Solved

ProCurve - Drops TX

Posted on 2016-08-03
7
290 Views
Last Modified: 2016-08-09
Hello,

I've just deplyed a large HP ProCurve Network, core is a 5406zl and 2530 at the edge, just doing a show int I noticed high Drops TX on this interface:


  C8         3,693,919,085  354,909,918    0           1,592,412    off  0

Sho int c8

show int c8

 Status and Counters - Port Counters for port C8

  Name  :
  MAC Address      : 001ffe-761cc8
  Link Status      : Up
   Utilization Rx  : 00.47 %              Utilization Tx  : 00.50 %
   Bytes Rx        : 2,088,800,989        Bytes Tx        : 1,606,297,425
   Unicast Rx      : 81,975,365           Unicast Tx      : 255,269,265
   Bcast/Mcast Rx  : 439,008              Bcast/Mcast Tx  : 17,232,890
  Errors (Since boot or last clear) :
   FCS Rx          : 0                    Drops Tx        : 1,592,412
   Alignment Rx    : 0                    Collisions Tx   : 0
   Runts Rx        : 0                    Late Colln Tx   : 0
   Giants Rx       : 0                    Excessive Colln : 0
   Total Rx Errors : 0                    Deferred Tx     : 0
  Others (Since boot or last clear) :
   Discard Rx      : 0                    Out Queue Len   : 0
   Unknown Protos  : 0
  Rates (5 minute weighted average) :
   Total Rx (bps) : 4,777,512             Total Tx (bps) : 5,021,760
   Unicast Rx (Pkts/sec) : 0              Unicast Tx (Pkts/sec) : 2
   B/Mcast Rx (Pkts/sec) : 0              B/Mcast Tx (Pkts/sec) : 8


I've SSH'd onto the switch but cannot see anything in the logs - any pointers?
0
Comment
Question by:Ian Taylor
7 Comments
 
LVL 26

Expert Comment

by:Predrag Jovic
Comment Utility
Most likely that link is overutilized.
Tx is sending traffic since drop is the only error recorded, most likely cause is that buffer is not big enough and link is not fast enough - so traffic gets dropped, simple as that.
You can implement QoS so you can choose what traffic will be dropped, use faster link or bundle links together (of course depending what is convinient).
0
 

Author Comment

by:Ian Taylor
Comment Utility
Thanks, there is hardly any devices on this switch, general network performance is fine
0
 
LVL 26

Accepted Solution

by:
Predrag Jovic earned 500 total points
Comment Utility
If traffic is TCP it will be retransmitted and it will be corrected, so you will not have a lot of problems. With UDP could be different. If you can, configure monitoring to gather information.
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:Ian Taylor
Comment Utility
Okay, I'll see if I can get a laptop connected to the switch in question and run wireshark on there
0
 
LVL 36

Expert Comment

by:ArneLovius
Comment Utility
what is connected to that port ?

is it a fibre, or copper connection ?
0
 
LVL 61

Expert Comment

by:gheist
Comment Utility
and how wireshark can find dropped packed that never reaches it?
0
 
LVL 26

Expert Comment

by:Predrag Jovic
Comment Utility
Easy, do not look for lost packets, look for retransmitted packets, even draw graph about it (link below). If every packet that was sent reached the destination than there would be no retransmission, ergo if there are retransmissions in wireshark - packets were lost.  :)
Graphing Packet Retransmission Rates with Wireshark
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
VLAN between switches 4 82
when should we use PVST or RPVST 11 65
HSRP needed? 4 24
EIGRP Full Mesh 2 25
I see many questions here on Experts Exchange regarding switch port configurations and trunks. This article is meant for beginners in the subject to help to get basic knowledge about Virtual Local Area Network (VLAN (http://en.wikipedia.org/wiki/Vir…
I eventually solved a perplexing problem setting up telnet for a new switch.  I installed a new Cisco WS-03560X-24P switch connected to an existing Cisco 4506 running a WS-X4013-10GE Sup II-Plus. After configuring vlans and trunking,  I could no…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now