Palo Alto Networks Knowledgebase: The Difference Between Receive Errors for Hardware and Logical Interface Counters
The Difference Between Receive Errors for Hardware and Logical Interface Counters
Created On 09/25/18 19:22 PM - Last Updated 02/08/19 00:01 AM
Under Hardware interface counters read from CPU:
Receive Errors show the count of any receive errors received on the physical (hardware) interface. They are primarily L2-L4 parsing/header errors and although the counter mentions "hardware," they are predominantly logical errors (CRC, framing or other hardware-related errors are NOT counted here).
Most common types of events that cause these errors are
incorrect length of VLAN tag
unexpected VLAN tag
unsupported L2 protocol
incorrect IP checksum
TCP/UDP packet checksum error
TCP/UDP port 0
Invalid TCP flag, etc.
Very often, a constant increase of this counter is caused by STP/LLDP/UDLD frames arriving on a L3 firewall port (these protocols are not supported on L3 ports and are legitimately dropped and counted as "Receive errors").
Under Logical interface counter read from CPU:
Receive Errors show only the count of errors seen on an HA2 interface. This counter may increment only if the interface is configured as an HA2 High Availability interface.
Use the command, show interface ethernet1/x, to display the counters. The following example shows the relevant parts of the command output: