- Products
- Learn
- Local User Groups
- Partners
- More
The State of Ransomware Q1 2026
Key Trends and Their Impact
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
CheckMates Go:
CheckMates Fest
This first from netstat -ni show RX-DRP for both
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth3-01 1500 0 184241747707 0 111870671 0 103782379871 0 0 0 ABMRU
eth3-02 1500 0 89235490191 0 21345804 0 148776069625 0 6194 0 ABMRU
So, for me still valid point increase the rx/tx buffer from nic eth3-02, simple to fix, and will bring a kickly improvement, after that will be need take a time to see if the RX-DROP will decrease, and follow the investigation
One important point on interface eth3-02 is to adjust the RX/TX ring buffers to the maximum supported value (4096). This usually helps reduce RX-DROP counters and improves RX/TX performance on the interface:
set interface eth3-02 rx-ringsize 4096
set interface eth3-02 tx-ringsize 4096
save config
Normally, no reboot or cpstop; cpstart is required for this change to take effect.
However, if possible, performing a reboot later can be a good practice.
Reference:
How to increase the size of a ring buffer on Gaia OS for Intel NIC and Broadcom NIC
https://support.checkpoint.com/results/sk/sk42181
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY