Hello - I am seeing a whole bunch of the below messages in my logs. Can anyone tell my why this is happening and how I can resolve the issue. I have tried tunning the setting below with no luck.
Dec 16 08:55:47.195 WA: %IPS-4-SIGNATURE: Sig:1304 Subsig:0 Sev:25 TCP Session Packet Queue Overflow [23.59.190.106:80 -> 10.0.1.215:54067] VRF:NONE RiskRating:25
Dec 16 09:05:45.212 WA: %IPS-6-OOO_FULL: Out-of-Order reached its maximum queue size! Drop this packet
Cisco IOS Software, C800 Software (C800-UNIVERSALK9-M), Version 15.3(2)T, RELEASE SOFTWARE (fc3)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Thu 28-Mar-13 13:45 by prod_rel_team
ROM: System Bootstrap, Version 15.1(4r)M, RELEASE SOFTWARE (fc1)
parameter-map type ooo global
tcp reassembly timeout 60
tcp reassembly queue length 1024
tcp reassembly memory limit 256000
Signature statistics [process switch:fast switch]
signature 6009:0: packets checked [0:8160] alarmed [0:0] dropped [0:0]
signature 1304:0: packets checked [0:4474] alarmed [0:3544] dropped [0:0]
signature 3653:0: packets checked [0:3] alarmed [0:0] dropped [0:0]
Interfaces configured for ips 1
Session creations since subsystem startup or last reset 5752
Current session counts (estab/half-open/terminating) [22:0:0]
Maxever session counts (estab/half-open/terminating) [179:68:7]
Last session created 00:00:18
Last statistic reset 15:09:08
TCP reassembly statistics
Out-of-order packets dropped 4474
Thanks -
gm
