[88033] in North American Network Operators' Group
Strange issue involving sampling
daemon@ATHENA.MIT.EDU (Peering)
Wed Jan 18 15:10:18 2006
Date: Wed, 18 Jan 2006 15:09:50 -0500
From: "Peering" <Peering@xspedius.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog@merit.edu
This is a multi-part message in MIME format.
------_=_NextPart_001_01C61C6B.232FC199
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
First, apologies if this isn't the right place, but I was hoping to hit
a lot of networking folks in one shot and this seemed like the likely
venue.
I have this problem where a customer of mine has issues getting to
secure websites (https sites like Charles Schwab's). It doesn't happen
all the time, maybe once a month or so. We went to Juniper with the
issue (we're using M-20s as our edge routers) and they couldn't figure
it out, but one of our engineers found that the config pasted below
(with proprietary info removed) fixed the problem. The only problem is
that even with this config, we have to restart the sampling daemon every
month or so because the problem will come back. Understandably, the
customer would prefer to have a more permanent solution.
Anyone have an idea why this one customer on my entire network would
have this issue? Supposedly the customer had Cisco come out and look at
their network and they couldn't find any reason for it either.
routerx# show | compare rollback 0=20
[edit]
- forwarding-options {
- sampling {
- input {
- family inet {
- rate 1;
- }
- }
- output {
- file filename customer.sample;
- }
- }
- }
[edit firewall]
- filter customer {
- term 1 {
- then {
- sample;
- accept;
- }
- }
- term default {
- then accept;
- } =20
- }
[edit interfaces ls-2/3/0 unit 3]
routerx# show=20
description "Customer X";
encapsulation multilink-ppp;
ml-pic-compatible;
family inet {
no-redirects;
filter {
input customer;
output customer;
}
address x.x.x.x/30;
}
Diane Turley
Sr. Network Engineer
Xspedius Communications Co.
636-625-7178
------_=_NextPart_001_01C61C6B.232FC199
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Dus-ascii">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
6.0.6603.0">
<TITLE>Strange issue involving sampling</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=3D2 FACE=3D"Arial">First, apologies if this isn't the =
right place, but I was hoping to hit a lot of networking folks in one =
shot and this seemed like the likely venue.</FONT></P>
<P><FONT SIZE=3D2 FACE=3D"Arial">I have this problem where a customer of =
mine has issues getting to secure websites (https sites like Charles =
Schwab's). It doesn't happen all the time, maybe once a month or =
so. We went to Juniper with the issue (we're using M-20s as our =
edge routers) and they couldn't figure it out, but one of our engineers =
found that the config pasted below (with proprietary info removed) fixed =
the problem. The only problem is that even with this config, we =
have to restart the sampling daemon every month or so because the =
problem will come back. Understandably, the customer would prefer =
to have a more permanent solution.</FONT></P>
<P><FONT SIZE=3D2 FACE=3D"Arial">Anyone have an idea why this one =
customer on my entire network would have this issue? Supposedly =
the customer had Cisco come out and look at their network and they =
couldn't find any reason for it either.</FONT></P>
<P><FONT SIZE=3D2 FACE=3D"Arial">routerx# show | compare rollback 0 =
</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">[edit]</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- forwarding-options {</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- =
sampling {</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- =
input {</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; family inet {</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; rate 1;</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; }</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- =
}</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- =
output {</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; file filename customer.sample;</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- =
}</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- =
}</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- }</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">[edit firewall]</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- filter customer {</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- =
term 1 {</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; then {</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; sample;</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; accept;</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; }</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- =
}</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- =
term default {</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial">- &nb=
sp; then accept;</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- =
} </FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">- }</FONT>
</P>
<P><FONT SIZE=3D2 FACE=3D"Arial">[edit interfaces ls-2/3/0 unit =
3]</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">routerx# show </FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">description "Customer =
X";</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">encapsulation multilink-ppp;</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">ml-pic-compatible;</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">family inet {</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial"> =
no-redirects;</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial"> filter {</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial"> input =
customer;</FONT>
<BR><FONT SIZE=3D2 =
FACE=3D"Arial"> output =
customer;</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial"> }</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial"> address =
x.x.x.x/30;</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">}</FONT>
</P>
<P><FONT SIZE=3D2 FACE=3D"Arial">Diane Turley</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">Sr. Network Engineer</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">Xspedius Communications Co.</FONT>
<BR><FONT SIZE=3D2 FACE=3D"Arial">636-625-7178</FONT>
</P>
</BODY>
</HTML>
------_=_NextPart_001_01C61C6B.232FC199--
