Catalyst 6500 High Switch Proc

Ross Vandegrift ross at
Mon Nov 17 19:11:01 UTC 2008

On Sat, Nov 15, 2008 at 04:35:28PM -0500, Philip L. wrote:
> One thing to note, is that our main ACL for ingress traffic is applied 
> here due to historical reasons.  It's roughly 5000 single host entries 
> at present.  We also use these devices for NDE.

On a SUP7203BXL, if your ACL TCAM utilization is fine, this shouldn't
impact performance unless you're logging too much.  Since you've been
over the CPU utilization doc, I'm guessing you know that.

"show platform hardware capacity acl" will give you a breakdown on
your ACL TCAM usage.

> I'm probably missing some other key details, but what could influence 
> the SP like this?  Any insight would be appreciated.

Cisco says that Netflow-based features always handle the first packet
of a flow in software, but I don't know if this is the RP or the SP.
It would make sense if a first-flow packet that didn't need punting
hit the SP and not the RP.  In that case, your traffic level with
netflow enabled could explain your high SP utilization.

Ross Vandegrift
ross at

"If the fight gets hot, the songs get hotter.  If the going gets tough,
the songs get tougher."
	--Woody Guthrie

More information about the NANOG mailing list