Guest

Preview Tool

Cisco Bug: CSCvu71568 - 2100: incoming packets dropped due to "no buffer" and outgoing packets leading to block depletion

Last Modified

Aug 06, 2020

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

9.8.3.11

Description (partial)

Symptom:
All incoming and outgoing traffic might stop passing through a Firepower 2100 appliance. The system might show block depletion like symptoms too:

------------------ show blocks ------------------

  SIZE    MAX    LOW    CNT
     0   2700   2654   2700
     4    200    200    200
    80   1300    912   1264
   256  20000      0      0  <<<<<<<<<<
  1550   7486   6279   6280
  2048    600    598    600
  2560    900    896    900
  4096    100     98    100
  8192    100     98    100
  9472  10000   2044   6935
 16384    100     98    100
 65536     16     14     16

Also, all incoming traffic might get dropped due to no buffers on the internal-data interface:

Interface Internal-Data0/1 "", is up, line protocol is up
Hardware is , BW 10000 Mbps, DLY 10 usec
(Unknown), (Unknown)
Input flow control is unsupported, output flow control is unsupported
MAC address 000f.b748.4800, MTU not set
IP address unassigned
38359 packets input, 3939770 bytes, 38359 no buffer.  <<<<<<<<<<

Conditions:
ASA or FTD installed on Firepower 2100.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.