Dropping TCP Segment

Unanswered Question
Aug 5th, 2010
User Badges:

Hi, when I downloading file from internet I'm getting error in log file:

Dropping TCP Segment seq:1795892888 1300 bytes is out-of-order, expected seq:1795841228, Reason: TCP reassembly queue overflow -session to on zone-pair ccp-zp-in-out cla

Colud you tell me how to setup rule in firewall to not getting block whlie dowlnoading? my router is 892 cisco.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Jitendriya Athavale Thu, 08/05/2010 - 06:30
User Badges:
  • Cisco Employee,

i think you are using a firewall on the router

if so then try removing inspect http and see if you get the same error

if its a zone based firewall you will need to go to 15.0 code i guess

zycha1983 Thu, 08/05/2010 - 06:54
User Badges:

Yup, I have firewall configured.

Under ccp-inspect (in-zone to out-zone) I have line

any (source) any (destination) http (service) inspect (action)

You think I should delete that line?

Im using GUI interface cause I'm not good at command prompt yet.

Jitendriya Athavale Thu, 08/05/2010 - 07:37
User Badges:
  • Cisco Employee,

yeah for zone based firewall the out of order buffer support was introduced in only 15.0 code. are you running 15.0 code


This Discussion