Getting TX-DRP on the interface

[sudhir_mirajkar]

HI All,

we are observing high TX-DRP on a firewall interface.

trying to find if this is due to the firewall not able to process this traffic or other end device is not accepting the traffic.

tried to look over the checkpoint site on explanation for the tx drops but could not find any.

anyone has seen this before?

thanks,

Sudhir Mirajkar

[Chris_Atkinson]

Generally how is the performance of the Gateway and which type of appliance is it?

S7PAC - Super Seven Performance Assessment Commands

sk106126:
TX-DRP usually indicates that there is a downstream issue and gateway has to drop the packets as it is unable to put them on the wire fast enough. Increasing the bandwidth through link aggregation (bond) or introducing flow control may be a possible solution to this problem.

[Timothy_Hall]

Those statistics are for a tagged VLAN sub-interface, please provide the output of the following commands for the leading physical interface which should paint a clearer picture:

ifconfig eth3

netstat -ni

ethtool -S eth3

My guess is you have numerous fast interfaces trying to pile traffic into that one slower eth3 interface and it can't keep up.