22.05.2013 21:01, Phil Mayers wrote: > How can I determine what the dropped packets are, and why they're > being dropped? "show interfaces extensive" and check out "Flow error statistics (Packets dropped due to):" Another place to look at: "show security screen statistics zone/iface."