flow_fpga_ingress_exception_err and high latency

Showing results for 
Show  only  | Search instead for 
Did you mean: 

flow_fpga_ingress_exception_err and high latency

L1 Bithead

Recently deployed several PA-5250s Running 10.1.3 and there is a issue that randomly comes and goes.

Latency for traffic going through the firewalls spikes to 100-500ms. I was able to capture one thing that looked peculiar and that was flow_fpga_ingress_exception_err counts were high (8169388322) and the rate was high (12468). But I can't seem to find a good definition as what this would indicate. 

I also caught the packet descriptor (on-chip) (average):  with 100 across the first two rows. 
I failed to capture the CPU Cores at the same time though. 
Any ideas?


L3 Networker

Known issue: PAN-141630 seems to match this scenario. Interestingly, 10.1.3 is the preferred 10.1 version as of today. Therefore, upgrade to 10.1.4 may not be the best solution (yet).


You may be able to get more context looking at global counters: show counter global | match fpga




Cyberforce Commander.
Don't forget to hit that Like button if a post is helpful to you!

Cyber Elite
Cyber Elite


If this is mission critical hardware, and you don't require features in 10.1, I would highly recommend staying off of 10.1 for the time being. There's still bugs getting worked out in 10.1 and 10.0 is a fairly stable release at this point. 

Thanks for the help, I asked TAC if we should downgrade and they replied with "why?". 

L3 Networker

I would ask the same question as you currently are running the preferred/stable version of 10.1.


However, instead of questioning you, I hope they are providing a solution as you seem to already have a case with them.


I am curious to hear what their solution was, if they provide one.



Cyberforce Commander.
Don't forget to hit that Like button if a post is helpful to you!
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!