BugZero | Cisco BugID CSCwa43311 - Snort blocking and dropping packet, with bigger si...

Cisco - Defect ID: CSCwa43311

Snort blocking and dropping packet, with bigger size(1G) file download

Cisco - Defect ID: CSCwa43311

Snort blocking and dropping packet, with bigger size(1G) file download

Last updated on April 2nd, 2025

BugZero Risk Score
6.1 Medium

Overall: 6.1

Severity: 6.4

Lifecycle: 9.1

Popularity: 4.6

What is the BugZero Risk Score?

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Bug Details

Description

Symptom

Large file downloads and may terminate due to few packets being dropped in snort

Conditions

Large file downloads ( 1G or more)

Workaround

Disable "packet-decode-optimization" from the FTD CLI OR In the network analysis policy set the following configuration for stream : queue_limit = { max_bytes = 0, max_segments = 0 }

Further Problem Description

Change history

2025-03-27 Added: 9.10.1, 9.10.1.10, 9.10.1.11, 9.10.1.17, 9.10.1.2, 9.10.1.22, 9.10.1.27, 9.10.1.30, 9.10.1.32, 9.10.1.37, 9.10.1.40, 9.10.1.42, 9.10.1.44, 9.10.1.7, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.12, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.4, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.2, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.4, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.12.4.67, 9.12.4.7, 9.12.4.8, 9.13.1, 9.13.1.10, 9.13.1.12, 9.13.1.13, 9.13.1.16, 9.13.1.19, 9.13.1.2, 9.13.1.21, 9.13.1.7, 9.14.1, 9.14.1.10, 9.14.1.15, 9.14.1.19, 9.14.1.30, 9.14.1.6, 9.14.2, 9.14.2.13, 9.14.2.15, 9.14.2.4, 9.14.2.8, 9.14.3, 9.14.3.1, 9.14.3.11, 9.14.3.13, 9.14.3.15, 9.14.3.18, 9.14.3.9, 9.14.4, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.6, 9.14.4.7, 9.15.1, 9.15.1.1, 9.15.1.10, 9.15.1.15, 9.15.1.16, 9.15.1.17, 9.15.1.21, 9.15.1.7, 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.11, 9.16.2.13, 9.16.2.14, 9.16.2.3, 9.16.2.7, 9.16.3, 9.16.3.3, 9.17.1, 9.17.1.7, 9.17.1.9, 9.9.2, 9.9.2.1, 9.9.2.14, 9.9.2.18, 9.9.2.235, 9.9.2.25, 9.9.2.27, 9.9.2.32, 9.9.2.36, 9.9.2.40, 9.9.2.47, 9.9.2.50, 9.9.2.52, 9.9.2.56, 9.9.2.59, 9.9.2.61, 9.9.2.66, 9.9.2.67, 9.9.2.74, 9.9.2.80, 9.9.2.83, 9.9.2.85, 9.9.2.9

Links

Original Vendor Announcement

Relevant Products

Click on a version to see all relevant bugs

Affected versions:9.10.1, 9.10.1.10, 9.10.1.11, 9.10.1.17, 9.10.1.2, 9.10.1.22, 9.10.1.27, 9.10.1.30, 9.10.1.32, 9.10.1.37, 9.10.1.40, 9.10.1.42, 9.10.1.44, 9.10.1.7, 9.12.1, 9.12.1.2, 9.12.1.3, 9.12.2, 9.12.2.1, 9.12.2.4, 9.12.2.5, 9.12.2.9, 9.12.3, 9.12.3.12, 9.12.3.2, 9.12.3.7, 9.12.3.9, 9.12.4, 9.12.4.10, 9.12.4.13, 9.12.4.18, 9.12.4.2, 9.12.4.24, 9.12.4.26, 9.12.4.29, 9.12.4.30, 9.12.4.35, 9.12.4.37, 9.12.4.38, 9.12.4.39, 9.12.4.4, 9.12.4.40, 9.12.4.41, 9.12.4.47, 9.12.4.48, 9.12.4.50, 9.12.4.52, 9.12.4.54, 9.12.4.55, 9.12.4.56, 9.12.4.58, 9.12.4.62, 9.12.4.65, 9.12.4.67, 9.12.4.7, 9.12.4.8, 9.13.1, 9.13.1.10, 9.13.1.12, 9.13.1.13, 9.13.1.16, 9.13.1.19, 9.13.1.2, 9.13.1.21, 9.13.1.7, 9.14.1, 9.14.1.10, 9.14.1.15, 9.14.1.19, 9.14.1.30, 9.14.1.6, 9.14.2, 9.14.2.13, 9.14.2.15, 9.14.2.4, 9.14.2.8, 9.14.3, 9.14.3.1, 9.14.3.11, 9.14.3.13, 9.14.3.15, 9.14.3.18, 9.14.3.9, 9.14.4, 9.14.4.12, 9.14.4.13, 9.14.4.14, 9.14.4.15, 9.14.4.17, 9.14.4.6, 9.14.4.7, 9.15.1, 9.15.1.1, 9.15.1.10, 9.15.1.15, 9.15.1.16, 9.15.1.17, 9.15.1.21, 9.15.1.7, 9.16.1, 9.16.1.28, 9.16.2, 9.16.2.11, 9.16.2.13, 9.16.2.14, 9.16.2.3, 9.16.2.7, 9.16.3, 9.16.3.3, 9.17.1, 9.17.1.7, 9.17.1.9, 9.9.2, 9.9.2.1, 9.9.2.14, 9.9.2.18, 9.9.2.235, 9.9.2.25, 9.9.2.27, 9.9.2.32, 9.9.2.36, 9.9.2.40, 9.9.2.47, 9.9.2.50, 9.9.2.52, 9.9.2.56, 9.9.2.59, 9.9.2.61, 9.9.2.66, 9.9.2.67, 9.9.2.74, 9.9.2.80, 9.9.2.83, 9.9.2.85, 9.9.2.9

Fixed versions: No known fixed versions

Relevant Products

Click on a version to see all relevant bugs

Fixed versions: No known fixed versions

Top Cisco Defects by Risk Score

9.65Defect ID: CSCwd45843
Auth Step latency for policy evaluation due to Garbage Collection activity.
9.65Defect ID: CSCwa92734
CUBE DTMF interworking fails from rtp-nte to OOB SIP methods
9.65Defect ID: CSCwj45822
Cisco ASA and FTD Software Remote Access VPN Brute Force Denial of Service Vulnerability
9.65Defect ID: CSCvo03458
PKI "revocation check crl none" does not fallback if CRL not reachable
9.65Defect ID: CSCvq05584
Cisco IOS and IOS XE Software Tcl Arbitrary Code Execution Vulnerability

Cisco Integration

Learn more about where this data comes from

Cisco Integration

Learn more

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

Learn more

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Learn more

Ready to prevent the next vendor outage?

Get a demo

OPERATIONAL DEFECT DATABASE

Cisco - Defect ID: CSCwa43311

Snort blocking and dropping packet, with bigger size(1G) file download

Cisco - Defect ID: CSCwa43311

Snort blocking and dropping packet, with bigger size(1G) file download

Last updated on April 2nd, 2025

BugZero Risk Score6.1 Medium

Bug Details

Symptom

Conditions

Workaround

Further Problem Description

Links

Top Cisco Defects by Risk Score

Ready to prevent the next vendor outage?

BugZero Risk Score
6.1 Medium