cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
127
Views
0
Helpful
0
Replies

Firepower 1150 Interface Internal Data 0/0 overrun errors rising

Strux
Level 1
Level 1

Hi,

We have 2 DC's, each with their own Firepower 1150 running ASA software v9.20(3)7.

In DC1 we see interface Internal Data 0/0 (overrun) errors rising. After reading up on several posts here, on reddit and other places, i understand that interface is for moving the traffic between internal modules. I also understand that the errors could be due to oversubscription, just like the following link describes:

https://community.cisco.com/t5/network-security/errors-in-interface-internal-data0-0/td-p/2163736

https://community.cisco.com/t5/network-security/discarded-incoming-packets-on-internal-data0-1/td-p/2202281

I'm not looking for a description, but a solution.

According to my monitoring service, the device is running at 16% Memory and 10% CPU on average, the last 30 days.

  • How can i make sure it is because the interface is overrun or the buffer is full?
  • Can i change the size of the buffer?
  • What commands can i run to know more?
  • What other considerations should i make?

If traffic is dropped, it is of course bad and something we need to take a look on. I am relatively new in the networking area and there is a lot to learn and understand. I'm not sure how relevant these command outputs are:

 

 

DC1-VPN# sh int detail | b Internal
Interface Internal-Data0/0 "", is up, line protocol is up
  Hardware is x550em_kr rev11, BW 10000 Mbps, DLY 10 usec
        (Full-duplex), (10000 Mbps)
        Input flow control is on, output flow control is off
        MAC address 00a0.c900.0002, MTU not set
        IP address unassigned
        23287371611 packets input, 19493628190957 bytes, 0 no buffer
        Received 74190973 broadcasts, 0 runts, 0 giants
        1287449 input errors, 0 CRC, 0 frame, 1287449 overrun, 0 ignored, 0 abort
        0 pause input, 0 resume input
        0 L2 decode drops, 5502 demux drops
        24047842719 packets output, 20008578143895 bytes, 6 underruns
        0 pause output, 0 resume output
        0 output errors, 0 collisions, 1 interface resets
        0 late collisions, 0 deferred
        0 output decode drops
        0 backplane ingress drops, 0 backplane egress drops
        0 input reset drops, 0 output reset drops
        Queue Stats:
          RX[00]: 1208766959 packets, 926456185442 bytes, 0 overrun
                  Blocks free curr/low: 511/362
          RX[01]: 1551973967 packets, 1501253930810 bytes, 0 overrun
                  Blocks free curr/low: 511/374
          RX[02]: 1931978597 packets, 1670552531184 bytes, 0 overrun
                  Blocks free curr/low: 511/371
          RX[03]: 1241778935 packets, 925648184901 bytes, 0 overrun
                  Blocks free curr/low: 511/369
          RX[04]: 1230712038 packets, 874737399119 bytes, 0 overrun
                  Blocks free curr/low: 511/378
          RX[05]: 1447054783 packets, 1219125693143 bytes, 0 overrun
                  Blocks free curr/low: 511/378
          RX[06]: 1151867298 packets, 928050256243 bytes, 0 overrun
                  Blocks free curr/low: 511/379
          RX[07]: 1115430800 packets, 859450874505 bytes, 0 overrun
                  Blocks free curr/low: 511/358
          RX[08]: 1455273561 packets, 1272211337840 bytes, 0 overrun
                  Blocks free curr/low: 511/380
          RX[09]: 1477209984 packets, 1252594444857 bytes, 0 overrun
                  Blocks free curr/low: 511/373
          RX[10]: 3351425533 packets, 3185515891431 bytes, 0 overrun
                  Blocks free curr/low: 510/360
          RX[11]: 1398127364 packets, 1259887768074 bytes, 0 overrun
                  Blocks free curr/low: 511/375
          RX[12]: 1267508932 packets, 956981201246 bytes, 0 overrun
                  Blocks free curr/low: 511/363
          RX[13]: 1114042502 packets, 877773377134 bytes, 0 overrun
                  Blocks free curr/low: 511/374
          RX[14]: 1111532928 packets, 843391217216 bytes, 0 overrun
                  Blocks free curr/low: 511/376
          RX[15]: 1232687523 packets, 939997999897 bytes, 0 overrun
                  Blocks free curr/low: 511/377
          TX[00]: 2011109239 packets, 1347075131113 bytes, 0 underruns
                  Blocks free curr/low: 510/0
          TX[01]: 1419009756 packets, 1247195792867 bytes, 0 underruns
                  Blocks free curr/low: 511/0
          TX[02]: 1795783445 packets, 1671070921226 bytes, 1 underruns
                  Blocks free curr/low: 511/0
          TX[03]: 1270047094 packets, 991784306280 bytes, 0 underruns
                  Blocks free curr/low: 511/0
          TX[04]: 1369743112 packets, 1227023987269 bytes, 1 underruns
                  Blocks free curr/low: 511/0
          TX[05]: 1216049054 packets, 945241285620 bytes, 0 underruns
                  Blocks free curr/low: 511/0
          TX[06]: 1361060675 packets, 1164441035487 bytes, 1 underruns
                  Blocks free curr/low: 511/0
          TX[07]: 1551922480 packets, 1282911320576 bytes, 0 underruns
                  Blocks free curr/low: 511/0
          TX[08]: 1101378267 packets, 849835204652 bytes, 1 underruns
                  Blocks free curr/low: 511/0
          TX[09]: 1430577549 packets, 1066869283026 bytes, 2 underruns
                  Blocks free curr/low: 511/0
          TX[10]: 3123662665 packets, 3164140398130 bytes, 0 underruns
                  Blocks free curr/low: 511/0
          TX[11]: 1134950515 packets, 914836422016 bytes, 0 underruns
                  Blocks free curr/low: 507/0
          TX[12]: 1526688516 packets, 1303632067042 bytes, 0 underruns
                  Blocks free curr/low: 511/0
          TX[13]: 1185904922 packets, 886400970646 bytes, 0 underruns
                  Blocks free curr/low: 511/0
          TX[14]: 1152395327 packets, 900143719737 bytes, 0 underruns
                  Blocks free curr/low: 511/0
          TX[15]: 1397560198 packets, 1045976405239 bytes, 0 underruns
                  Blocks free curr/low: 511/0
  Control Point Interface States:
        Interface number is 2
        Interface config status is active
        Interface state is active
DC1-VPN# sh blocks interface
 Memory Pool  SIZE  LIMIT/MAX     LOW     CNT  GLB:HELD     GLB:TOTAL
       DMA    9344      17408       0     715         0       8586294
   Cache pool statistics:
    Queue          LIMIT/MAX     LOW     CNT
    Core 0              1024       0     555
    Core 1              1024       0      87
    Core 2              1024       0     365
    Core 3              1024       0     694
    Core 4              1024       0     693
    Core 5              1024       0     391
    Core 6              1024       0     677
    Core 7              1024       0     373
    Core 8              1024       0     294
    Core 9              1024       0     177
    Core 10             1024       0     594
    Core 11             1024       0     729
    Core 12             1024       0     608
    Core 13             1024       0     729
    Core 14             1024       0     526
    Global              1024       0    1024
DC1-VPN# sh traffic
Internal-Data0/0:
        received (in 535619.004 secs):
                23293408320 packets     19498935728639 bytes
                43007 pkts/sec  36404007 bytes/sec
        transmitted (in 535619.004 secs):
                24053967749 packets     20014013702894 bytes
                44002 pkts/sec  37366001 bytes/sec
      1 minute input rate 16576 pkts/sec,  15268832 bytes/sec
      1 minute output rate 16733 pkts/sec,  15552091 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 14746 pkts/sec,  13027007 bytes/sec
      5 minute output rate 14973 pkts/sec,  13367424 bytes/sec
      5 minute drop rate, 0 pkts/sec
 
Internal-Data1/1:
        received (in 535646.554 secs):
                11828529 packets        3189970802 bytes
                6 pkts/sec      5001 bytes/sec
        transmitted (in 535646.554 secs):
                11782814 packets        1228230626 bytes
                5 pkts/sec      2004 bytes/sec
      1 minute input rate 9 pkts/sec,  2561 bytes/sec
      1 minute output rate 9 pkts/sec,  1013 bytes/sec
      1 minute drop rate, 0 pkts/sec
      5 minute input rate 6 pkts/sec,  1640 bytes/sec
      5 minute output rate 6 pkts/sec,  639 bytes/sec
      5 minute drop rate, 0 pkts/sec

 

 

 If any other information is missing, please tell me what and how to retrieve it. It doesn't seem like i have the possibility to run the 'show module' command.

Thanks in advance

0 Replies 0
Review Cisco Networking for a $25 gift card