Contents

Introduction

Policer Surpassed a Threshold

ICSeverity

Impact

Description

SyslogMessage

MessageSample

ProductFamily

Regex

Recommendation

Commands

Introduction

This document describes the PUNT_INJECT facility code responsible for punting packets and how to troubleshoot when the policer surpasses a threshold.

Policer Surpassed a Threshold

ICSeverity

5 - Notice

Impact

No service impact.

Description

PUNT_INJECT is the facility code, which refers to the part of the system that is responsible for punting packets. Punting typically means that packets are being sent from the fast path (hardware processing) to the slow path (software processing) for special handling. This could be due to various reasons such as features that are not supported in hardware or packets that require additional inspection or processing that the hardware cannot perform. DROP_PUNT_CAUSE suggests that a packet that was supposed to be punted (sent to the CPU for processing) has been dropped due to a specific cause. This could be expected behavior as this protects the control plane of the device.

SyslogMessage

PUNT_INJECT-5-DROP_PUNT_CAUSE

MessageSample

Mar 26 09:00:22 <> %PUNT_INJECT-5-DROP_PUNT_CAUSE: punt policer drops packets, cause: for-XXX (0xb) from XXX src ip: X.X.X.X THIS IS A SAMPLE MESSAGE

ProductFamily

- Cisco 4000 Series Integrated Services Routers

- Cisco 900 Series Integrated Services Routers

- Cisco Cloud Services Router 1000V Series

- Cisco ASR 1000 Series Aggregation Services Routers

Regex

N/A

Recommendation

1. Check the router's CPU and memory usage to see if there is an overload that could be causing packets to be dropped: Router# show processes cpu Router# show processes cpu history Router# show processes cpu sorted Router# show memory Router# show processes memory Router# show memory summary Router# show memory statistics.

2. Review the router's configuration to ensure that features requiring punt injection are correctly set up and that there are no conflicting settings: Router# show running-config.

3. Consider the traffic pattern and types of packets being punted to determine if they are as expected, or if there is unusual traffic that could be causing issues. Review the policer to confirm if a drop is expected or not: Router# show platform hardware qfp active infrastructure punt statistics type per-cause Router# show platform hardware qfp active infrastructure punt statistics type inject-drop.

Commands

#show version

#show logging

#show platform hardware qfp active statistics drop

#show platform hardware qfp active infrastructure punt statistics type per-cause

#show platform hardware qfp active infrastructure punt statistics type inject-drop

#show platform software process list 0 summary

#show clock