Help with Pix drop rate message

Posted on 2009-04-29
Last Modified: 2012-05-06
I've been trying to decipher the following messages but I'm not having much luck. I see quite a few of these messages. Is this message saying that the pix is dropping these packets or is it just an alert? Or does this have something to do with my connection limits/timers?

%PIX-4-733100: [] drop rate-2 exceeded. Current burst rate is 8 per second, max configured rate is 8; Current average rate is 5 per second, max configured rate is 4; Cumulative total count is 36805
Question by:Jelonet
    LVL 15

    Expert Comment

    It is both saying that it's dropping these packets and making an alert of that.  The log entry have to do with your settings for threat-detection.

    Author Comment

    So, the drop rate 2-exceeded means the pix dropped 2 packets?
    LVL 15

    Accepted Solution

    No, it means the PIX has 2 rates and it passed the 2nd rate.  As it writes in the log current burst rate is 8 per second, and current average is 5.  I think it's the average that's rate-2.

    So on average it's dropping 5 packets per second, and it's configured for 4.

    You can check commands such as:

    sh threat rate
    sh threat statistics

    Author Closing Comment

    Thank you

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Join & Write a Comment

    Have you experienced traffic destined through a Cisco ASA firewall disappears and you do not know if the traffic stops in the firewall or somewhere else? The solution is the capture feature. This feature was released in 6.2(1) and works in all firew…
    I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now