Interface Counter "receive incoming errors" Incrementing
22941
Created On 12/14/21 11:30 AM - Last Modified 04/07/22 19:18 PM
Symptom
- "Receive incoming errors" counter increments in port statistics:
Hardware interface counters read from CPU: -------------------------------------------------------------------------------- bytes received 3940489261880 bytes transmitted 5132423471269 packets received 2101567189 packets transmitted 2537857620 receive incoming errors 270410 receive discarded 0 receive errors 117415 packets dropped 0 -------------------------------------------------------------------------------- > show interface ethernet1/1 | match errors receive incoming errors 270410 receive errors 117419 > show interface ethernet1/1 | match errors receive incoming errors 270577 receive errors 117643
- The counter "rcv_fifo_overrun" also increments:
> show system state filter sys.s1.p1.detail | match fifo
sys.s1.p1.detail: { 'pkts1024tomax_octets': 0x143a89288, 'pkts128to255_octets': 0xe0d1eada, 'pkts256to511_octets': 0x327bed35, 'pkts512to1023_octets': 0x1c5c06ca, 'pkts64_octets': 0x68e22d0e, 'pkts65to127_octets': 0x3890c2de, 'rcv_fifo_overrun': 0x42072, }
> show system state filter sys.s1.p1.detail | match fifo
sys.s1.p1.detail: { 'pkts1024tomax_octets': 0x143c4720f, 'pkts128to255_octets': 0xe0ea87af, 'pkts256to511_octets': 0x3281c784, 'pkts512to1023_octets': 0x1c5ebc47, 'pkts64_octets': 0x68ec11d7, 'pkts65to127_octets': 0x3895aaa4, 'rcv_fifo_overrun': 0x4208f, }
Environment
- Firewall
- Panorama
- PAN-OS
- A switch connected to the Firewall or Panorama
Cause
- An increase of the "rcv_fifo_overrun" counter might be a sign of a connected device not honoring flow control.
- Without flow control any wire-speed fluctuations (bursts/micro-bursts, transient utilization spikes, broadcast\mcast storms for example) may increment the "received incoming errors" and "rcv_fifo_overrun" counters.
Resolution
Flow control must be configured on the switch connected to the PAN-OS device. Please confirm with the switch vendor how to configure this feature.
Additional Information
If the "receive errors" counter is increasing instead of "receive incoming errors", see The Difference Between Receive Errors for Hardware and Logical Interface Counters.