topic Re: Dropping TCP Segment in Network Security

Dropping TCP Segment

zycha1983 — Mon, 11 Mar 2019 18:21:27 GMT

Hi, when I downloading file from internet I'm getting error in log file:

Dropping TCP Segment seq:1795892888 1300 bytes is out-of-order, expected seq:1795841228, Reason: TCP reassembly queue overflow -session 192.168.0.125:4142 to 92.123.72.98:80 on zone-pair ccp-zp-in-out cla

Colud you tell me how to setup rule in firewall to not getting block whlie dowlnoading? my router is 892 cisco.

Thanks

Re: Dropping TCP Segment

Jitendriya Athavale — Thu, 05 Aug 2010 13:30:27 GMT

i think you are using a firewall on the router

if so then try removing inspect http and see if you get the same error

if its a zone based firewall you will need to go to 15.0 code i guess

Re: Dropping TCP Segment

zycha1983 — Thu, 05 Aug 2010 13:54:23 GMT

Yup, I have firewall configured.

Under ccp-inspect (in-zone to out-zone) I have line

any (source) any (destination) http (service) inspect (action)

You think I should delete that line?

Im using GUI interface cause I'm not good at command prompt yet.

Re: Dropping TCP Segment

Jitendriya Athavale — Thu, 05 Aug 2010 14:37:11 GMT

yeah for zone based firewall the out of order buffer support was introduced in only 15.0 code. are you running 15.0 code