Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

ASA dropping lots of packets (15%)

Hi,

I am see about 500-700 pkts being dropped every second on the outside interface of my ASA 5520.

(current load is about 30000 pkts/sec)


This output (below) is entered every 5 seconds. You can clearly see overruns, no buffers and input errors are increasing together, at a staggering rate. Cisco Papers, point towards a duplex/speed mismatch, but I am using 100/full statically configuration. (not auto)

------------------------------------------
asa-01# show int g0/0 | grep buffer|over|defe


        1818624408 packets input, 154784016405 bytes, 16642041 no buffer
        34918849 input errors, 0 CRC, 0 frame, 34918849 overrun, 0 ignored, 0 abort
        0 late collisions, 0 deferred

asa-01# show int g0/0 | grep buffer|over|defe
        1818834177 packets input, 154801274729 bytes, 16644281 no buffer
        34919046 input errors, 0 CRC, 0 frame, 34919046 overrun, 0 ignored, 0 abort
        0 late collisions, 0 deferred


asa-01# show int g0/0 | grep buffer|over|defe
        1819062964 packets input, 154820083868 bytes, 16647180 no buffer
        34919385 input errors, 0 CRC, 0 frame, 34919385 overrun, 0 ignored, 0 abort
        0 late collisions, 0 deferred

------------------------------------

* CPU is “ok” about 30%

* Blocks look fine. (no zeros, or even close)

* Memory is good, 65% free.

* Connection Count well within limits (about 20%)

* Traffic levels are within throughput capacity. (20Mbps)

Any ideas ? I have gone through most troubleshooting docs, and am abit lost for ideas at this point.

The ASA is dropping lots of packets and I have no indication of the cause.

Please Pease help.

Thanks for reading.

Matt

1 REPLY
Bronze

Re: ASA dropping lots of packets (15%)

it sounds like speed/duplex setting. do you have 100 full configured on both the ASA and

the switch?

if so try removing and configuring auto on both sides.

Try replacing patch cables, could be a faulty cable problem

214
Views
0
Helpful
1
Replies
CreatePlease to create content