[j-nsp] SRX 3600 dropped packets - how to debug?

[Pavel Lunin]

27.05.2013 13:44, Phil Mayers wrote:
>
>> "show interfaces extensive" and check out "Flow error statistics
>> (Packets dropped due to):"
>
> Nothing in there corresponding to the numbers/rates I'm seeing on the
> "show security flow statistics"
If users are complaining, try to understand what exactly they have
problems with. Figure out a particular pattern for possibly dropped
packets (like s/d addresses, etc) and catch it with "security flow
traceoption + packet-filter". Most probably you'll see the reason of a
drop there.