For fwsm ios 4.1(5), what is show interface xxx "dropped packets" counter showing?

[Mike Baker]

On the fwsm using ios 4.1(5), what is the "dropped packets" counter showing on a "show interface xxx" command.  The number seems to increment, sometime more rapidly that other times, if you just keep doing th ecommand over and over, but the cpu is only running 3%.  Is there a berter way to tell what is being dropped?  I am trying to figure out if the fwsm is causing problems by dropping packets or if it is something I don't need to worry about.

[Marius Gunnerud]

The packet drop counter shows all dropped packets on the interface. this includes all security related packet drops.  On a production firewall it is normal to see this counter increasing.

To get more detailed info on the drops, issue the show asp drop command.

--

Please remember to select a correct answer and rate helpful posts