I am having some issues with odd packet drops, and "show counter global filter severity drop" shows a lot of packets being dropped due to "Packets dropped: 802.1q tag not configured/Packets dropped: invalid interface" (same amount of packets dropped on both, so I assume these are related).
Are there any way of getting a log of what has been happening for flow_rcv_dot1q_tag_err and flow_no_interface?
Just knowing that the firewall is dropping packets doesn't help a lot when I'm unable to get any further information about the traffic.
I completely agree with you. We were troubleshooting issues
with packets being dropped and found it very hard to impossible to actually
find out why a packet is dropped. If the firewall drops a packet I should be
able to see a report or enter a CLI command to find out why and how many. I’m
actually filing a feature request for this. It just seems so basic, I can’t believe
it is so difficult.
You can follow this document and get a details information about any drop counter.
To enable logging for global counters, run the following command via CLI:
You will be able to see the same logs under Monitor>> System logs.
To disable logging, run:
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!