logical int counters - packets dropped

Reply
Highlighted
Cyber Elite

logical int counters - packets dropped

 

 

Logical interface counters read from CPU:
--------------------------------------------------------------------------------
bytes received 21513660
bytes transmitted 2835
packets received 358561
packets transmitted 21
receive errors 0
packets dropped 358539  

 

is oit normal to have packets dropped?

MP

Accepted Solutions
Highlighted
L7 Applicator

Sure. There are so many reasons packet might be dropped.

 

First clear any possible filters.

> debug dataplane packet-diag set filter off
> debug dataplane packet-diag clear filter all

 

Set filter to interface you are interested at.

> debug dataplane packet-diag set filter match ingress-interface ae1.30

 

Turn on filter

> debug dataplane packet-diag set filter on

 

And review global counter. Every time you run command below it will show packets that were dropped between times you ran the command.

> show counter global filter delta yes packet-filter yes severity drop

 

Remove filter

> debug dataplane packet-diag set filter off
> debug dataplane packet-diag clear filter all

Enterprise Architect @ Cloud Carib www.cloudcarib.com
ACE, PCNSE, PCNSI

View solution in original post

Highlighted
Cyber Elite


@MP18 wrote:

So do you mean these drops is for traffic that is not allowed.

Most of them, I would say yes. For more details @Raido already wrote all the commands you need.

View solution in original post


All Replies
Highlighted
L7 Applicator

Sure. There are so many reasons packet might be dropped.

 

First clear any possible filters.

> debug dataplane packet-diag set filter off
> debug dataplane packet-diag clear filter all

 

Set filter to interface you are interested at.

> debug dataplane packet-diag set filter match ingress-interface ae1.30

 

Turn on filter

> debug dataplane packet-diag set filter on

 

And review global counter. Every time you run command below it will show packets that were dropped between times you ran the command.

> show counter global filter delta yes packet-filter yes severity drop

 

Remove filter

> debug dataplane packet-diag set filter off
> debug dataplane packet-diag clear filter all

Enterprise Architect @ Cloud Carib www.cloudcarib.com
ACE, PCNSE, PCNSI

View solution in original post

Highlighted
Cyber Elite

If you aren't allowing anything, a drop all rule at the end of your policy is possibly the maim reason for this counter to increase.

Highlighted
Cyber Elite

we have rules that allow specfic traffic

then at end we have deny any any rule.

 

So do you mean these drops is for traffic that is not allowed.

always good to read reply from you.

 

Best Regards

Mike

MP
Highlighted
Cyber Elite


@MP18 wrote:

So do you mean these drops is for traffic that is not allowed.

Most of them, I would say yes. For more details @Raido already wrote all the commands you need.

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!