logical int counters - packets dropped

[MP18]

Logical interface counters read from CPU:
--------------------------------------------------------------------------------
bytes received 21513660
bytes transmitted 2835
packets received 358561
packets transmitted 21
receive errors 0
packets dropped 358539  

is oit normal to have packets dropped?

[Raido_Rattameister · Accepted solution]

Sure. There are so many reasons packet might be dropped.

First clear any possible filters.

> debug dataplane packet-diag set filter off
> debug dataplane packet-diag clear filter all

Set filter to interface you are interested at.

> debug dataplane packet-diag set filter match ingress-interface ae1.30

Turn on filter

> debug dataplane packet-diag set filter on

And review global counter. Every time you run command below it will show packets that were dropped between times you ran the command.

> show counter global filter delta yes packet-filter yes severity drop

Remove filter

> debug dataplane packet-diag set filter off
> debug dataplane packet-diag clear filter all

[Remo]

If you aren't allowing anything, a drop all rule at the end of your policy is possibly the maim reason for this counter to increase.

[MP18]

we have rules that allow specfic traffic

then at end we have deny any any rule.

So do you mean these drops is for traffic that is not allowed.

always good to read reply from you.

Best Regards

Mike

[Remo · Accepted solution]

---

@MP18 wrote:

So do you mean these drops is for traffic that is not allowed.

Most of them, I would say yes. For more details @Raido_Rattameister already wrote all the commands you need.