topic Getting TX-DRP on the interface in General Topics

Getting TX-DRP on the interface

sudhir_mirajkar — Wed, 28 Jun 2023 02:44:03 GMT

HI All,

we are observing high TX-DRP on a firewall interface.

trying to find if this is due to the firewall not able to process this traffic or other end device is not accepting the traffic.

tried to look over the checkpoint site on explanation for the tx drops but could not find any.

anyone has seen this before?

thanks,

Sudhir Mirajkar

Re: Getting TX-DRP on the interface

Chris_Atkinson — Wed, 28 Jun 2023 07:47:14 GMT

Generally how is the performance of the Gateway and which type of appliance is it?

S7PAC - Super Seven Performance Assessment Commands

sk106126:
TX-DRP usually indicates that there is a downstream issue and gateway has to drop the packets as it is unable to put them on the wire fast enough. Increasing the bandwidth through link aggregation (bond) or introducing flow control may be a possible solution to this problem.

Re: Getting TX-DRP on the interface

Timothy_Hall — Wed, 28 Jun 2023 20:43:52 GMT

Those statistics are for a tagged VLAN sub-interface, please provide the output of the following commands for the leading physical interface which should paint a clearer picture:

ifconfig eth3

netstat -ni

ethtool -S eth3

My guess is you have numerous fast interfaces trying to pile traffic into that one slower eth3 interface and it can't keep up.