IPSec error

From: cciemaster (cciemaster@inter7.jp)
Date: Sun Apr 13 2008 - 11:28:37 ART


Hello folks

I'd like to know what following counter means and what's the impact.
$B"#(B ppq full errors
$B"#(B pkts dropped
 
Recently, the performance issue was reported from the clients via this router.
I need to find the cause of the issue. I guess this counter is related to the
isssue.

Best regards!

------------------ show crypto engine accelerator statistic ------------------

Device: AIM-VPN/EPII-PLUS
Location: AIM Slot: 0
Virtual Private Network (VPN) Module in slot : 0
        Statistics for Hardware VPN Module since the last clear
         of counters 4294967 seconds ago
    17192085429 packets in 17192085429 packets out
  7794428748396 bytes in 7688355079523 bytes out
           4002 paks/sec in 4002 paks/sec out
          14518 Kbits/sec in 14320 Kbits/sec out
     3603456292 packets decrypted 703727250 packets encrypted
  2594117036936 bytes before decrypt 5094238043163 bytes encrypted
  2068649537580 bytes decrypted 5725779211464 bytes after encrypt
              0 packets decompressed 0 packets compressed
              0 bytes before decomp 0 bytes before comp
              0 bytes after decomp 0 bytes after comp
              0 packets bypass decompr 0 packets bypass compres
              0 bytes bypass decompres 0 bytes bypass compressi
              0 packets not decompress 0 packets not compressed
              0 bytes not decompressed 0 bytes not compressed
          1.0:1 compression ratio 1.0:1 overall
        1463768 commands out 1463768 commands acknowledged
        Last 5 minutes:
        1037133 packets in 1037133 packets out
           3457 paks/sec in 3457 paks/sec out
       15478656 bits/sec in 15189942 bits/sec out
       65613106 bytes decrypted 467287554 bytes encrypted
        1773327 Kbits/sec decrypted 12629393 Kbits/sec encrypted
          1.0:1 compression ratio 1.0:1 overall

Errors:
   ppq full errors : 188980 ppq rx errors : 0
   cmdq full errors : 0 cmdq rx errors : 0
   ppq down errors : 0 cmdq down errors : 0
   no buffer : 0 replay errors : 0
   dest overflow : 0 authentication errors : 0
   Other error : 0 Raw Input Underrun : 0
   IPSEC Unsupported Option: 0 IPV4 Header Length : 0
   ESP Pad Length : 0 IPSEC Decompression : 0
   AH ESP seq mismatch : 0 AH Header Length : 0
   AH ICV Incorrect : 0 IPCOMP CPI Mismatch : 0
   IPSEC ESP Modulo : 0 Unexpected IPV6 Extensio: 0
   Unexpected Protocol : 0 Dest Buf overflow : 0
   IPSEC Pkt is fragment : 0 IPSEC Pkt src count : 0
   Invalid IP Version : 0 Unwrappable : 0
   PPTP Duplicate packet : 0 PPTP Exceed max missed p: 0
   RNG self test fail : 0 DF Bit set : 0
   Hash Miscompare : 0 Unwrappable object : 0
   Missing attribute : 0 Invalid attrribute value: 0
   Bad Attribute : 0 Verification Fail : 0
   Decrypt Failure : 0 Invalid Packet : 0
   Invalid Key : 0 Input Overrun : 0
   Input Underrun : 0 Output buffer overrun : 0
   Bad handle value : 0 Invalid parameter : 0
   Bad function code : 0 Out of handles : 0
   Access denied : 0 Out of memory : 0
   NR overflow : 0 pkts dropped : 188980

Warnings:
   sessions_expired : 0 packets_fragmented : 0
           general: : 0

HSP details:
   hsp_operations : 1754997 hsp_sessions : 30

Pass the CCIE in six weeks, Guaranteed!
http://www.certscience.com/CCIE



This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:50 ART