topic Hi Collin, in Network Security

ASA Show Command

CSCO12053961 — Tue, 12 Mar 2019 08:28:40 GMT

Hi Team,

What is command to see frame discard on ASA5585(9.1), sub interfaces, The Firewall is configured in multi context mode.

You should be able to see

Collin Clark — Thu, 03 Nov 2016 01:21:14 GMT

You should be able to see that if you do a 'show interface' in the particular context. However you should also be able to see that in the system context where you assign interfaces. If you see errors there, you will more than likely see them on the sub-interfaces since they are virtual off the physical.

HTH

Hi Collin,

CSCO12053961 — Thu, 03 Nov 2016 02:08:21 GMT

Hi Collin,

Thank you for email.

I am using same commands, but I am not able to see "input discard", but I am getting overrun , I am not sure if this the discards:

IP address unassigned
41983386799 packets input, 29545411671268 bytes, 0 no buffer
Received 1012 broadcasts, 0 runts, 0 giants
18604 input errors, 0 CRC, 0 frame, 18604 overrun, 0 ignored, 0 abort

Input errors (w/o CRC errors)

Collin Clark — Thu, 03 Nov 2016 13:07:05 GMT

Input errors (w/o CRC errors) are usually caused by a bad cable or they are packets with/without a 802.11q header. Even though 18604 sounds like a lot of discards, with the number of packets input, your error rate is very small-

0.000044313%

Are you seeing performance issues or are you just concerned with the errors?