Why this blog ?

The other day I typed something like "sh ip access-list acl-fubar" with the hope of seeing lines with hitcounts.
But the hitcounts showed dumb values. Like 3. Everybody knows that 3 is an invalid hitcount value. If this happens, it means that something bad is happening inside the router.
That was on a 6500 with a sup720. I RTFM and found that the correct command should have been : show tcam interface gi6/1 acl in detail Since then, I feel really really bad when I have to type a show access-list command on a router. Will it work ? Will it output the 3 as hitcount ? Should I ask the PFC directly ? Or something else ? How do you know that the router has a TCAM ? Will my boss notice it ?
I was affected by what is now known as tcamophobia : the fear of the show tcam command.

Tuesday, November 07, 2006

Fear the (very usefu) hidden command

show interface [interface] switching.

as the doc says :
Note: The show interfaces [type number] switching command is hidden, and does not show up if you use the "?" or TAB keys on the command line interface. Type the full command on the router. This command is not documented in the Command Reference Guide.
The output looks like this :

Throttle count 2
Drops RP 85 SP 0
SPD Flushes Fast 0 SSE 0
SPD Aggress Fast 0
SPD Priority Inputs 548441 Drops 0

Protocol Path Pkts In Chars In Pkts Out Chars Out
IP Process 4641777 459191834 4231439 608188167
Cache misses 0
Fast 346762110 29221774939 346752700 24366148645
Auton/SSE 5463366727 5570290116259 4288982736 1285933965142
DEC MOP Process 0 0 15359 1981311
Cache misses 0
Fast 0 0 0 0
Auton/SSE 0 0 0 0
ARP Process 9609 576540 9611 1076432
Cache misses 0
Fast 0 0 0 0
Auton/SSE 0 0 0 0

What does it do ? It's most useful to check why the packets are dropped from an interface.

Okay, want to know more ? Read this doc : Troubleshooting Input Queue Drops and Output Queue Drops .

Friday, September 29, 2006


(1) A Tea-related phobia (see below tphobia) :
%PARSER-3-BADUNLOCKREQ : Unlock requested by process '[dec]'. You are not the lock owner
Explanation A configuration unlock has been requested by an alien.
Recommended Action Check the code flow for an unwanted configuration unlock request.

(2) Alien inside the box :
Error Message CE-NAS-4-205016: Found alien signature on NAS volume.
Explanation The NAS volume is used by another CE.
Recommended Action None.

(3) MARS owners that need a larger model.

Etymology: Latin (the name of the first version of IOS), alienus, "belonging to someone else".
References: [1] [2]


Everybody knows what CCO stands for and how you can be trapped in a web page, like the one below :

You're trapped. No escape possible.

Reference: http://www.cisco.com/en/US/products/sw/iosswrel/products_ios_cisco_ios_software_releases.html#releases


Very very common fear : you can't be a Cisco user without it.

It's the fear that THE feature you badly NEED is ONLY in a T train.

It means that your wife will leave you before the end of the year because you' re spending too much time at work, and who is this girl you call "cisco-seventy-two-hundred" ?

This phobia is also affecting ASA users even if the releases 7.1 and 7.2 are not labeled T.

Etymology: Unknown. Leave a comment if you know why the letter T was used. Maybe a lame attempt to copy Billy Strayhorn song Take the A train ?

Reference: none.

Thursday, September 28, 2006


Now called %ASAphobia.

Hits the poor user when he sees this list (which we have kept short to avoid autocombustion of the reader). It's 35 pages long in the PDF.

Etymology : comes from "nti", an obscure engraving found in very old temples dedicated to some Network Translation Inc (?) god. It then evolved to the name PIX ("firewall" in ancient Greek) and was lately renamed ASA by the Romans .

Reference :


Our ASA crashes and reboots with an empty configuration.

At boot time it says :
Configuration has non-ASCII characters and will be ignored.
Today, the TAC engineer in charge of our case answered :
It seems that the device has failed as inspite of specifying the config variable file,it's still not working. I will need to get the following information to set up the RMA.

My guess is that is that if I write my first name - which contains the letter é - on the RMA form, they'll never receive it.

No doubt that the TAC level of expertise has increased these last 6 or 7 years. This has lead to the symptom known as LameTACanswerphobia.

Étymology : speaks for itself. TAC means "The guy who can read the SOURCE", but it seems that this is no longer true, because the latest research in this field seems to converge to another explanation : "The guy who can ask someone else known as the DEVELOPPER to read the SOURCE". The problem is still open, though, nobody has ever seen what they call a DEVELOPPER.


You had a Catalyst 5500, ST, great, robust.
You had a nice supervisor which came with it, SC.
You upgraded to a 6500 but had to keep this old 100 Mbits connectivity, MTRJ blade.
Now, you have LC connectors everywhere.

That doesn't mean the story is over.

Etymology : Opti is the ancient god of light, Con, to trick someone, in other words : the fear of tricking the light.

Reference : Any Latin and French slang dictionary.