Packet Path Troubleshoot
PREVIEW — for evaluation, not the live site

Troubleshoot › Error Decoder › %DUAL-5-NBRCHANGE

Decoder

What does %DUAL-5-NBRCHANGE mean?

EIGRP neighbor dropped

%DUAL-5-NBRCHANGE: EIGRP-IPv4 100: Neighbor 10.1.1.2 (GigabitEthernet0/0) is down: holding time expired
In plain English: EIGRP, Cisco's routing protocol, lost a neighbor.

Platform: Cisco IOS / IOS XE routers. The 15-second hold time in this entry is the usual default on LAN interfaces.

What it means

EIGRP, Cisco's routing protocol, lost a neighbor. 'Holding time expired' means this router heard nothing from that neighbor for the full hold window — usually 15 seconds. The routes learned through that neighbor are withdrawn and traffic re-routes, so a single drop is an event; repeated drops mean the path or the neighbor is sick.

Likely causes, in order

Check, in order

  1. show ip eigrp neighborsWhich neighbors are up, their hold times, and whether one keeps resetting (watch the uptime column).
  2. show interfaces Gi0/0Errors and drops on the interface facing the neighbor.
  3. show logging | include DUALHow often this exact neighbor drops, and whether the reason is always the same.

The fix

Did this fix it for you? One tap — anonymous, nothing to type, and nothing you send is ever published.

Sources

More error messages

Decoder

%CRYPTO-4-RECVD_PKT_INV_SPI

IPsec VPN received a packet it cannot place

Decoder

%SPANTREE-2-LOOPGUARD_BLOCK

Loop Guard blocked a port: possible one-way trouble

Decoder

%SPANTREE-2-BLOCK_BPDUGUARD

BPDU Guard shut the port: something switch-like appeared on an access port