Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[QFX] LLDPD memory leak while receiving both IEEE and non-IEEE LLDPD packets

0

0

Article ID: KB35341 KB Last Updated: 18 Dec 2019Version: 2.0
Summary:

QFX5K series switches encounter LLDPD memory leak and cause LLDPD core dump.
 

Symptoms:

While receiving both IEEE and non-IEEE LLDPD packets simultaneously, QFX5K switches return the following message then get LLDPD core dumped.

‚Äč<5>1 2019-11-01T17:04:05.051Z qfx5100  /kernel - - - Process (50940,lldpd) has exceeded 85% of RLIMIT_DATA: used 121352 KB Max 131072 KB
<5>1 2019-11-01T17:09:26.074Z qfx5100  /kernel - - - Process (50940,lldpd) has exceeded 85% of RLIMIT_DATA: used 121352 KB Max 131072 KB

Cause:

Some connected devices (certain Oracle server) sends both IEEE and non-IEEE LLDPD packets at the same time. Under this situation, Juniper QFX5K switches will encounter LLDPD memory leak.

Here are the MAC address of the packets:

Ieee:          (01:80:c2:00:00:0e)
non-ieee:      (01:80:c2:00:00:03)
Solution:

The permanent fix is available from Junos 14.1X53-D140 through Junos 19.3R1.

As a workaround, you can disable the 'protocol lldp' or apply a firewall filter to block the LLDP packet in the related interface (s).

Example of firewall filter:

set firewall family ethernet-switching filter FF-LLDP-Block term 1 from destination-mac-address 01:80:c2:00:00:0e/48
set firewall family ethernet-switching filter FF-LLDP-Block term 1 from destination-mac-address 01:80:c2:00:00:03/48
set firewall family ethernet-switching filter FF-LLDP-Block term 1 from destination-mac-address 01:80:c2:00:00:00/48
set firewall family ethernet-switching filter FF-LLDP-Block term 1 then discard
set firewall family ethernet-switching filter FF-LLDP-Block term 1 then count LLDP-Block-counter
set firewall family ethernet-switching filter FF-LLDP-Block term 2 then accept
Modification History:
2019-12-17: Minor, non-technical update.
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search