Dropping TCP Segment

zycha1983 · ‎08-05-2010

Hi, when I downloading file from internet I'm getting error in log file:

Dropping TCP Segment seq:1795892888 1300 bytes is out-of-order, expected seq:1795841228, Reason: TCP reassembly queue overflow -session 192.168.0.125:4142 to 92.123.72.98:80 on zone-pair ccp-zp-in-out cla

Colud you tell me how to setup rule in firewall to not getting block whlie dowlnoading? my router is 892 cisco.

Thanks

Jitendriya Athavale · ‎08-05-2010

i think you are using a firewall on the router

if so then try removing inspect http and see if you get the same error

if its a zone based firewall you will need to go to 15.0 code i guess

zycha1983 · ‎08-05-2010

Yup, I have firewall configured.

Under ccp-inspect (in-zone to out-zone) I have line

any (source) any (destination) http (service) inspect (action)

You think I should delete that line?

Im using GUI interface cause I'm not good at command prompt yet.

Jitendriya Athavale · ‎08-05-2010

yeah for zone based firewall the out of order buffer support was introduced in only 15.0 code. are you running 15.0 code