topic Re: asa5540 underrun and overrun errors in Network Security

asa5540 underrun and overrun errors

w951duu — Mon, 11 Mar 2019 19:47:07 GMT

I'm seeing a ton of underrun and overrun errors on g0/0 (outside) of an asa5540.

It looks as though the utilization is only 51mpbs, so it should be able to keep up, right?

I've verified both the ASA and my switch are set for 1000gbps full duplex, any ideas what might be causing this?

sho int g0/0

Interface GigabitEthernet0/0 "outside", is up, line protocol is up

Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

Full-Duplex(Full-duplex), 1000 Mbps(1000 Mbps)

MAC address 0022.90fe.07b8, MTU 1500

IP address 74.200.245.18, subnet mask 255.255.255.248

117882126 packets input, 61320497020 bytes, 0 no buffer

Received 45921540 broadcasts, 0 runts, 0 giants

149787 input errors, 1 CRC, 0 frame, 149786 overrun, 0 ignored, 0 abort

4273548 L2 decode drops

70740348 packets output, 57688384741 bytes, 546122 underruns

0 output errors, 0 collisions, 6 interface resets

0 late collisions, 0 deferred

0 input reset drops, 355 output reset drops, 1 tx hangs

input queue (blocks free curr/low): hardware (511/486)

output queue (blocks free curr/low): hardware (296/0)

Traffic Statistics for "outside":

36724232 packets input, 15846597931 bytes

45514606 packets output, 41549599250 bytes

674556 packets dropped

1 minute input rate 32698 pkts/sec, 17559783 bytes/sec

1 minute output rate 47494 pkts/sec, 56725332 bytes/sec

1 minute drop rate, 494 pkts/sec

5 minute input rate 33753 pkts/sec, 20708401 bytes/sec

5 minute output rate 46468 pkts/sec, 53553807 bytes/sec

5 minute drop rate, 496 pkts/sec

Re: asa5540 underrun and overrun errors

manish arora — Tue, 08 Feb 2011 22:01:10 GMT

Hi Gregory,

Can you Hardcode speed/duplex on both Devices ? I had similar issue and hardcoding did help.

Manish

Re: asa5540 underrun and overrun errors

w951duu — Tue, 08 Feb 2011 22:02:27 GMT

Yes, I've done that already. It did not work.

Thanks though!

Re: asa5540 underrun and overrun errors

mflores — Fri, 25 Feb 2011 16:10:13 GMT

Did you get this resolved? I have the same issue. I captured all the traffic using a sniffer and found that one of my devices was sending all kinds of traffic. You might see output discards on your switch as well. The device that was causing it on my end was a Aruba wireless controller. Once I shut it down for a test the issue stopped immedialty with 0 input errors.

Re: asa5540 underrun and overrun errors

w951duu — Tue, 26 Apr 2011 20:37:09 GMT

was caused by overutilization, diverted some traffic away from the firewall and it's fine now.