IPS 1304 & IPS-6-OOO_FULL

Unanswered Question
Dec 16th, 2013
User Badges:

Hello - I am seeing a whole bunch of the below messages in my logs. Can anyone tell my why this is happening and how I can resolve the issue.  I have tried tunning the setting below with no luck.



Dec 16 08:55:47.195 WA: %IPS-4-SIGNATURE: Sig:1304 Subsig:0 Sev:25 TCP Session Packet Queue Overflow [23.59.190.106:80 -> 10.0.1.215:54067] VRF:NONE RiskRating:25


Dec 16 09:05:45.212 WA: %IPS-6-OOO_FULL: Out-of-Order reached its maximum queue size! Drop this packet



Cisco IOS Software, C800 Software (C800-UNIVERSALK9-M), Version 15.3(2)T, RELEASE SOFTWARE (fc3)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2013 by Cisco Systems, Inc.

Compiled Thu 28-Mar-13 13:45 by prod_rel_team



ROM: System Bootstrap, Version 15.1(4r)M, RELEASE SOFTWARE (fc1)



parameter-map type ooo global

tcp reassembly timeout 60

tcp reassembly queue length 1024

tcp reassembly memory limit 256000



Signature statistics [process switch:fast switch]

  signature 6009:0: packets checked [0:8160] alarmed [0:0] dropped [0:0]

  signature 1304:0: packets checked [0:4474] alarmed [0:3544] dropped [0:0]

  signature 3653:0: packets checked [0:3] alarmed [0:0] dropped [0:0]

Interfaces configured for ips 1

Session creations since subsystem startup or last reset 5752

Current session counts (estab/half-open/terminating) [22:0:0]

Maxever session counts (estab/half-open/terminating) [179:68:7]

Last session created 00:00:18

Last statistic reset 15:09:08

TCP reassembly statistics

  Out-of-order packets dropped 4474



Thanks -


gm

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
cisco.cisco728 Mon, 11/03/2014 - 10:20
User Badges:

Your post is quite old now. I have the same problem with a router I am using in a lab. Did you a find a solution for this problem? I assume you may :-)

Thanks

 

Actions

This Discussion