N7k CoPP violations in class-default

[Dirk Woellhaf]

Hi,

I´ve an issue with 2 N7k´s running on 5.2(5) where I see drops in CoPP class-default. This happens on both Lincards (M132XP) installed in the chassis.

The interesting thing is, that there are no servers connected! This happens about once a month.

So what traffic could it be?

We see the syslog:

%COPP-5-COPP_DROPS5: CoPP drops exceed threshold in class: class-default, check show policy-map interface control-plane for more info. 

And copp-counters:

  class-map class-default (match-any)
       police cir 100 kbps , bc 250 ms
       module 17 :
         conformed 16230792 bytes; action: transmit
         violated 113052 bytes; action: drop
       module 18 :
         conformed 17857513 bytes; action: transmit
         violated 215685 bytes; action: drop  

regards,

    Dirk

(Please rate if helpful)       

[Reza Sharifi]

Hi,

I don't think there has to be a server involved. If you ping from one switch to another the 7k usually drops certain percentage of the ping packets.

HTH

[Dirk Woellhaf]

Hi,

I agree. I have seen that when using "strict" as copp-policy. But here we are using "lenient" and I get notified that the "class-default" is dropping traffic. ICMP echo and reply are matched to a different class (copp-class-monitoring)

regards,

    Dirk

(Please rate if helpful)