Description

After upgrading, the following DDOS related log messages are being seen continuously:

Sun Oct 18 15:32:13 2020 from re1 --- JUNOS 21.4R3-S3.4 Kernel 64-bit JNPR-12.1-20230120.f3fd182_buil ### Template Versions // MPLS Base 1.0 ### No alarms currently active {master}

show log messages | last 100

May 2 12:33:12 mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00

May 2 12:33:12 mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed

May 2 12:33:12 mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00

May 2 12:33:12 mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed

Symptoms

MX480 with MPC10E configured with core links running MACSEC, BGP and OSPF.  The system is continuously seeing the following messages in the syslog.   There is no system impact except they are filling up the syslog at a high rate:

May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Received pktIO flow add req, proto:3c00 add failed
May  2 12:15:00  mx480_ent-core_okcdc_ec07 fpc3 user.err aftd-trio: [Error] DDOS : Failed to insert flow to lkup map for proto: 3c00

 

Solution

Messages are harmless.  They are fixed via PR1733477:

https://prsearch.juniper.net/PR1818919

 

Modification History

2023-12-14 : Article Created
2024-07-29:  Adjusted and published externally.

Related Information

https://gnats.juniper.net/web/default/1733477/edit#external_tab