IF-MIB::ifInDiscards on ASA 5520

[lassebjoern]

Hi,

My monitoring-platform is seeing a lot of ifInDiscards on a couple of interfaces on one of our ASAs ver 7.1(2), which I can verify with:

snmpwalk -v2c -c ******* [IP] 1.3.6.1.2.1.2.2.1.13

IF-MIB::ifInDiscards.1 = Counter32: 0

IF-MIB::ifInDiscards.2 = Counter32: 0

IF-MIB::ifInDiscards.3 = Counter32: 0

IF-MIB::ifInDiscards.5 = Counter32: 871023

IF-MIB::ifInDiscards.7 = Counter32: 0

IF-MIB::ifInDiscards.8 = Counter32: 3851342

IF-MIB::ifInDiscards.9 = Counter32: 0

IF-MIB::ifInDiscards.113 = Counter32: 0

The two interfaces (index 5 and 8) with inDiscards are subinterfaces on a dot1q-trunk, and the

input traffic-rate is about 3mbit/s (500pkt/sec) for each interface. The physical interface is running gigabit with no errors in either ASA or switch-counters.

The ifInDiscards is incrementing a about 5-10/sec

I can't seem to find any info on what ifInDiscards is in the ASA (I'm guessing some buffer-ish issue?)

I'm not really seeing any notiable performance issues with servers in these DMZ-zones, but i'd sure like to know what is causing the counters to increment anyway.

Anybody got a clue?

Thanks in advance

/Lasse

[thomas.chen]

Just try to poll to .1.3.6.1.4.1.9.9.392 i.e. Cisco Remote Access Monitor MIB.

http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml

[lassebjoern]

Hi, I don't quite see anything interesting from the output below?

/regards

Lasse

$ snmpwalk -m +.snmp/mibs/CISCO-REMOTE-ACCESS-MONITOR-MIB.my -c ******** -v2c 10.100.253.10 .1.3.6.1.4.1.9.9.392

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasMaxSessionsSupportable.0 = INTEGER: 750 Sessions

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasMaxUsersSupportable.0 = INTEGER: 0 Users

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasMaxGroupsSupportable.0 = INTEGER: 750 Groups

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasNumCryptoAccelerators.0 = INTEGER: 0 Users

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasNumSessions.0 = Gauge32: 0 Sessions

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasNumPrevSessions.0 = Counter32: 0 Sessions

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasNumUsers.0 = Gauge32: 0 Users

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasNumGroups.0 = Gauge32: 0 Groups

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasGlobalInPkts.0 = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasGlobalOutPkts.0 = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasGlobalInOctets.0 = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasGlobalInDecompOctets.0 = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasGlobalOutOctets.0 = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasGlobalOutUncompOctets.0 = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasGlobalInDropPkts.0 = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasGlobalOutDropPkts.0 = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrNumUsers."DefaultRAGroup" = INTEGER: 0

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrNumUsers."DefaultL2LGroup" = INTEGER: 0

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrNumUsers."DefaultWEBVPNGroup" = INTEGER: 0

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInPkts."DefaultRAGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInPkts."DefaultL2LGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInPkts."DefaultWEBVPNGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutPkts."DefaultRAGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutPkts."DefaultL2LGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutPkts."DefaultWEBVPNGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInDropPkts."DefaultRAGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInDropPkts."DefaultL2LGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInDropPkts."DefaultWEBVPNGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutDropPkts."DefaultRAGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutDropPkts."DefaultL2LGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutDropPkts."DefaultWEBVPNGroup" = Counter64: 0 Packets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInOctets."DefaultRAGroup" = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInOctets."DefaultL2LGroup" = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpInOctets."DefaultWEBVPNGroup" = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutOctets."DefaultRAGroup" = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutOctets."DefaultL2LGroup" = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasActGrpOutOctets."DefaultWEBVPNGroup" = Counter64: 0 Octets

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasThrMaxSessions.0 = INTEGER: 0 Sessions

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasThrMaxFailedAuths.0 = Gauge32: 0

CISCO-REMOTE-ACCESS-MONITOR-MIB::crasThrMaxThroughput.0 = INTEGER: 0 Octets Per Second