Cisco Support Community
Community Member

How to find the reason for dropped packets

A sensor of us shows a lot of events with signature 993, reporting dropped packages. I calculated an average of 28% percent over the day. How can I find out the reason for this ?

The sensor is an IDS 4230 FE running 3.1(2)S23. What is the highest speed the sensor is able to monitor and what effect does String Matches have on the speed of the sensor?

Sorry for this bunch of questions, but it is really urgent for us to find out why the sensor is dropping packets.


Re: How to find the reason for dropped packets

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center ( or speak with a TAC engineer. You can open a TAC case online at

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

CreatePlease to create content