The NetworkDevice_LanLink_Util Knowledge Script generates a event for 'packet errors' while IOS does (NETIQKB52620)

  • 7752620
  • 02-Feb-2007
  • 13-Dec-2010

Environment

NetIQ AppManager 6.x
NetIQ AppManager 7.0.x
NetIQ AppManager Network Device Module
NetIQ AppManager NetworkDevice_LanLink_Util knowledge script

Situation

The NetworkDevice_LanLink_Util Knowledge Script generates a event for 'packet errors' while IOS does not indicate any errors.

IOS 'Show Interface' command provides information that does not match NetworkDevice_LanLink_Util Knowledge Script.
The NetworkDevice_LanLink_Util Knowledge Script generates events for '% Packet Errors' on a particular link. When I queried the interface using IOS command 'Show Interface' I received:

GigabitEthernet0/0 is up, line protocol is up
Hardware is MV96340 Ethernet, address is 0014.f201.e218 (bia 0014.f201.e218)
Description: irv2-c3750s-1, Fe1/0/1
Internet address is 172.21.16.1/24
MTU 1500 bytes, BW 100000 Kbit, DLY 100 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation ARPA, loopback not set
Keepalive set (10 sec)
Full-duplex, 100Mb/s, media type is T
output flow-control is XON, input flow-control is XON
ARP type: ARPA, ARP Timeout 04:00:00
Last input 00:00:02, output 00:00:00, output hang never
Last clearing of "show interface" counters 3w0d
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/40 (size/max)
5 minute input rate 118000 bits/sec, 63 packets/sec
5 minute output rate 572000 bits/sec, 77 packets/sec
62675742 packets input, 3084673169 bytes, 0 no buffer
Received 2488164 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
0 watchdog, 0 multicast, 0 pause input
0 input packets with dribble condition detected
67880610 packets output, 2754133701 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier, 0 pause output
0 output buffer failures, 0 output buffers swapped

Resolution

AppManager queries the SNMP Agent on the monitored device and reports any discarded packets as errors.

Cause

The event is generated due to the use of 'ifinUnknownProtos' in the calculation of packet errors.  The IOS 'Show Interface' command does not include this metric. AppManager includes the metric because by definition unknown protocol packets are discarded:

'For packet-oriented interfaces, the number of packets received via the interface which were discarded because of an unknown or unsupported protocol.'


Additional Information

Formerly known as NETIQKB52620