logical interface packets drops

L1 Bithead

logical interface packets drops

Hi,

 

we are experiencing this issue that we are troubleshooting from a couple of days. we have done all our checks WAN and LAN side however there is a paloalto firewall between WAN routers and core switch in a Vwire mode with an any-any rule. the only problem I have noticed so far is that at the time of issue the firewall is not too responsive i.e. the gui takes ages but cpu shoes minimum usage.

another thing I noticed was incrementing logical interface dropped packets:

show interface ethernet1/4

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received                           79386995797798

bytes transmitted                        67887362097627

packets received                         2533039042

packets transmitted                      3904754824

receive errors                           0

packets dropped                          29286415

packets dropped by flow state check      63657

 

I can see them on all active interfaces.

 

anyone has any idea of how I go by troubleshooting this further as I am very new PAs.

 

Thanks in advance.

 

Regards,

Ali

L3 Networker

Re: logical interface packets drops

What is the issue you are trying to troubleshoot?
L7 Applicator

Re: logical interface packets drops

Hello,

In the GUI, make sure the policy is set to log at session end. Then check the monitor tab for the traffic and see what is getting blocked.

 

Regards,

L1 Bithead

Re: logical interface packets drops

Hi welly,

it's slow connectivity and intermittent ping /connection drops. which lasts for 4 to 5 hours and then disappears. so extremely hard to troubleshoot.
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!