a small question about understanding network statistics (CLI)

Question

on a sophos firewall (e.g. xgs136) I can view the interface statistics via the CLI. (command: show network interfaces) 
 At the output I notice that there are many dropped packets at RX state (receive).(LAN Interface) 
 Port1 Zonetype:LAN MAC Address:XX:XX:XX:XX:XX MTU:1500 IPv6 Addr(s): XXXXX::XXXXX:XXXXXX:XXXXX:1/64 (link-local) Speed:1000Mb/s Full Duplex Auto Negotiation:yes UP BROADCAST RUNNING SLAVE MULTICAST RX State: packets:2682687049 bytes:531478369640 (494.9 GiB) errors:0 dropped:62795887 overruns:0 frame:0 TX State: packets:3826280005 bytes:3010216377751 (2.7 TiB) errors:0 dropped:0 overruns:0 carrier:0 
 Does this statistic include the dropped packets that were blocked due to the firewall rules? 
 What period does this statistic cover and can I reset it via cli without impact? 
 many thanks for a hint 
 Rgd, 
 Tom

LuCar Toni · Answer

Basically this is a ifconfig linux basic. All the descriptions of this apply from ifconfig. 
 This is not SFOS related. Instead the Kernel dropped them on a interface level. It is pretty hard to find out, what is the reason behind this: https://unix.stackexchange.com/questions/205141/what-exactly-is-an-ifconfig-dropped-rx-packet 
 By the way: it seems to be much, but it is only 2.7% of your traffic is dropped. This could be an device in front of the firewall, which floods the firewall with broken packets.

a small question about understanding network statistics (CLI)

Top Replies