Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

IPS 1304 & IPS-6-OOO_FULL

Hello - I am seeing a whole bunch of the below messages in my logs. Can anyone tell my why this is happening and how I can resolve the issue.  I have tried tunning the setting below with no luck.

Dec 16 08:55:47.195 WA: %IPS-4-SIGNATURE: Sig:1304 Subsig:0 Sev:25 TCP Session Packet Queue Overflow [23.59.190.106:80 -> 10.0.1.215:54067] VRF:NONE RiskRating:25

Dec 16 09:05:45.212 WA: %IPS-6-OOO_FULL: Out-of-Order reached its maximum queue size! Drop this packet

Cisco IOS Software, C800 Software (C800-UNIVERSALK9-M), Version 15.3(2)T, RELEASE SOFTWARE (fc3)

Technical Support: http://www.cisco.com/techsupport

Copyright (c) 1986-2013 by Cisco Systems, Inc.

Compiled Thu 28-Mar-13 13:45 by prod_rel_team

ROM: System Bootstrap, Version 15.1(4r)M, RELEASE SOFTWARE (fc1)

parameter-map type ooo global

tcp reassembly timeout 60

tcp reassembly queue length 1024

tcp reassembly memory limit 256000

Signature statistics [process switch:fast switch]

  signature 6009:0: packets checked [0:8160] alarmed [0:0] dropped [0:0]

  signature 1304:0: packets checked [0:4474] alarmed [0:3544] dropped [0:0]

  signature 3653:0: packets checked [0:3] alarmed [0:0] dropped [0:0]

Interfaces configured for ips 1

Session creations since subsystem startup or last reset 5752

Current session counts (estab/half-open/terminating) [22:0:0]

Maxever session counts (estab/half-open/terminating) [179:68:7]

Last session created 00:00:18

Last statistic reset 15:09:08

TCP reassembly statistics

  Out-of-order packets dropped 4474

Thanks -

gm

1 REPLY
Community Member

Your post is quite old now. I

Your post is quite old now. I have the same problem with a router I am using in a lab. Did you a find a solution for this problem? I assume you may :-)

Thanks

 

1066
Views
0
Helpful
1
Replies
CreatePlease to create content