asa5540 underrun and overrun errors

[w951duu]

I'm seeing a ton of underrun and overrun errors on g0/0 (outside) of an asa5540.

It looks as though the utilization is only 51mpbs, so it should be able to keep up, right?

I've verified both the ASA and my switch are set for 1000gbps full duplex, any ideas what might be causing this?

sho int g0/0

Interface GigabitEthernet0/0 "outside", is up, line protocol is up

  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

        Full-Duplex(Full-duplex), 1000 Mbps(1000 Mbps)

        MAC address 0022.90fe.07b8, MTU 1500

        IP address 74.200.245.18, subnet mask 255.255.255.248

        117882126 packets input, 61320497020 bytes, 0 no buffer

        Received 45921540 broadcasts, 0 runts, 0 giants

        149787 input errors, 1 CRC, 0 frame, 149786 overrun, 0 ignored, 0 abort

        4273548 L2 decode drops

        70740348 packets output, 57688384741 bytes, 546122 underruns

        0 output errors, 0 collisions, 6 interface resets

        0 late collisions, 0 deferred

        0 input reset drops, 355 output reset drops, 1 tx hangs

        input queue (blocks free curr/low): hardware (511/486)

        output queue (blocks free curr/low): hardware (296/0)

  Traffic Statistics for "outside":

        36724232 packets input, 15846597931 bytes

        45514606 packets output, 41549599250 bytes

        674556 packets dropped

      1 minute input rate 32698 pkts/sec,  17559783 bytes/sec

      1 minute output rate 47494 pkts/sec,  56725332 bytes/sec

      1 minute drop rate, 494 pkts/sec

      5 minute input rate 33753 pkts/sec,  20708401 bytes/sec

      5 minute output rate 46468 pkts/sec,  53553807 bytes/sec

      5 minute drop rate, 496 pkts/sec

[manish arora]

Hi Gregory,

Can you Hardcode speed/duplex on both Devices ? I had similar issue and hardcoding did help.

Manish

[w951duu]

Yes, I've done that already. It did not work.

Thanks though!

[mflores]

Did you get this resolved?  I have the same issue.  I captured all the traffic using a sniffer and found that one of my devices was sending all kinds of traffic. You might see output discards on your switch as well.  The device that was causing it on my end was a Aruba wireless controller.  Once I shut it down for a test the issue stopped immedialty with 0 input errors.

[w951duu]

was caused by overutilization, diverted some traffic away from the firewall and it's fine now.