MTU Size on Ingress to ASA5540

[jjabbott]

Good Afternoon,

I am wondeirng if anyone can help.  I have a ASA5540 firewall set-up with an interface MTU of 1500.  

I suspect that we are recieving packets with a larger MTU but have not found an easy way of confirming this.   Does anyone know if there is a command that can be run on the firewall to display the MTU packet size being recieved on an interface?

We are also running Solar Winds so could query an OID if such a variable exists.

Any help would really be appreciated, Regards James.

[rizwanr74]

Hi James.

try this command.

show asp drop

look for a value "tcp-seq-past-win"

Cisco reference link.

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/s2.html

Thanks

Rizwan Rafeek