SRX Services Gateway
Reply
Contributor
Hardik Tankaria
Posts: 17
Registered: ‎06-29-2010
0

Packet drop counters in negative !!

Hi Experts,

 

We have two SRX 3400 deployed in cluster mode Release 10.2R3.10

 

Uncommonly issue has been observed, when I apply "show security flow statistics" packet dropped counters on FPC1 is at negative side.

 

Output is as pasted below :

 

SRX1> show security flow statistics
node0:
--------------------------------------------------------------------------

  Flow Statistics of FPC1 PIC0:
    Current sessions: 103804
    Packets forwarded: 0
    Packets dropped: -1849679476
    Fragment packets: 187009630

  Flow Statistics of FPC2 PIC0:
    Current sessions: 208073
    Packets forwarded: 0
    Packets dropped: 434164689
    Fragment packets: 286918268

  Flow Statistics of FPC4 PIC0:
    Current sessions: 207600
    Packets forwarded: 0
    Packets dropped: 419478461
    Fragment packets: 279940560

  Flow Statistics of FPC6 PIC0:
    Current sessions: 209437
    Packets forwarded: 0
    Packets dropped: 445921305
    Fragment packets: 285182090

  Flow Statistics Summary:
    System total valid sessions: 728914
    Packets forwarded: 0
    Packets dropped: -550115021
    Fragment packets: 1039050548

node1:
--------------------------------------------------------------------------

  Flow Statistics of FPC1 PIC0:
    Current sessions: 107685
    Packets forwarded: 0
    Packets dropped: -1809984198
    Fragment packets: 296874156

  Flow Statistics of FPC2 PIC0:
    Current sessions: 215635
    Packets forwarded: 0
    Packets dropped: 495192121
    Fragment packets: 457127338        

  Flow Statistics of FPC4 PIC0:
    Current sessions: 213195
    Packets forwarded: 0
    Packets dropped: 471265571
    Fragment packets: 461359670

  Flow Statistics of FPC6 PIC0:
    Current sessions: 212561
    Packets forwarded: 0
    Packets dropped: 511552389
    Fragment packets: 458510846

  Flow Statistics Summary:
    System total valid sessions: 749076
    Packets forwarded: 0
    Packets dropped: -331974117
    Fragment packets: 1673872010

 

============================================

 

I want to know the reason of this negative increase in packet dropped counters.

 

 

Any help would be highly appreciated.

 

 

Thanks !

 

Best Regards,

Hardik

 

 

Distinguished Expert
Distinguished Expert
pk
Posts: 812
Registered: ‎10-09-2008
0

Re: Packet drop counters in negative !!

Hi

 

If you go to the Problem Report search tool at support center and search for "negative", you

find a dozen of similar PRs (negative counters, etc). However I was unable to find exactly

one that will match your case.

 

So this is a bug, better to open a JTAC case to determine if it is a known or a new one.

Best Regards,
Petr (PK)

Juniper Ambassador, Juniper Networks Certified Instructor,
JNCIE-SEC #98, JNCIE-ENT #393, JNCIE-SP #2253
[Juniper Authorized Education & Support in Russia]
Super Contributor
motd
Posts: 221
Registered: ‎12-16-2008
0

Re: Packet drop counters in negative !!

Looks like a display bug. My guess would be that they are displaying an unsigned integer as a signed one.

Best open a case with jtac to have that fixed, but it looks only cosmetic to me.

Contributor
Hardik Tankaria
Posts: 17
Registered: ‎06-29-2010
0

Re: Packet drop counters in negative !!

Hi folks,

 

I opened a JTAC case, let me see how it goes.

 

 

BR//

Hardik

Contributor
Hardik Tankaria
Posts: 17
Registered: ‎06-29-2010
0

Re: Packet drop counters in negative !!

Hi,

 

It is suspected bug and fix available in 10.2R4 10.3R4 10.4R4 11.1R2 11.1R2.


 

BR//

Hardik

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.