topic Re: logical int counters - packets dropped in General Topics

logical int counters - packets dropped

MP18 — Fri, 02 Nov 2018 20:11:30 GMT

Logical interface counters read from CPU:
--------------------------------------------------------------------------------
bytes received 21513660
bytes transmitted 2835
packets received 358561
packets transmitted 21
receive errors 0
packets dropped 358539

is oit normal to have packets dropped?

Re: logical int counters - packets dropped

Raido_Rattameister — Fri, 02 Nov 2018 21:30:36 GMT

Sure. There are so many reasons packet might be dropped.

First clear any possible filters.

> debug dataplane packet-diag set filter off
> debug dataplane packet-diag clear filter all

Set filter to interface you are interested at.

> debug dataplane packet-diag set filter match ingress-interface ae1.30

Turn on filter

> debug dataplane packet-diag set filter on

And review global counter. Every time you run command below it will show packets that were dropped between times you ran the command.

> show counter global filter delta yes packet-filter yes severity drop

Remove filter

> debug dataplane packet-diag set filter off
> debug dataplane packet-diag clear filter all

Re: logical int counters - packets dropped

Remo — Sat, 03 Nov 2018 02:07:47 GMT

If you aren't allowing anything, a drop all rule at the end of your policy is possibly the maim reason for this counter to increase.

Re: logical int counters - packets dropped

MP18 — Sat, 03 Nov 2018 03:07:36 GMT

we have rules that allow specfic traffic

then at end we have deny any any rule.

So do you mean these drops is for traffic that is not allowed.

always good to read reply from you.

Best Regards

Mike

Re: logical int counters - packets dropped

Remo — Sat, 03 Nov 2018 11:42:30 GMT

@MP18 wrote:
So do you mean these drops is for traffic that is not allowed.

Most of them, I would say yes. For more details @Raido_Rattameister already wrote all the commands you need.