My monitoring-platform is seeing a lot of ifInDiscards on a couple of interfaces on one of our ASAs ver 7.1(2), which I can verify with:
snmpwalk -v2c -c ******* [IP] 220.127.116.11.18.104.22.168.1.13
IF-MIB::ifInDiscards.1 = Counter32: 0
IF-MIB::ifInDiscards.2 = Counter32: 0
IF-MIB::ifInDiscards.3 = Counter32: 0
IF-MIB::ifInDiscards.5 = Counter32: 871023
IF-MIB::ifInDiscards.7 = Counter32: 0
IF-MIB::ifInDiscards.8 = Counter32: 3851342
IF-MIB::ifInDiscards.9 = Counter32: 0
IF-MIB::ifInDiscards.113 = Counter32: 0
The two interfaces (index 5 and 8) with inDiscards are subinterfaces on a dot1q-trunk, and the
input traffic-rate is about 3mbit/s (500pkt/sec) for each interface. The physical interface is running gigabit with no errors in either ASA or switch-counters.
The ifInDiscards is incrementing a about 5-10/sec
I can't seem to find any info on what ifInDiscards is in the ASA (I'm guessing some buffer-ish issue?)
I'm not really seeing any notiable performance issues with servers in these DMZ-zones, but i'd sure like to know what is causing the counters to increment anyway.
Anybody got a clue?
Thanks in advance