It must be packets not matching the ACL, as my sampling ratio was set for
every packet.
Thank you for your response Bob.
Tom
On Wed, Oct 6, 2010 at 6:18 PM, Bob Sinclair <bob_at_bobsinclair.net> wrote:
> Hi Tom,
>
> After running a lab test, it appears that the "dropped" counter is the
> number of packets that came in the interface and were not exported, either
> because they did not match the acl, or because of your sampling ratio.
>
> See if that makes sense in your case.
>
> Bob Sinclair CCIE 10427 CCSI 30427
> CIERS2 Online Instructor
> www.tinyurl.com/ciers2online
>
>
>
> > -----Original Message-----
> > From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> > Tom Kacprzynski
> > Sent: Wednesday, October 06, 2010 6:14 PM
> > To: ccielab_at_groupstudy.com
> > Subject: IP Traffic-export - dropped packets.
> >
> > Hello,
> > Doing some a lab for R&S and i'm on the security section. I'm
> > configuring
> > the ip traffic-export and have a quick question based on this output
> > (drops):
> >
> > Rack1R1#sh ip traffic-export
> > Router IP Traffic Export Parameters
> > Monitored Interface Serial0/0/0
> > Export Interface GigabitEthernet0/0
> > Destination MAC address 001e.f766.c621
> > bi-directional traffic export is on
> > Output IP Traffic Export Information Packets/Bytes Exported
> > 100/10000
> > * Packets Dropped 15*
> > Sampling Rate one-in-every 1 packets
> > Access List RITE-ACL [named extended IP]
> > Input IP Traffic Export Information Packets/Bytes Exported
> > 100/10000
> > * Packets Dropped 30*
> > Sampling Rate one-in-every 1 packets
> > Access List RITE-ACL [named extended IP]
> > Profile FR is Active
> >
> >
> > What would cause the input/output drops, is it just not being able to
> > handle
> > the traffic load.
> >
> > Thanks
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> >
> >
> >
> >
> >
> > No virus found in this incoming message.
> > Checked by AVG - www.avg.com
> > Version: 9.0.862 / Virus Database: 271.1.1/3180 - Release Date:
> > 10/06/10 02:34:00
Blogs and organic groups at http://www.ccie.net
Received on Thu Oct 07 2010 - 09:05:19 ART
This archive was generated by hypermail 2.2.0 : Mon Nov 01 2010 - 06:42:05 ART