set (10 sec)

  Full-duplex, 1000Mb/s, media type is 10/100/1000BaseTX

  input flow-control is off, output flow-control is unsupported

  ARP type: ARPA, ARP Timeout 04:00:00

  Last input 00:00:00, output 00:00:02, output hang never

  Last clearing of "show interface" counters never

  Input queue: 5/75/0/0 (size/max/drops/flushes); Total output drops: 2940106982

  Queueing strategy: fifo

  Output queue: 0/40 (size/max)

  5 minute input rate 976484000 bits/sec, 94775 packets/sec

  5 minute output rate 31429000 bits/sec, 2595 packets/sec

     157788715522 packets input, 147098169069254 bytes, 0 no buffer

     Received 1352763506 broadcasts (1065130831 multicasts)

     0 runts, 0 giants, 0 throttles

     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored

     0 watchdog, 1065130831 multicast, 0 pause input

     0 input packets with dribble condition detected

     56265767803 packets output, 84797740394538 bytes, 0 underruns

     0 output errors, 0 collisions, 1 interface resets

     0 babbles, 0 late collision, 0 deferred

     0 lost carrier, 0 no carrier, 0 PAUSE output

     0 output buffer failures, 0 output buffers swapped out

Switch Ports Model              SW Version            SW Image

------ ----- -----              ----------            ----------

*    1 52    WS-C3560G-48PS     12.2(55)SE7           C3560-IPBASEK9-M

Also attaching the show vserion, show interface , show logging of this Switch along with show running , show running interfcae CLI output of this Switch & other end switch. Need to suggest me on the case the resolution part & the reason.

Regards,

Ashutosh

[Mark Malone]

Hey nothing wrong with your switch or config that I can see ports look clean

Your receive load is huge so traffic coming inbound to that interface that's flooding it , you need to find out exactly what traffic is causing this ---rxload 249/255

You could span the uplink port see what traffic is exactly coming with a wireshark or use embedded pactket capture and export it to wireshark.It could be anything from anti-virus updates/ filer updates or someone downloading the wirehshark will tell you , if supported you could try ip accounting as well locating the ip may give you an idea to what type of traffic it could be

The connecting switch is sending it to that port ---txload 250/255

[Peter Paluch]

HCL Support, Mark,

Perhaps the show controllers utilization command on the Catalyst 3560 would be helpful - it will show a quick overview of all interfaces and their transmit/receive utilization percentage. Either the huge incoming traffic is flowing out some other port(s), or it is being dropped. The possibility of a switching loop occurring somewhere upstream of your switch also needs to be considered and investigated.

Best regards,
Peter