SecurID® Knowledge Base
Find answers to your questions and identify resolutions for known issues with knowledge base articles written by SecurID experts.
Article Number
000044246
Applies To
Authentication Manager 8.x
Issue
ifconfig or netstat -i commands show dropped RX packets
Image description
Image descriptionCause
Beginning with kernel 2.6.37, it has been changed the meaning of dropped packet count. Before, dropped packets was most likely due to an error. Now, the rx_dropped counter shows statistics for dropped frames because of:
If any frames meet those conditions, they are dropped before the protocol stack and the rx_dropped counter is incremented.
- Softnet backlog full -- (Measured from /proc/net/softnet_stat)
- Bad / Unintended VLAN tags
- Unknown / Unregistered protocols
- IPv6 frames when the server is not configured for IPv6
If any frames meet those conditions, they are dropped before the protocol stack and the rx_dropped counter is incremented.
Resolution
Working as designed
Notes
In order to check the packet drops run tcpdump -i eth0 to check if there is unintended VLAN tags or unknown protocols.
In this article
