Packet Buffer Congestion error

cancel
Showing results for 
Search instead for 
Did you mean: 

Packet Buffer Congestion error

L4 Transporter

Hello
We have a couple of FW 5220 in active-passive. last 07/15 we upgraded to version 9.1.10 and we have detected that "Packet Buffer Congestion" is growing linearly.

packetbuffer.png

could it be a bug in this version?

thanks so much

3 REPLIES 3

L2 Linker

Hesitant to point to any kind of cause, bug included, with such little data, but it could be a packet buffer leak. Are you seeing this on both or just on one? You will want to take action before that hits 100%, might be a good idea to schedule a failover or even restart.

 

I would advise you get a Tech Support File off of the device and raise a support case with it, along with the screenshot you provided.

 

- DM

L2 Linker

We experienced a similar issue when upgrading to 9.1.5, turns out it was the inspection on SMB traffic that was driving up the buffer causing legitimate traffic to drop due to RED.

 

We created an app override for SMB traffic which solved the issue if that's something you want to look into. We went back and forth with PAN TAC for a while and in the end that was the recommendation.

 

I have seen some SQL traffic get caught up but it's not consistent enough to cause issues

Cyber Elite
Cyber Elite

@BigPalo 

 

As earlier recommended by @dmifsud  Please open TAC case for this.

This need Deep Dive with PA Tech.

 

Are you seeing some slowness with Traffic ?

Also so can use this command to see who is causing most DP usage?

 

show running resource-monitor ingress-backlogs 

Also this is the url with more detailed info

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/zone-protection-and-dos-protection/dos-pro...

 

Regards

MP
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!