topic Re: Packet Buffer Congestion error in General Topics

Packet Buffer Congestion error

BigPalo — Fri, 27 Aug 2021 12:20:41 GMT

Hello
We have a couple of FW 5220 in active-passive. last 07/15 we upgraded to version 9.1.10 and we have detected that "Packet Buffer Congestion" is growing linearly.

could it be a bug in this version?

thanks so much

Re: Packet Buffer Congestion error

dmifsud — Fri, 27 Aug 2021 16:27:04 GMT

Hesitant to point to any kind of cause, bug included, with such little data, but it could be a packet buffer leak. Are you seeing this on both or just on one? You will want to take action before that hits 100%, might be a good idea to schedule a failover or even restart.

I would advise you get a Tech Support File off of the device and raise a support case with it, along with the screenshot you provided.

- DM

Re: Packet Buffer Congestion error

mmeehan — Fri, 27 Aug 2021 16:53:08 GMT

We experienced a similar issue when upgrading to 9.1.5, turns out it was the inspection on SMB traffic that was driving up the buffer causing legitimate traffic to drop due to RED.

We created an app override for SMB traffic which solved the issue if that's something you want to look into. We went back and forth with PAN TAC for a while and in the end that was the recommendation.

I have seen some SQL traffic get caught up but it's not consistent enough to cause issues

Re: Packet Buffer Congestion error

MP18 — Sun, 29 Aug 2021 02:38:16 GMT

@BigPalo

As earlier recommended by @dmifsud Please open TAC case for this.

This need Deep Dive with PA Tech.

Are you seeing some slowness with Traffic ?

Also so can use this command to see who is causing most DP usage?

show running resource-monitor ingress-backlogs

Also this is the url with more detailed info

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/dos-protection-against-flooding-of-new-sessions/identify-sessions-that-use-too-much-of-the-on-chip-packet-descriptor

Regards