Netflow export error from WS-X6704-10GE

[s.bakulin]

Hello!

We have a problem with exporting netflow from WS-X6704-10GE (with DFC3CXL) line cards.

ICAM used for 99% and TCAM not used.

#sh mls netflow table-contention summary

Earl in Module 2

Summary of Netflow CAM Utilization (as a percentage)

====================================================

TCAM Utilization             :   1%

ICAM Utilization             :   99%

Netflow Creation Failures    :   131564

Netflow CAM aliases          :   0

In the same router netflow export from SUP720 module is ok.

#sh mls netflow table-contention summary

Earl in Module 6

Summary of Netflow CAM Utilization (as a percentage)

====================================================

TCAM Utilization             :   15%

ICAM Utilization             :   0%

Netflow Creation Failures    :   0

Netflow CAM aliases          :   0

#sh module

2    4  CEF720 4 port 10-Gigabit Ethernet      WS-X6704-10GE     

6    5  Supervisor Engine 720 10GE (Active)    VS-S720-10G       

  2  Distributed Forwarding Card WS-F6700-DFC3CXL   SAL1435SBR6  1.1    Ok

  6  MSFC3 Daughterboard         VS-F6K-MSFC3       SAL1228X2TX  1.0    Ok

#sh ver

Cisco IOS Software, s72033_rp Software (s72033_rp-ADVIPSERVICESK9_WAN-M), Version 12.2(33)SXI4a, RELEASE SOFTWARE (fc2)

cisco WS-C6506-E

Have tried software upgrade from SXI4a to SXH7, problem still existed.

#sh run | i mls

mls aging fast time 8 threshold 3

mls aging long 480

mls aging normal 32

mls netflow interface

mls netflow usage notify 80 120

mls flow ip interface-full

mls nde sender version 5

mls qos

mls cef error action reset

Do you have any idea?

[s.bakulin]

up!

[andtoth]

Hi,

There's no general rule regarding the relative utilizations of TCAM and ICAM. They depend very much on the traffic pattern. If ICAM utilization is high and TCAM utilization is low and Netflow creation failures increasing, it means that the incoming traffic pattern is causing both hash aliasing/collision and double aliasing/collision. Double aliased flows cannot be created in the netflow table and show up as failures.

Try changing the flowmask, then make sure you clear the flows in the netflow table to get rid of the old flows in the ICAM/TCAM with the 'clear mls netflow ip' command.

You could try changing the flowmask to a less specific flowmask like int-dest or int-dest-src, to have lesser flow information.

If that does not help, try to spread traffic across your linecards to have more flows on other DFC cards as instead.

Best regards,

Andras

[kon2002]

I try all flowmasks - nothing.

#sh mls netflow table-contention detailed

Earl in Module 2

Detailed Netflow CAM (TCAM and ICAM) Utilization

================================================

TCAM Utilization             :   7%

ICAM Utilization             :   99%

Netflow TCAM count           :   19241

Netflow ICAM count           :   127

Netflow Creation Failures    :   1075979

Netflow CAM aliases          :   334

[Richard Michael]

Hello,

I have observed this issue with the other line cards but not with the 6708, high Netflow failures with high ICAM utilization, should be a bug . Mean time the bug i am referring to is CSCsu40667.

Interim, why dont you go for SXJ series.....Just a suggestion.

Thanks,

Ricky Micky

*Rate useful posts

[s.bakulin]

I try SXJ version.

#sh ver

Cisco IOS Software, s72033_rp Software (s72033_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(33)SXJ, RELEASE SOFTWARE (fc3)

But nothing changed

#sh mls netflow table-contention detailed

Earl in Module 2

Detailed Netflow CAM (TCAM and ICAM) Utilization

================================================

TCAM Utilization             :   7%

ICAM Utilization             :   99%

Netflow TCAM count           :   19805

Netflow ICAM count           :   127

Netflow Creation Failures    :   273837

Netflow CAM aliases          :   1

Earl in Module 3

Detailed Netflow CAM (TCAM and ICAM) Utilization

================================================

TCAM Utilization             :   2%

ICAM Utilization             :   68%

Netflow TCAM count           :   7600

Netflow ICAM count           :   88

Netflow Creation Failures    :   307677

Netflow CAM aliases          :   5

Earl in Module 6

Detailed Netflow CAM (TCAM and ICAM) Utilization

================================================

TCAM Utilization             :   34%

ICAM Utilization             :   0%

Netflow TCAM count           :   91639

Netflow ICAM count           :   0

Netflow Creation Failures    :   0

Netflow CAM aliases          :   0