To check for CRC errors across the interfaces on a Palo Alto Networks device, run the following CLI command:
> show system state filter sys.s1.* | match crc
If there are any CRC errors on an interface, the "bad_crc" counter will appear in the output. The following sample output shows that the s1.p6 (ethernet1/6) interface experienced bad_crc:
sys.s1.p6.detail: {'bad crc': 0x6c1, ...
If the command does not return an output, none of the interfaces experienced bad_crc errors.