02-04-2025 06:06 AM
Hi,
We have 2 DC's, each with their own Firepower 1150 running ASA software v9.20(3)7.
In DC1 we see interface Internal Data 0/0 (overrun) errors rising. After reading up on several posts here, on reddit and other places, i understand that interface is for moving the traffic between internal modules. I also understand that the errors could be due to oversubscription, just like the following link describes:
https://community.cisco.com/t5/network-security/errors-in-interface-internal-data0-0/td-p/2163736
I'm not looking for a description, but a solution.
According to my monitoring service, the device is running at 16% Memory and 10% CPU on average, the last 30 days.
If traffic is dropped, it is of course bad and something we need to take a look on. I am relatively new in the networking area and there is a lot to learn and understand. I'm not sure how relevant these command outputs are:
DC1-VPN# sh int detail | b Internal
Interface Internal-Data0/0 "", is up, line protocol is up
Hardware is x550em_kr rev11, BW 10000 Mbps, DLY 10 usec
(Full-duplex), (10000 Mbps)
Input flow control is on, output flow control is off
MAC address 00a0.c900.0002, MTU not set
IP address unassigned
23287371611 packets input, 19493628190957 bytes, 0 no buffer
Received 74190973 broadcasts, 0 runts, 0 giants
1287449 input errors, 0 CRC, 0 frame, 1287449 overrun, 0 ignored, 0 abort
0 pause input, 0 resume input
0 L2 decode drops, 5502 demux drops
24047842719 packets output, 20008578143895 bytes, 6 underruns
0 pause output, 0 resume output
0 output errors, 0 collisions, 1 interface resets
0 late collisions, 0 deferred
0 output decode drops
0 backplane ingress drops, 0 backplane egress drops
0 input reset drops, 0 output reset drops
Queue Stats:
RX[00]: 1208766959 packets, 926456185442 bytes, 0 overrun
Blocks free curr/low: 511/362
RX[01]: 1551973967 packets, 1501253930810 bytes, 0 overrun
Blocks free curr/low: 511/374
RX[02]: 1931978597 packets, 1670552531184 bytes, 0 overrun
Blocks free curr/low: 511/371
RX[03]: 1241778935 packets, 925648184901 bytes, 0 overrun
Blocks free curr/low: 511/369
RX[04]: 1230712038 packets, 874737399119 bytes, 0 overrun
Blocks free curr/low: 511/378
RX[05]: 1447054783 packets, 1219125693143 bytes, 0 overrun
Blocks free curr/low: 511/378
RX[06]: 1151867298 packets, 928050256243 bytes, 0 overrun
Blocks free curr/low: 511/379
RX[07]: 1115430800 packets, 859450874505 bytes, 0 overrun
Blocks free curr/low: 511/358
RX[08]: 1455273561 packets, 1272211337840 bytes, 0 overrun
Blocks free curr/low: 511/380
RX[09]: 1477209984 packets, 1252594444857 bytes, 0 overrun
Blocks free curr/low: 511/373
RX[10]: 3351425533 packets, 3185515891431 bytes, 0 overrun
Blocks free curr/low: 510/360
RX[11]: 1398127364 packets, 1259887768074 bytes, 0 overrun
Blocks free curr/low: 511/375
RX[12]: 1267508932 packets, 956981201246 bytes, 0 overrun
Blocks free curr/low: 511/363
RX[13]: 1114042502 packets, 877773377134 bytes, 0 overrun
Blocks free curr/low: 511/374
RX[14]: 1111532928 packets, 843391217216 bytes, 0 overrun
Blocks free curr/low: 511/376
RX[15]: 1232687523 packets, 939997999897 bytes, 0 overrun
Blocks free curr/low: 511/377
TX[00]: 2011109239 packets, 1347075131113 bytes, 0 underruns
Blocks free curr/low: 510/0
TX[01]: 1419009756 packets, 1247195792867 bytes, 0 underruns
Blocks free curr/low: 511/0
TX[02]: 1795783445 packets, 1671070921226 bytes, 1 underruns
Blocks free curr/low: 511/0
TX[03]: 1270047094 packets, 991784306280 bytes, 0 underruns
Blocks free curr/low: 511/0
TX[04]: 1369743112 packets, 1227023987269 bytes, 1 underruns
Blocks free curr/low: 511/0
TX[05]: 1216049054 packets, 945241285620 bytes, 0 underruns
Blocks free curr/low: 511/0
TX[06]: 1361060675 packets, 1164441035487 bytes, 1 underruns
Blocks free curr/low: 511/0
TX[07]: 1551922480 packets, 1282911320576 bytes, 0 underruns
Blocks free curr/low: 511/0
TX[08]: 1101378267 packets, 849835204652 bytes, 1 underruns
Blocks free curr/low: 511/0
TX[09]: 1430577549 packets, 1066869283026 bytes, 2 underruns
Blocks free curr/low: 511/0
TX[10]: 3123662665 packets, 3164140398130 bytes, 0 underruns
Blocks free curr/low: 511/0
TX[11]: 1134950515 packets, 914836422016 bytes, 0 underruns
Blocks free curr/low: 507/0
TX[12]: 1526688516 packets, 1303632067042 bytes, 0 underruns
Blocks free curr/low: 511/0
TX[13]: 1185904922 packets, 886400970646 bytes, 0 underruns
Blocks free curr/low: 511/0
TX[14]: 1152395327 packets, 900143719737 bytes, 0 underruns
Blocks free curr/low: 511/0
TX[15]: 1397560198 packets, 1045976405239 bytes, 0 underruns
Blocks free curr/low: 511/0
Control Point Interface States:
Interface number is 2
Interface config status is active
Interface state is active
DC1-VPN# sh blocks interface
Memory Pool SIZE LIMIT/MAX LOW CNT GLB:HELD GLB:TOTAL
DMA 9344 17408 0 715 0 8586294
Cache pool statistics:
Queue LIMIT/MAX LOW CNT
Core 0 1024 0 555
Core 1 1024 0 87
Core 2 1024 0 365
Core 3 1024 0 694
Core 4 1024 0 693
Core 5 1024 0 391
Core 6 1024 0 677
Core 7 1024 0 373
Core 8 1024 0 294
Core 9 1024 0 177
Core 10 1024 0 594
Core 11 1024 0 729
Core 12 1024 0 608
Core 13 1024 0 729
Core 14 1024 0 526
Global 1024 0 1024
DC1-VPN# sh traffic
Internal-Data0/0:
received (in 535619.004 secs):
23293408320 packets 19498935728639 bytes
43007 pkts/sec 36404007 bytes/sec
transmitted (in 535619.004 secs):
24053967749 packets 20014013702894 bytes
44002 pkts/sec 37366001 bytes/sec
1 minute input rate 16576 pkts/sec, 15268832 bytes/sec
1 minute output rate 16733 pkts/sec, 15552091 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 14746 pkts/sec, 13027007 bytes/sec
5 minute output rate 14973 pkts/sec, 13367424 bytes/sec
5 minute drop rate, 0 pkts/sec
Internal-Data1/1:
received (in 535646.554 secs):
11828529 packets 3189970802 bytes
6 pkts/sec 5001 bytes/sec
transmitted (in 535646.554 secs):
11782814 packets 1228230626 bytes
5 pkts/sec 2004 bytes/sec
1 minute input rate 9 pkts/sec, 2561 bytes/sec
1 minute output rate 9 pkts/sec, 1013 bytes/sec
1 minute drop rate, 0 pkts/sec
5 minute input rate 6 pkts/sec, 1640 bytes/sec
5 minute output rate 6 pkts/sec, 639 bytes/sec
5 minute drop rate, 0 pkts/sec
If any other information is missing, please tell me what and how to retrieve it. It doesn't seem like i have the possibility to run the 'show module' command.
Thanks in advance
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide