Cisco ASA interface input error on outside inteface

[Pranav Gade]

Hi Team,

We are having Cisco ASA 5540 having

Cisco Adaptive Security Appliance Software Version 8.0(5)23

at certain time of moment daily wer are facing latency and packetdrop

wherin when I checked for ASA Interface which gives me " Input Errors" on outside interface ,so can any one tell me what are the causes to get input errors on cisco asa outisde interface

and also please give us soluiton on the same.

Interface GigabitEthernet0/0 "", is up, line protocol is up

  Hardware is i82546GB rev03, BW 1000 Mbps, DLY 10 usec

        Auto-Duplex(Full-duplex), Auto-Speed(1000 Mbps)

        Available for allocation to a context

        MAC address 001e.be79.5088, MTU not set

        IP address unassigned

        2516132626 packets input, 1725688403033 bytes, 0 no buffer

        Received 6919 broadcasts, 0 runts, 0 giants

        1022738 input errors, 0 CRC, 0 frame, 1022738 overrun, 0 ignored, 0 abort

        0 L2 decode drops

        2161563833 packets output, 1024175348846 bytes, 328 underruns

        0 output errors, 0 collisions, 0 interface resets

        0 late collisions, 0 deferred

        0 input reset drops, 0 output reset drops, 0 tx hangs

        input queue (curr/max packets): hardware (0/33) software (0/0)

        output queue (curr/max packets): hardware (1/511) software (0/0)

Regards

[Marvin Rhoads]

Nornally we would not expect overrun input errors on a 5540 platform.

You are running very old code though and ther are several bugs specifically related to overrun that are fixed in later releases. If you have a support contract, I'd recommend upgrading to at least 8.2(5) for more stability.

Are you perhaps doing web filtering on your ASA? That has been noted to have the potental to casue overruns as well. See this thread.

[Pranav Gade]

Hi Marvin,

Thanks for your reply....

No we are not running web filtering on ASA.. I just want tto understand is overrun on outiside interface impacr slowness and packet drop of the traffic.

Rather than upgrading ios is there any other solution ?

Reagrds

Pranav