Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
2526
Views
0
Helpful
3
Replies

ASA Interface Overruns

conleya
Level 1
Level 1

‎12-06-2010 11:43 AM - edited ‎03-11-2019 12:18 PM

I have a 5520 ASA that is used to terminate site-to-site IPSec tunnels.  Occasionally I see a high number of input errors and overruns on the inside and outside interfaces.  Both interfaces are 1 Gb/s and our Internet circuit is 100 Mb/s.  The SNMP graphs of these interfaces don't show the traffic ever going over 35 Mb/s.  The SNMP graphs are just a five minute average though.  Is there a method to track down what is causing the overruns?  Since it is not continually occurring, it has been difficult to troubleshoot.  Below is the output from some relevant commands:

show int inside
Interface GigabitEthernet0/1 "inside", is up, line protocol is up
  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
        Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
        Input flow control is unsupported, output flow control is unsupported
        MAC address 0023.ebc4.19ed, MTU 1500
        IP address y.y.y.y, subnet mask 255.255.255.0
        4219248183 packets input, 2272508352561 bytes, 22132 no buffer
        Received 45124959 broadcasts, 0 runts, 0 giants
        67978393 input errors, 0 CRC, 0 frame, 67978393 overrun, 0 ignored, 0 abort
        0 L2 decode drops
        4262570412 packets output, 1655120383407 bytes, 0 underruns
        0 pause output, 0 resume output
        0 output errors, 0 collisions, 10 interface resets
        0 late collisions, 0 deferred
        3 input reset drops, 3 output reset drops, 1 tx hangs
        input queue (blocks free curr/low): hardware (255/230)
        output queue (blocks free curr/low): hardware (255/0)
  Traffic Statistics for "inside":
        3690036634 packets input, 1917215366331 bytes
        3765604166 packets output, 1443799571430 bytes
        5959516 packets dropped
      1 minute input rate 615 pkts/sec,  215088 bytes/sec
      1 minute output rate 774 pkts/sec,  180417 bytes/sec
      1 minute drop rate, 1 pkts/sec
      5 minute input rate 134 pkts/sec,  46052 bytes/sec
      5 minute output rate 169 pkts/sec,  38546 bytes/sec
      5 minute drop rate, 0 pkts/sec

show int outside
Interface GigabitEthernet0/0 "outside", is up, line protocol is up
  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
        Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
        Input flow control is unsupported, output flow control is unsupported
        MAC address 0023.ebc4.19ec, MTU 1394
        IP address x.x.x.x, subnet mask 255.255.255.0
        5388500399 packets input, 2308906085608 bytes, 8950 no buffer
        Received 15942557 broadcasts, 0 runts, 0 giants
        348008 input errors, 0 CRC, 0 frame, 348008 overrun, 0 ignored, 0 abort
        0 L2 decode drops
        5796216460 packets output, 3441619182344 bytes, 29797 underruns
        0 pause output, 0 resume output
        0 output errors, 0 collisions, 8 interface resets
        0 late collisions, 0 deferred
        7 input reset drops, 0 output reset drops, 0 tx hangs
        input queue (blocks free curr/low): hardware (255/230)
        output queue (blocks free curr/low): hardware (255/0)
  Traffic Statistics for "outside":
        3470564313 packets input, 1606631479388 bytes
        3693611252 packets output, 2156001399481 bytes
        911237 packets dropped
      1 minute input rate 792 pkts/sec,  260177 bytes/sec
      1 minute output rate 780 pkts/sec,  404827 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 781 pkts/sec,  244250 bytes/sec
      5 minute output rate 736 pkts/sec,  315921 bytes/sec
      5 minute drop rate, 0 pkts/sec

show traffic
outside:
        received (in 564.310 secs):
                443186 packets  144512024 bytes
                785 pkts/sec    256086 bytes/sec
        transmitted (in 564.310 secs):
                414098 packets  182814888 bytes
                733 pkts/sec    323961 bytes/sec
      1 minute input rate 837 pkts/sec,  368459 bytes/sec
      1 minute output rate 733 pkts/sec,  317010 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 781 pkts/sec,  244250 bytes/sec
      5 minute output rate 736 pkts/sec,  315921 bytes/sec
      5 minute drop rate, 0 pkts/sec
inside:
        received (in 564.320 secs):
                387956 packets  150214782 bytes
                687 pkts/sec    266187 bytes/sec
        transmitted (in 564.320 secs):
                459404 packets  118199557 bytes
                814 pkts/sec    209454 bytes/sec
      1 minute input rate 721 pkts/sec,  260779 bytes/sec
      1 minute output rate 897 pkts/sec,  319573 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 677 pkts/sec,  255814 bytes/sec
      5 minute output rate 801 pkts/sec,  196489 bytes/sec
      5 minute drop rate, 0 pkts/sec
management:
        received (in 565.380 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
        transmitted (in 565.380 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
      1 minute input rate 0 pkts/sec,  0 bytes/sec
      1 minute output rate 0 pkts/sec,  0 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 0 pkts/sec,  0 bytes/sec
      5 minute output rate 0 pkts/sec,  0 bytes/sec
      5 minute drop rate, 0 pkts/sec
failover:
        received (in 565.390 secs):
                900 packets     109072 bytes
                1 pkts/sec      192 bytes/sec
        transmitted (in 565.390 secs):
                14445 packets   15100236 bytes
                25 pkts/sec     26707 bytes/sec
      1 minute input rate 1 pkts/sec,  191 bytes/sec
      1 minute output rate 25 pkts/sec,  26155 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 1 pkts/sec,  192 bytes/sec
      5 minute output rate 26 pkts/sec,  27671 bytes/sec
      5 minute drop rate, 0 pkts/sec

----------------------------------------
Aggregated Traffic on Physical Interface
----------------------------------------
GigabitEthernet0/0:
        received (in 565.990 secs):
                444397 packets  152800660 bytes
                785 pkts/sec    269970 bytes/sec
        transmitted (in 565.990 secs):
                415281 packets  190847222 bytes
                733 pkts/sec    337191 bytes/sec
      1 minute input rate 837 pkts/sec,  383531 bytes/sec
      1 minute output rate 733 pkts/sec,  330204 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 781 pkts/sec,  258320 bytes/sec
      5 minute output rate 736 pkts/sec,  329172 bytes/sec
      5 minute drop rate, 0 pkts/sec
GigabitEthernet0/1:
        received (in 566.000 secs):
                389689 packets  158584127 bytes
                688 pkts/sec    280183 bytes/sec
        transmitted (in 566.000 secs):
                460587 packets  127380553 bytes
                813 pkts/sec    225053 bytes/sec
      1 minute input rate 722 pkts/sec,  275635 bytes/sec
      1 minute output rate 897 pkts/sec,  336877 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 678 pkts/sec,  269571 bytes/sec
      5 minute output rate 801 pkts/sec,  212130 bytes/sec
      5 minute drop rate, 0 pkts/sec
GigabitEthernet0/2:
        received (in 566.430 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
        transmitted (in 566.430 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
      1 minute input rate 0 pkts/sec,  0 bytes/sec
      1 minute output rate 0 pkts/sec,  0 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 0 pkts/sec,  0 bytes/sec
      5 minute output rate 0 pkts/sec,  0 bytes/sec
      5 minute drop rate, 0 pkts/sec
GigabitEthernet0/3:
        received (in 566.430 secs):
                901 packets     125414 bytes
                1 pkts/sec      221 bytes/sec
        transmitted (in 566.430 secs):
                14468 packets   15381476 bytes
                25 pkts/sec     27155 bytes/sec
      1 minute input rate 1 pkts/sec,  220 bytes/sec
      1 minute output rate 25 pkts/sec,  26607 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 1 pkts/sec,  221 bytes/sec
      5 minute output rate 26 pkts/sec,  28146 bytes/sec
      5 minute drop rate, 0 pkts/sec
Management0/0:
        received (in 566.810 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
        transmitted (in 566.810 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
      1 minute input rate 0 pkts/sec,  0 bytes/sec
      1 minute output rate 0 pkts/sec,  0 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 0 pkts/sec,  0 bytes/sec
      5 minute output rate 0 pkts/sec,  0 bytes/sec
      5 minute drop rate, 0 pkts/sec

show conn count
1834 in use, 6185 most used

show resource usage
Resource              Current         Peak      Limit        Denied Context
SSH                         1            2          5             0 System
Syslogs [rate]             43         7573        N/A             0 System
Conns                    1748         6185     280000             0 System
Xlates                     35         1574        N/A             0 System
Hosts                    2047        20354        N/A             0 System
Conns [rate]               14         1047        N/A             0 System
Inspects [rate]             1          144        N/A             0 System

show blocks
  SIZE    MAX    LOW    CNT
     0    700    634    700
     4    300    299    299
    80    915    887    915
   256   3124   2922   3124
  1550  10343      0  10083
  2048   1100   1081   1100
  2560   2052   2052   2052
  4096    100    100    100
  8192    100     99    100
16384    154    154    154
65536     16     16     16

1 person had this problem
Labels:
0 Helpful
3 Replies 3

Maykol Rojas
Cisco Employee
Cisco Employee

‎12-06-2010 12:48 PM

Hello Conleya,

This is Mike, would you please do a clear interface, clear traffic, wait 5 minutes and then do a show traffic, show Interface?

Cheers

Mike

Mike
0 Helpful

conleya
Level 1
Level 1
In response to Maykol Rojas

‎12-06-2010 01:53 PM

The ASA is only intermittently having this issue, so when I cleared the counters I don't see any errors.  I have tried to catch this when it is going on, but haven't had any luck yet.  Here are the interfaces after clearing:

show interface
Interface GigabitEthernet0/0 "outside", is up, line protocol is up
  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
        Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
        Input flow control is unsupported, output flow control is unsupported
        MAC address 0023.ebc4.19ec, MTU 1394
        IP address x.x.x.x, subnet mask 255.255.255.0
        323755 packets input, 96709720 bytes, 0 no buffer
        Received 483 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        0 L2 decode drops
        318253 packets output, 167063953 bytes, 0 underruns
        0 pause output, 0 resume output
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
        0 input reset drops, 0 output reset drops, 0 tx hangs
        input queue (blocks free curr/low): hardware (255/230)
        output queue (blocks free curr/low): hardware (255/0)
  Traffic Statistics for "outside":
        323755 packets input, 90882130 bytes
        318253 packets output, 161335363 bytes
        83 packets dropped
      1 minute input rate 597 pkts/sec,  173802 bytes/sec
      1 minute output rate 576 pkts/sec,  278804 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 610 pkts/sec,  169559 bytes/sec
      5 minute output rate 590 pkts/sec,  290464 bytes/sec
      5 minute drop rate, 0 pkts/sec
Interface GigabitEthernet0/1 "inside", is up, line protocol is up
  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
        Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
        Input flow control is unsupported, output flow control is unsupported
        MAC address 0023.ebc4.19ed, MTU 1500
        IP address x.x.x.x, subnet mask 255.255.255.0
        291628 packets input, 141955767 bytes, 0 no buffer
        Received 842 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        0 L2 decode drops
        329591 packets output, 77715790 bytes, 0 underruns
        0 pause output, 0 resume output
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
        0 input reset drops, 0 output reset drops, 0 tx hangs
        input queue (blocks free curr/low): hardware (255/230)
        output queue (blocks free curr/low): hardware (255/0)
  Traffic Statistics for "inside":
        291188 packets input, 136225625 bytes
        329591 packets output, 71323115 bytes
        380 packets dropped
      1 minute input rate 432 pkts/sec,  225908 bytes/sec
      1 minute output rate 490 pkts/sec,  124967 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 547 pkts/sec,  243936 bytes/sec
      5 minute output rate 626 pkts/sec,  133333 bytes/sec
      5 minute drop rate, 0 pkts/sec
Interface GigabitEthernet0/2 "", is administratively down, line protocol is down
  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
        Auto-Duplex, Auto-Speed
        Input flow control is unsupported, output flow control is unsupported
        Available but not configured via nameif
        MAC address 0023.ebc4.1a10, MTU not set
        IP address unassigned
        0 packets input, 0 bytes, 0 no buffer
        Received 0 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        0 L2 decode drops
        0 packets output, 0 bytes, 0 underruns
        0 pause output, 0 resume output
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
        0 input reset drops, 0 output reset drops, 0 tx hangs
        input queue (blocks free curr/low): hardware (255/255)
        output queue (blocks free curr/low): hardware (255/255)
Interface GigabitEthernet0/3 "failover", is up, line protocol is up
  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec
        Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)
        Input flow control is unsupported, output flow control is unsupported
        Description: LAN/STATE Failover Interface
        MAC address 0023.ebc4.1a11, MTU 1500
        IP address x.x.x.x, subnet mask 255.255.255.252
        827 packets input, 115034 bytes, 0 no buffer
        Received 0 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        0 L2 decode drops
        11915 packets output, 12408972 bytes, 0 underruns
        0 pause output, 0 resume output
        0 output errors, 0 collisions, 0 interface resets
        0 late collisions, 0 deferred
        0 input reset drops, 0 output reset drops, 0 tx hangs
        input queue (blocks free curr/low): hardware (255/248)
        output queue (blocks free curr/low): hardware (255/178)
  Traffic Statistics for "failover":
        827 packets input, 100148 bytes
        11915 packets output, 12194502 bytes
        0 packets dropped
      1 minute input rate 1 pkts/sec,  193 bytes/sec
      1 minute output rate 22 pkts/sec,  23565 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 1 pkts/sec,  171 bytes/sec
      5 minute output rate 20 pkts/sec,  21389 bytes/sec
      5 minute drop rate, 0 pkts/sec
Interface Management0/0 "management", is down, line protocol is down
  Hardware is i82557, BW 100 Mbps, DLY 100 usec
        Auto-Duplex, Auto-Speed
        Input flow control is unsupported, output flow control is unsupported
        MAC address 0023.ebc4.19eb, MTU 1500
        IP address x.x.x.x, subnet mask 255.255.255.0
        0 packets input, 0 bytes, 0 no buffer
        Received 0 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        0 L2 decode drops
        0 packets output, 0 bytes, 0 underruns
        0 pause output, 0 resume output
        0 output errors, 0 collisions, 0 interface resets
        0 babbles, 0 late collisions, 0 deferred
        0 lost carrier, 0 no carrier
        0 input reset drops, 0 output reset drops
        input queue (curr/max packets): hardware (0/0) software (0/0)
        output queue (curr/max packets): hardware (0/0) software (0/0)
  Traffic Statistics for "management":
        0 packets input, 0 bytes
        0 packets output, 0 bytes
        0 packets dropped
      1 minute input rate 0 pkts/sec,  0 bytes/sec
      1 minute output rate 0 pkts/sec,  0 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 0 pkts/sec,  0 bytes/sec
      5 minute output rate 0 pkts/sec,  0 bytes/sec
      5 minute drop rate, 0 pkts/sec
        Management-only interface. Blocked 0 through-the-device packets

show traffic
outside:
        received (in 816.740 secs):
                500785 packets  144707364 bytes
                613 pkts/sec    177176 bytes/sec
        transmitted (in 816.740 secs):
                492670 packets  259255342 bytes
                603 pkts/sec    317427 bytes/sec
      1 minute input rate 562 pkts/sec,  162417 bytes/sec
      1 minute output rate 524 pkts/sec,  220537 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 571 pkts/sec,  167185 bytes/sec
      5 minute output rate 578 pkts/sec,  318046 bytes/sec
      5 minute drop rate, 0 pkts/sec
inside:
        received (in 816.740 secs):
                440467 packets  215886623 bytes
                539 pkts/sec    264327 bytes/sec
        transmitted (in 816.740 secs):
                504575 packets  111775660 bytes
                617 pkts/sec    136855 bytes/sec
      1 minute input rate 454 pkts/sec,  174142 bytes/sec
      1 minute output rate 561 pkts/sec,  127490 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 504 pkts/sec,  264368 bytes/sec
      5 minute output rate 558 pkts/sec,  126187 bytes/sec
      5 minute drop rate, 0 pkts/sec
management:
        received (in 817.570 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
        transmitted (in 817.570 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
      1 minute input rate 0 pkts/sec,  0 bytes/sec
      1 minute output rate 0 pkts/sec,  0 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 0 pkts/sec,  0 bytes/sec
      5 minute output rate 0 pkts/sec,  0 bytes/sec
      5 minute drop rate, 0 pkts/sec
failover:
        received (in 817.570 secs):
                1298 packets    157224 bytes
                1 pkts/sec      192 bytes/sec
        transmitted (in 817.570 secs):
                19016 packets   19494624 bytes
                23 pkts/sec     23844 bytes/sec
      1 minute input rate 1 pkts/sec,  191 bytes/sec
      1 minute output rate 24 pkts/sec,  24946 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 1 pkts/sec,  192 bytes/sec
      5 minute output rate 22 pkts/sec,  23099 bytes/sec
      5 minute drop rate, 0 pkts/sec

----------------------------------------
Aggregated Traffic on Physical Interface
----------------------------------------
GigabitEthernet0/0:
        received (in 817.970 secs):
                501486 packets  153883238 bytes
                613 pkts/sec    188128 bytes/sec
        transmitted (in 817.970 secs):
                493312 packets  268420218 bytes
                603 pkts/sec    328154 bytes/sec
      1 minute input rate 562 pkts/sec,  172535 bytes/sec
      1 minute output rate 524 pkts/sec,  229972 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 571 pkts/sec,  177469 bytes/sec
      5 minute output rate 578 pkts/sec,  328455 bytes/sec
      5 minute drop rate, 0 pkts/sec
GigabitEthernet0/1:
        received (in 817.980 secs):
                441712 packets  224819237 bytes
                540 pkts/sec    274846 bytes/sec
        transmitted (in 817.980 secs):
                505277 packets  121714668 bytes
                617 pkts/sec    148799 bytes/sec
      1 minute input rate 454 pkts/sec,  183217 bytes/sec
      1 minute output rate 561 pkts/sec,  138209 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 505 pkts/sec,  274267 bytes/sec
      5 minute output rate 558 pkts/sec,  137121 bytes/sec
      5 minute drop rate, 0 pkts/sec
GigabitEthernet0/2:
        received (in 818.550 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
        transmitted (in 818.550 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
      1 minute input rate 0 pkts/sec,  0 bytes/sec
      1 minute output rate 0 pkts/sec,  0 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 0 pkts/sec,  0 bytes/sec
      5 minute output rate 0 pkts/sec,  0 bytes/sec
      5 minute drop rate, 0 pkts/sec
GigabitEthernet0/3:
        received (in 818.550 secs):
                1299 packets    180730 bytes
                1 pkts/sec      220 bytes/sec
        transmitted (in 818.550 secs):
                19041 packets   19861912 bytes
                23 pkts/sec     24264 bytes/sec
      1 minute input rate 1 pkts/sec,  220 bytes/sec
      1 minute output rate 24 pkts/sec,  25388 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 1 pkts/sec,  221 bytes/sec
      5 minute output rate 22 pkts/sec,  23506 bytes/sec
      5 minute drop rate, 0 pkts/sec
Management0/0:
        received (in 819.010 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
        transmitted (in 819.010 secs):
                0 packets       0 bytes
                0 pkts/sec      0 bytes/sec
      1 minute input rate 0 pkts/sec,  0 bytes/sec
      1 minute output rate 0 pkts/sec,  0 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 0 pkts/sec,  0 bytes/sec
      5 minute output rate 0 pkts/sec,  0 bytes/sec
      5 minute drop rate, 0 pkts/sec

I also included a graph showing when the errors have occurred.

Preview file
784 KB
0 Helpful

Maykol Rojas
Cisco Employee
Cisco Employee
In response to conleya

‎12-06-2010 02:05 PM

Hello,

I see, just for you to know, I just want to check if it is because of bursty traffic. If that monitor tool tells you when the errors are happening, please take a show traffic and we will analyze the outputs,

Cheers

Mike

Mike
0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking for a $25 gift card