Packet drop counters in negative !!

[Hardik Tankaria]

Hi Experts,

We have two SRX 3400 deployed in cluster mode Release 10.2R3.10

Uncommonly issue has been observed, when I apply "show security flow statistics" packet dropped counters on FPC1 is at negative side.

Output is as pasted below :

SRX1> show security flow statistics
node0:
--------------------------------------------------------------------------

  Flow Statistics of FPC1 PIC0:
    Current sessions: 103804
    Packets forwarded: 0
    Packets dropped: -1849679476
    Fragment packets: 187009630

  Flow Statistics of FPC2 PIC0:
    Current sessions: 208073
    Packets forwarded: 0
    Packets dropped: 434164689
    Fragment packets: 286918268

  Flow Statistics of FPC4 PIC0:
    Current sessions: 207600
    Packets forwarded: 0
    Packets dropped: 419478461
    Fragment packets: 279940560

  Flow Statistics of FPC6 PIC0:
    Current sessions: 209437
    Packets forwarded: 0
    Packets dropped: 445921305
    Fragment packets: 285182090

  Flow Statistics Summary:
    System total valid sessions: 728914
    Packets forwarded: 0
    Packets dropped: -550115021
    Fragment packets: 1039050548

node1:
--------------------------------------------------------------------------

  Flow Statistics of FPC1 PIC0:
    Current sessions: 107685
    Packets forwarded: 0
    Packets dropped: -1809984198
    Fragment packets: 296874156

  Flow Statistics of FPC2 PIC0:
    Current sessions: 215635
    Packets forwarded: 0
    Packets dropped: 495192121
    Fragment packets: 457127338        

  Flow Statistics of FPC4 PIC0:
    Current sessions: 213195
    Packets forwarded: 0
    Packets dropped: 471265571
    Fragment packets: 461359670

  Flow Statistics of FPC6 PIC0:
    Current sessions: 212561
    Packets forwarded: 0
    Packets dropped: 511552389
    Fragment packets: 458510846

  Flow Statistics Summary:
    System total valid sessions: 749076
    Packets forwarded: 0
    Packets dropped: -331974117
    Fragment packets: 1673872010

============================================

I want to know the reason of this negative increase in packet dropped counters.

Any help would be highly appreciated.

Thanks !

Best Regards,

Hardik

[pk]

Hi

If you go to the Problem Report search tool at support center and search for "negative", you

find a dozen of similar PRs (negative counters, etc). However I was unable to find exactly

one that will match your case.

So this is a bug, better to open a JTAC case to determine if it is a known or a new one.

[motd]

Looks like a display bug. My guess would be that they are displaying an unsigned integer as a signed one.

Best open a case with jtac to have that fixed, but it looks only cosmetic to me.

[Hardik Tankaria]

Hi folks,

I opened a JTAC case, let me see how it goes.

BR//

Hardik

[Hardik Tankaria]

Hi,

It is suspected bug and fix available in 10.2R4 10.3R4 10.4R4 11.1R2 11.1R2.


BR//

Hardik