I have a question regarding drops during the packet capture.
What is the packet drop means - Firewall dropping any packet or firewall detect drops packet.?
Once i performed the packet capture at the same time i have run the command global counter but i didn't get any drop in counter.
So could you please let me know what is the meaning of this.
Thank you for your reply.
I have configured a VPN tunnel Site A and site B.My client is in site A and the server belongs from Site B.
- In the security policy allowed traffic any with specific IP addresses b/w client and server.
- Once i copied any big file from Server to client i am getting drops packet in a packet capture.
- I have checked the files are copied through NBSS and SMB2 protocol.
- When i checked the drops packet in Wireshark, i can see multiple packets TCP retransmissions from server-side and 2 packets also from server side with error: - Notify Response, Error: STATUS_NOTIFY_CLEANUP.
- My concern is why the firewall is drop packets.
Note: - Files are copied successfully but it takes a too long time.
@Jafar_Hussain there are several settings that can be set to be less strict (timers, out of window/order packets,...) So network problems are allowed to happen rather than prevented. We'll need to find the global counters you do see to properly advise what to try. Please share the global counters seen
I am facing this issue with LAN also. traffic is flowing trust zone to DMZ zone internally inside the firewall.
When i check this, the same issue is happening meantime I run the counter and found a firewall drop some packets. below is the snapshot.
please suggest this.
Thanks in advance.
The content engine queue is getting full
This could be due to too many small/large packets or other issues (fragmentation,...), but you used the drop filter again so there's not enough information to make an educated guess
> Debug dataplane pool statistics
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!