TCP packet buffer full

bma — Mon, 11 Mar 2019 10:09:19 GMT

When use show asp drop in the pix 525, ver 7.0, if TCP packet buffer full gets big jump, what is mean?

Thanks

ben

Re: TCP packet buffer full

bwalchez — Thu, 10 May 2007 17:51:28 GMT

TCP packet buffer full :

This counter is incremented and the packet is dropped when the security appliance receives an out-of-order TCP packet on a connection, and there is no buffer space to store this packet. Typically TCP packets are put into order on connections that are inspected by the security appliance or when packets are sent to an SSM for inspection. There is a default queue size,

and when packets in excess of this default queue size are received they will be dropped.

Try to use the TCP normalization feature of the PIX and increase the queue-limit for the buffer for out-of-order packets. The queue-limit could be increased to max 250 and is 0 by default.

You may refer to :

http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_7_1/cmd_ref/qr_711.htm#wp1598973

Re: TCP packet buffer full

vitripat — Thu, 10 May 2007 18:10:40 GMT

queue-limit can only be increased on ASA and not on PIX firewalls.

Regards,

Vibhor.

topic Re: TCP packet buffer full in Network Security

TCP packet buffer full

Re: TCP packet buffer full

Re: TCP packet buffer full