logical interface packets drops

qasim02 — Mon, 24 Sep 2018 20:28:05 GMT

Hi,

we are experiencing this issue that we are troubleshooting from a couple of days. we have done all our checks WAN and LAN side however there is a paloalto firewall between WAN routers and core switch in a Vwire mode with an any-any rule. the only problem I have noticed so far is that at the time of issue the firewall is not too responsive i.e. the gui takes ages but cpu shoes minimum usage.

another thing I noticed was incrementing logical interface dropped packets:

show interface ethernet1/4

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received 79386995797798

bytes transmitted 67887362097627

packets received 2533039042

packets transmitted 3904754824

receive errors 0

packets dropped 29286415

packets dropped by flow state check 63657

I can see them on all active interfaces.

anyone has any idea of how I go by troubleshooting this further as I am very new PAs.

Thanks in advance.

Regards,

Ali

Re: logical interface packets drops

welly_59 — Mon, 24 Sep 2018 21:00:29 GMT

What is the issue you are trying to troubleshoot?

Re: logical interface packets drops

OtakarKlier — Mon, 24 Sep 2018 21:03:17 GMT

Hello,

In the GUI, make sure the policy is set to log at session end. Then check the monitor tab for the traffic and see what is getting blocked.

Regards,

Re: logical interface packets drops

qasim02 — Mon, 24 Sep 2018 21:12:32 GMT

Hi welly,

it's slow connectivity and intermittent ping /connection drops. which lasts for 4 to 5 hours and then disappears. so extremely hard to troubleshoot.

topic logical interface packets drops in General Topics

logical interface packets drops

Re: logical interface packets drops

Re: logical interface packets drops

Re: logical interface packets drops