Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

What does this mean Dropping TCP Segment Reason: TCP reassembly queue overf

Hi, I have a Cisco 877 running in VPN mode and get this error sent to the syslog server throughout the day:

65: Dropping TCP Segment: seq:1180744820 1500 bytes is out-of-order; expected seq:1180719170. Reason: TCP reassembly queue overflow

2 REPLIES
Bronze

Re: What does this mean Dropping TCP Segment Reason: TCP reassem

change the ip inspect tcp reassembly queue length and test.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124tcr/tsec_r/sec_i1ht.htm

To set parameters that define how Cisco IOS Firewall application inspection and Cisco IOS Intrusion Prevention System (IPS) will handle out-of-order TCP packets, use the ip inspect tcp reassembly command in global configuration mode. To disable at least one defined parameter, use the no form of this command. ip inspect tcp reassembly {[queue length packet-number] [timeout seconds] [memory limitsize-in-kb] [alarm {on | off}]}

no ip inspect tcp reassembly {[queue length] [timeout] [memory limit]}

Community Member

Re: What does this mean Dropping TCP Segment Reason: TCP reassem

Thanks for your reply, is the error anything to worry about in simple terms?

I will take a look at the link now.

1089
Views
0
Helpful
2
Replies
CreatePlease to create content