CIsco 891-K9 OoO queue overflow

jjoelcKFDA — Tue, 12 Mar 2019 00:35:33 GMT

Cisco 891-K9 router, very basic config, minimal firewall in place.

I keep getting warnings in the log:

Dropping TCP Segment:xxxx is out-of-order... Reason:TCP reassembly queue overflow....

I have increased the size of the ooo queue etc. as follows (increased incrementally up to this point...):

parameter-map type ooo global

tcp reassembly timeout 10

tcp reassembly queue length 128

tcp reassembly memory limit 6144

but I am still getting the same errors in the log. The frequency of them has decreased, but there are still well over 150/day. Anyone have any ideas on where I should go from here?

Thanks!

CIsco 891-K9 OoO queue overflow

Julio Carvajal — Mon, 10 Dec 2012 17:36:16 GMT

Hello Joel,

Receiving OOO packets it's an issue out of your box, you should not receive this, you should contact your ISP if they are comming from the outside,

Anyway try the following :

ip inspect tcp reassembly

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_i2.html#wp1063773

Regards

topic CIsco 891-K9 OoO queue overflow in Network Security

CIsco 891-K9 OoO queue overflow

CIsco 891-K9 OoO queue overflow

ip inspect tcp reassembly