Cisco ASA 5585X Internal-Data0/1 interface errorsOutput Drops on Serial interface: Better queueing or Output queue size?ASA IPS issue: routing and management interfaceHow can I reasonably verify my QoS configuration is working?Output drops on serial interface when service-policy appliedDifference between CRC and input errors - show interfaceInterface on ASA 5525 cannot turn up/upASA unable to pass ICMP and RDP through internal interfacesCisco 3560 interface counters, are the counters reset automatically?How to assign a second available Public ip for NAT (Dynamic PAT) to Inside Network Cisco ASA 5516-XTrunk on the outside ASA interface

A poker game description that does not feel gimmicky

Should the British be getting ready for a no-deal Brexit?

Information to fellow intern about hiring?

How to move the player while also allowing forces to affect it

Why do we use polarized capacitors?

Can a planet have a different gravitational pull depending on its location in orbit around its sun?

Finding files for which a command fails

Why do UK politicians seemingly ignore opinion polls on Brexit?

What happens when a metallic dragon and a chromatic dragon mate?

How is it possible for user's password to be changed after storage was encrypted? (on OS X, Android)

Why doesn't a const reference extend the life of a temporary object passed via a function?

Doomsday-clock for my fantasy planet

Typesetting a double Over Dot on top of a symbol

Short story: alien planet where slow students are executed

Hosting Wordpress in a EC2 Load Balanced Instance

Are white and non-white police officers equally likely to kill black suspects?

What is it called when one voice type sings a 'solo'?

How to manage monthly salary

Is there a familial term for apples and pears?

COUNT(*) or MAX(id) - which is faster?

Find the number of surjections from A to B.

Can I find out the caloric content of bread by dehydrating it?

How can I add custom success page

LWC and complex parameters



Cisco ASA 5585X Internal-Data0/1 interface errors


Output Drops on Serial interface: Better queueing or Output queue size?ASA IPS issue: routing and management interfaceHow can I reasonably verify my QoS configuration is working?Output drops on serial interface when service-policy appliedDifference between CRC and input errors - show interfaceInterface on ASA 5525 cannot turn up/upASA unable to pass ICMP and RDP through internal interfacesCisco 3560 interface counters, are the counters reset automatically?How to assign a second available Public ip for NAT (Dynamic PAT) to Inside Network Cisco ASA 5516-XTrunk on the outside ASA interface













1















I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would like to track it down what could be the issue.



asa/pri/act# show int detail | b Internal-Data0/1
Interface Internal-Data0/1 "", is up, line protocol is up
Hardware is i82599_xaui rev01, BW 10000 Mbps, DLY 10 usec
(Full-duplex), (10000 Mbps)
Input flow control is on, output flow control is off
MAC address 0000.0001.0002, MTU not set
IP address unassigned
1647603170965 packets input, 997527140937135 bytes, 0 no buffer
Received 864639959 broadcasts, 0 runts, 0 giants
16931212 input errors, 0 CRC, 0 frame, 16931212 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops, 0 demux drops
1384367635589 packets output, 843565440564127 bytes, 111 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 output decode drops
0 input reset drops, 0 output reset drops
Queue Stats:
RX[00]: 422029984108 packets, 255396173038299 bytes, 15836342 overrun
Blocks free curr/low: 511/112
RX[01]: 407016123288 packets, 245899431598039 bytes, 269316 overrun
Blocks free curr/low: 511/168
RX[02]: 413500421902 packets, 253352037908193 bytes, 566063 overrun
Blocks free curr/low: 511/264
RX[03]: 405056641781 packets, 242879498449889 bytes, 259491 overrun
Blocks free curr/low: 511/189
TX[00]: 330190721654 packets, 199847247773742 bytes, 0 underruns
Blocks free curr/low: 508/121
TX[01]: 338943972803 packets, 207641035134472 bytes, 0 underruns
Blocks free curr/low: 511/116
TX[02]: 351032018606 packets, 213654237791772 bytes, 0 underruns
Blocks free curr/low: 510/250
TX[03]: 334102657656 packets, 196810495181007 bytes, 0 underruns
Blocks free curr/low: 510/90
TX[04]: 0 packets, 0 bytes, 0 underruns
Blocks free curr/low: 511/511
Used by GigabitEthernet0/5
TX[05]: 4 packets, 528 bytes, 0 underruns
Blocks free curr/low: 511/509
Used by TenGigabitEthernet0/9
TX[06]: 4 packets, 528 bytes, 0 underruns
Blocks free curr/low: 511/510
Used by TenGigabitEthernet0/8
TX[07]: 30112705950 packets, 25621895258706 bytes, 111 underruns
Blocks free curr/low: 511/0
Used by GigabitEthernet0/6
TX[08]: 21 packets, 1180 bytes, 0 underruns
Blocks free curr/low: 511/510
Used by GigabitEthernet0/7
Topology Information:
This interface, a SSP Embedded NIC Port, is connected
with Internal-Data0/3, a SSP Switch Uplink Port.
Control Point Interface States:
Interface number is 3
Interface config status is active
Interface state is active


I did basic troubleshooting like cpu-hog etc but not seeing any massive hog etc.



currently max conn count is ~40k around and 400mbps traffic rate with 75kpps rate.



enter image description here



Interface error rate graph



enter image description here










share|improve this question


























    1















    I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would like to track it down what could be the issue.



    asa/pri/act# show int detail | b Internal-Data0/1
    Interface Internal-Data0/1 "", is up, line protocol is up
    Hardware is i82599_xaui rev01, BW 10000 Mbps, DLY 10 usec
    (Full-duplex), (10000 Mbps)
    Input flow control is on, output flow control is off
    MAC address 0000.0001.0002, MTU not set
    IP address unassigned
    1647603170965 packets input, 997527140937135 bytes, 0 no buffer
    Received 864639959 broadcasts, 0 runts, 0 giants
    16931212 input errors, 0 CRC, 0 frame, 16931212 overrun, 0 ignored, 0 abort
    0 pause input, 0 resume input
    0 L2 decode drops, 0 demux drops
    1384367635589 packets output, 843565440564127 bytes, 111 underruns
    0 pause output, 0 resume output
    0 output errors, 0 collisions, 1 interface resets
    0 late collisions, 0 deferred
    0 output decode drops
    0 input reset drops, 0 output reset drops
    Queue Stats:
    RX[00]: 422029984108 packets, 255396173038299 bytes, 15836342 overrun
    Blocks free curr/low: 511/112
    RX[01]: 407016123288 packets, 245899431598039 bytes, 269316 overrun
    Blocks free curr/low: 511/168
    RX[02]: 413500421902 packets, 253352037908193 bytes, 566063 overrun
    Blocks free curr/low: 511/264
    RX[03]: 405056641781 packets, 242879498449889 bytes, 259491 overrun
    Blocks free curr/low: 511/189
    TX[00]: 330190721654 packets, 199847247773742 bytes, 0 underruns
    Blocks free curr/low: 508/121
    TX[01]: 338943972803 packets, 207641035134472 bytes, 0 underruns
    Blocks free curr/low: 511/116
    TX[02]: 351032018606 packets, 213654237791772 bytes, 0 underruns
    Blocks free curr/low: 510/250
    TX[03]: 334102657656 packets, 196810495181007 bytes, 0 underruns
    Blocks free curr/low: 510/90
    TX[04]: 0 packets, 0 bytes, 0 underruns
    Blocks free curr/low: 511/511
    Used by GigabitEthernet0/5
    TX[05]: 4 packets, 528 bytes, 0 underruns
    Blocks free curr/low: 511/509
    Used by TenGigabitEthernet0/9
    TX[06]: 4 packets, 528 bytes, 0 underruns
    Blocks free curr/low: 511/510
    Used by TenGigabitEthernet0/8
    TX[07]: 30112705950 packets, 25621895258706 bytes, 111 underruns
    Blocks free curr/low: 511/0
    Used by GigabitEthernet0/6
    TX[08]: 21 packets, 1180 bytes, 0 underruns
    Blocks free curr/low: 511/510
    Used by GigabitEthernet0/7
    Topology Information:
    This interface, a SSP Embedded NIC Port, is connected
    with Internal-Data0/3, a SSP Switch Uplink Port.
    Control Point Interface States:
    Interface number is 3
    Interface config status is active
    Interface state is active


    I did basic troubleshooting like cpu-hog etc but not seeing any massive hog etc.



    currently max conn count is ~40k around and 400mbps traffic rate with 75kpps rate.



    enter image description here



    Interface error rate graph



    enter image description here










    share|improve this question
























      1












      1








      1








      I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would like to track it down what could be the issue.



      asa/pri/act# show int detail | b Internal-Data0/1
      Interface Internal-Data0/1 "", is up, line protocol is up
      Hardware is i82599_xaui rev01, BW 10000 Mbps, DLY 10 usec
      (Full-duplex), (10000 Mbps)
      Input flow control is on, output flow control is off
      MAC address 0000.0001.0002, MTU not set
      IP address unassigned
      1647603170965 packets input, 997527140937135 bytes, 0 no buffer
      Received 864639959 broadcasts, 0 runts, 0 giants
      16931212 input errors, 0 CRC, 0 frame, 16931212 overrun, 0 ignored, 0 abort
      0 pause input, 0 resume input
      0 L2 decode drops, 0 demux drops
      1384367635589 packets output, 843565440564127 bytes, 111 underruns
      0 pause output, 0 resume output
      0 output errors, 0 collisions, 1 interface resets
      0 late collisions, 0 deferred
      0 output decode drops
      0 input reset drops, 0 output reset drops
      Queue Stats:
      RX[00]: 422029984108 packets, 255396173038299 bytes, 15836342 overrun
      Blocks free curr/low: 511/112
      RX[01]: 407016123288 packets, 245899431598039 bytes, 269316 overrun
      Blocks free curr/low: 511/168
      RX[02]: 413500421902 packets, 253352037908193 bytes, 566063 overrun
      Blocks free curr/low: 511/264
      RX[03]: 405056641781 packets, 242879498449889 bytes, 259491 overrun
      Blocks free curr/low: 511/189
      TX[00]: 330190721654 packets, 199847247773742 bytes, 0 underruns
      Blocks free curr/low: 508/121
      TX[01]: 338943972803 packets, 207641035134472 bytes, 0 underruns
      Blocks free curr/low: 511/116
      TX[02]: 351032018606 packets, 213654237791772 bytes, 0 underruns
      Blocks free curr/low: 510/250
      TX[03]: 334102657656 packets, 196810495181007 bytes, 0 underruns
      Blocks free curr/low: 510/90
      TX[04]: 0 packets, 0 bytes, 0 underruns
      Blocks free curr/low: 511/511
      Used by GigabitEthernet0/5
      TX[05]: 4 packets, 528 bytes, 0 underruns
      Blocks free curr/low: 511/509
      Used by TenGigabitEthernet0/9
      TX[06]: 4 packets, 528 bytes, 0 underruns
      Blocks free curr/low: 511/510
      Used by TenGigabitEthernet0/8
      TX[07]: 30112705950 packets, 25621895258706 bytes, 111 underruns
      Blocks free curr/low: 511/0
      Used by GigabitEthernet0/6
      TX[08]: 21 packets, 1180 bytes, 0 underruns
      Blocks free curr/low: 511/510
      Used by GigabitEthernet0/7
      Topology Information:
      This interface, a SSP Embedded NIC Port, is connected
      with Internal-Data0/3, a SSP Switch Uplink Port.
      Control Point Interface States:
      Interface number is 3
      Interface config status is active
      Interface state is active


      I did basic troubleshooting like cpu-hog etc but not seeing any massive hog etc.



      currently max conn count is ~40k around and 400mbps traffic rate with 75kpps rate.



      enter image description here



      Interface error rate graph



      enter image description here










      share|improve this question














      I have noticed on Cisco ASA 5585 (SSP-20) interface error counter going up specially overrun but so far we haven't seen any production impact or issue, error rate is low so its not noticable but would like to track it down what could be the issue.



      asa/pri/act# show int detail | b Internal-Data0/1
      Interface Internal-Data0/1 "", is up, line protocol is up
      Hardware is i82599_xaui rev01, BW 10000 Mbps, DLY 10 usec
      (Full-duplex), (10000 Mbps)
      Input flow control is on, output flow control is off
      MAC address 0000.0001.0002, MTU not set
      IP address unassigned
      1647603170965 packets input, 997527140937135 bytes, 0 no buffer
      Received 864639959 broadcasts, 0 runts, 0 giants
      16931212 input errors, 0 CRC, 0 frame, 16931212 overrun, 0 ignored, 0 abort
      0 pause input, 0 resume input
      0 L2 decode drops, 0 demux drops
      1384367635589 packets output, 843565440564127 bytes, 111 underruns
      0 pause output, 0 resume output
      0 output errors, 0 collisions, 1 interface resets
      0 late collisions, 0 deferred
      0 output decode drops
      0 input reset drops, 0 output reset drops
      Queue Stats:
      RX[00]: 422029984108 packets, 255396173038299 bytes, 15836342 overrun
      Blocks free curr/low: 511/112
      RX[01]: 407016123288 packets, 245899431598039 bytes, 269316 overrun
      Blocks free curr/low: 511/168
      RX[02]: 413500421902 packets, 253352037908193 bytes, 566063 overrun
      Blocks free curr/low: 511/264
      RX[03]: 405056641781 packets, 242879498449889 bytes, 259491 overrun
      Blocks free curr/low: 511/189
      TX[00]: 330190721654 packets, 199847247773742 bytes, 0 underruns
      Blocks free curr/low: 508/121
      TX[01]: 338943972803 packets, 207641035134472 bytes, 0 underruns
      Blocks free curr/low: 511/116
      TX[02]: 351032018606 packets, 213654237791772 bytes, 0 underruns
      Blocks free curr/low: 510/250
      TX[03]: 334102657656 packets, 196810495181007 bytes, 0 underruns
      Blocks free curr/low: 510/90
      TX[04]: 0 packets, 0 bytes, 0 underruns
      Blocks free curr/low: 511/511
      Used by GigabitEthernet0/5
      TX[05]: 4 packets, 528 bytes, 0 underruns
      Blocks free curr/low: 511/509
      Used by TenGigabitEthernet0/9
      TX[06]: 4 packets, 528 bytes, 0 underruns
      Blocks free curr/low: 511/510
      Used by TenGigabitEthernet0/8
      TX[07]: 30112705950 packets, 25621895258706 bytes, 111 underruns
      Blocks free curr/low: 511/0
      Used by GigabitEthernet0/6
      TX[08]: 21 packets, 1180 bytes, 0 underruns
      Blocks free curr/low: 511/510
      Used by GigabitEthernet0/7
      Topology Information:
      This interface, a SSP Embedded NIC Port, is connected
      with Internal-Data0/3, a SSP Switch Uplink Port.
      Control Point Interface States:
      Interface number is 3
      Interface config status is active
      Interface state is active


      I did basic troubleshooting like cpu-hog etc but not seeing any massive hog etc.



      currently max conn count is ~40k around and 400mbps traffic rate with 75kpps rate.



      enter image description here



      Interface error rate graph



      enter image description here







      cisco cisco-asa firewall interface packet-loss






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked 5 hours ago









      SatishSatish

      1,75812361




      1,75812361




















          1 Answer
          1






          active

          oldest

          votes


















          2














          From Cisco tech note:




          The ASA interface error counter "overrun" tracks the number of times
          that a packet was received on the network interface, but there was no
          available space in the interface FIFO queue to store the packet. Thus,
          the packet was dropped. The value of this counter can be seen with the
          show interface command.







          share|improve this answer























            Your Answer








            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "496"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: false,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: null,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            noCode: true, onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













            draft saved

            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f58316%2fcisco-asa-5585x-internal-data0-1-interface-errors%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            2














            From Cisco tech note:




            The ASA interface error counter "overrun" tracks the number of times
            that a packet was received on the network interface, but there was no
            available space in the interface FIFO queue to store the packet. Thus,
            the packet was dropped. The value of this counter can be seen with the
            show interface command.







            share|improve this answer



























              2














              From Cisco tech note:




              The ASA interface error counter "overrun" tracks the number of times
              that a packet was received on the network interface, but there was no
              available space in the interface FIFO queue to store the packet. Thus,
              the packet was dropped. The value of this counter can be seen with the
              show interface command.







              share|improve this answer

























                2












                2








                2







                From Cisco tech note:




                The ASA interface error counter "overrun" tracks the number of times
                that a packet was received on the network interface, but there was no
                available space in the interface FIFO queue to store the packet. Thus,
                the packet was dropped. The value of this counter can be seen with the
                show interface command.







                share|improve this answer













                From Cisco tech note:




                The ASA interface error counter "overrun" tracks the number of times
                that a packet was received on the network interface, but there was no
                available space in the interface FIFO queue to store the packet. Thus,
                the packet was dropped. The value of this counter can be seen with the
                show interface command.








                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered 3 hours ago









                Ron TrunkRon Trunk

                39.6k33780




                39.6k33780



























                    draft saved

                    draft discarded
















































                    Thanks for contributing an answer to Network Engineering Stack Exchange!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid


                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.

                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f58316%2fcisco-asa-5585x-internal-data0-1-interface-errors%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    名間水力發電廠 目录 沿革 設施 鄰近設施 註釋 外部連結 导航菜单23°50′10″N 120°42′41″E / 23.83611°N 120.71139°E / 23.83611; 120.7113923°50′10″N 120°42′41″E / 23.83611°N 120.71139°E / 23.83611; 120.71139計畫概要原始内容臺灣第一座BOT 模式開發的水力發電廠-名間水力電廠名間水力發電廠 水利署首件BOT案原始内容《小檔案》名間電廠 首座BOT水力發電廠原始内容名間電廠BOT - 經濟部水利署中區水資源局

                    Prove that NP is closed under karp reduction?Space(n) not closed under Karp reductions - what about NTime(n)?Class P is closed under rotation?Prove or disprove that $NL$ is closed under polynomial many-one reductions$mathbfNC_2$ is closed under log-space reductionOn Karp reductionwhen can I know if a class (complexity) is closed under reduction (cook/karp)Check if class $PSPACE$ is closed under polyonomially space reductionIs NPSPACE also closed under polynomial-time reduction and under log-space reduction?Prove PSPACE is closed under complement?Prove PSPACE is closed under union?

                    Is my guitar’s action too high? Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 23, 2019 at 23:30 UTC (7:30pm US/Eastern)Strings too stiff on a recently purchased acoustic guitar | Cort AD880CEIs the action of my guitar really high?Μy little finger is too weak to play guitarWith guitar, how long should I give my fingers to strengthen / callous?When playing a fret the guitar sounds mutedPlaying (Barre) chords up the guitar neckI think my guitar strings are wound too tight and I can't play barre chordsF barre chord on an SG guitarHow to find to the right strings of a barre chord by feel?High action on higher fret on my steel acoustic guitar