'Re: [c-nsp] Qos Statistics on the 7K'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cisco-nsp
Subject:    Re: [c-nsp] Qos Statistics on the 7K
From:       "Tim Stevenson \(tstevens\) via cisco-nsp" <cisco-nsp () puck ! nether ! net>
Date:       2018-12-04 22:48:38
Message-ID: mailman.214.1543963722.1228.cisco-nsp () puck ! nether ! net
[Download RAW message or body]

=?us-ascii?q?BAQEBBwIBAQEBgVEFAQEBAQsBggNmgQInCowIi3Qagg2HZ49igXoLAQEYC4R? \
=?us-ascii?q?JAkwBBII5IjQJDQEDAQECAQECbRwMgiiDFAEBAQEDAQE4NBcEAgEIDgMEAQE? \
=?us-ascii?q?UCxAnCx0IAgQBEggMgw6CAQ+mXoozi3gmF4FAP4ERgxKDHgGBH4YeAokxLIp? \
=?us-ascii?q?ejA4JAocBijYggiiOfokGhGiKYgIRFIEnHzgngS5wFTuCbAmKWIV6QTGKSYE? \
=?us-ascii?q?fAQE?X-IronPort-AV: E=Sophos;i="5.56,316,1539648000";  \
                d="scan'208";a="489463044"
Received: from rcdn-core-8.cisco.com ([173.37.93.144])
  by rcdn-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 04 Dec 2018 \
                22:48:40 +0000
Received: from XCH-RTP-001.cisco.com (xch-rtp-001.cisco.com [64.101.220.141])
	by rcdn-core-8.cisco.com (8.15.2/8.15.2) with ESMTPS id wB4Mmd4X001648
	(version=TLSv1.2 cipher®S256-SHA bits%6 verifyúIL);
	Tue, 4 Dec 2018 22:48:40 GMT
Received: from xch-rtp-004.cisco.com (64.101.220.144) by XCH-RTP-001.cisco.com
 (64.101.220.141) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 4 Dec
 2018 17:48:39 -0500
Received: from xch-rtp-004.cisco.com ([64.101.220.144]) by
 XCH-RTP-004.cisco.com ([64.101.220.144]) with mapi id 15.00.1395.000; Tue, 4
 Dec 2018 17:48:38 -0500
From: "Tim Stevenson (tstevens)" <tstevens@cisco.com>
To: Bradley Ordner <bradinusa@hotmail.com>,
        "cisco-nsp@puck.nether.net"
	<cisco-nsp@puck.nether.net>
Subject: RE: Qos Statistics on the 7K
Thread-Topic: Qos Statistics on the 7K
Thread-Index: AQHUfJ3k/Syn0EEIW0K2YlQVkAEFjqVvS7jw
Date: Tue, 4 Dec 2018 22:48:38 +0000
Message-ID: <1e2ee7ff2dfd4f969cfd48d169da9ae0@XCH-RTP-004.cisco.com>
References: <ME2PR01MB4690998A7E86C6AC354BB856BADC0@ME2PR01MB4690.ausprd01.prod.outlook.com>

In-Reply-To: <ME2PR01MB4690998A7E86C6AC354BB856BADC0@ME2PR01MB4690.ausprd01.prod.outlook.com>

Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.157.201.166]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Outbound-SMTP-Client: 64.101.220.141, xch-rtp-001.cisco.com
X-Outbound-Node: rcdn-core-8.cisco.com

Hi Brad, 

I checked this on n7700 F3 - concur that even w/'statistics per-entry', the hit count \
is not incrementing in 'sh ip access' output when the ACL is used for QOS \
classification. Same behavior in 8.3.1.

From what I see, the statistics are in fact incrementing in hardware, you can verify \
by attaching to the LC via 'attach mod x' and using 'sh sys internal access-list \
input entries detail' and find the block with your ACL (might be a bit tedious doing \
it this way as all policies, including CoPP etc, will be listed out there). Not sure \
why that is not just being exported up and aggregated in the sup, though the 'usual' \
use-case for monitoring ACL hit counts has centered around security ACLs.

                VDC-1 Ethernet2/1 : 
                ==================== 

INSTANCE 0x0
---------------

  Tcam 0 resource usage:
  ----------------------
  Label_a = 0x201
   Bank 1
   ------
     IPv4 Class
       Policies: QoS(all-ip) 
       Netflow profile: 0
       Netflow deny profile: 0
       Entries: 
         [Index] Entry [Stats]
         ---------------------
  [0015:000b:000b] qos ip 0.0.0.0/0 10.1.1.0/24  [398869316] 

I guess you're hoping to figure out which specific ACEs are matching in each class \
(vs just seeing the total number of packets classified in each class, as seen in 'sh \
policy-map interface')? I can check w/our engineering team and see if there's some \
reason this has not been implemented.

Hope that helps,
Tim

-----Original Message-----
From: cisco-nsp <cisco-nsp-bounces@puck.nether.net> On Behalf Of Bradley Ordner
Sent: Wednesday, November 14, 2018 8:49 PM
To: cisco-nsp@puck.nether.net
Subject: [c-nsp] Qos Statistics on the 7K

Hi,

This may have been asked before, even on Cisco Support Community I have an answer but \
it doesn't seem to be working for me.

We have a Layer 3 port with a QoS policy for marking traffic inbound. I have added \
the 'statistics per-entry' command in our ACL but I do not see any hits. When \
checking the policy and queueing, I see traffic being matched.

We are only marking inbound on this port, is it not supported or do I have a bug? I \
am on version - 7.2(0)D1(1)

Match: access-group QOSACL- BLAH
        46082768 packets
      set dscp 56

Thanks

Brad Ordner

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

[prev in list] [next in list] [prev in thread] [next in thread] 