ON THIS PAGE
Identify and Monitor Internal Drops, Errors, and Exceptions
Learn how to find and monitor internal drops, errors, and exceptions on a Juniper MX204, MX301, MX304, MX10004, or MX10008 router.
When you troubleshoot an issue on an MX204, MX301, MX304, MX10004, or MX10008 router, check drop counters early in the process. Junos OS tracks drops throughout the forwarding pipeline and provides counters for each event.
Interface Errors
The first step is usually to check interface statistics. Use the
extensive option to have the full view.
show interfaces et-0/0/8 extensive
Physical interface: et-0/0/8, Enabled, Physical link is Up
Interface index: 164, SNMP ifIndex: 542, Generation: 202
Link-level type: Ethernet, MTU: 9204, MRU: 9212, Speed: 100Gbps, BPDU Error: None, Loop Detect PDU Error: None, Loopback: Disabled, Source filtering: Disabled, Flow control: Enabled
Device flags : Present Running
Interface Specific flags: Internal: 0x100200
Interface flags: SNMP-Traps Internal: 0x4000
Link flags : 0x2000
CoS queues : 8 supported, 8 maximum usable queues
Schedulers : 0
Hold-times : Up 0 ms, Down 0 ms
Damping : half-life: 0 sec, max-suppress: 0 sec, reuse: 0, suppress: 0, state: unsuppressed
Current address: 14:b3:a1:72:6a:76, Hardware address: 14:b3:a1:72:6a:76
Last flapped : 2026-04-22 23:50:22 PDT (05:54:32 ago)
Statistics last cleared: 2026-04-22 08:26:21 PDT (21:18:33 ago)
Traffic statistics:
Input bytes : 954576 504 bps
Output bytes : 1051974 848 bps
Input packets: 9712 1 pps
Output packets: 10170 1 pps
IPv6 transit statistics:
Input bytes : 0 0 bps
Output bytes : 0 0 bps
Input packets: 0 0 pps
Output packets: 0 0 pps
Label-switched interface (LSI) traffic statistics:
Input bytes : 0 0 bps
Input packets: 0 0 pps
Input errors:
Errors: 0, Drops: 0, Framing errors: 0, Runts: 0, Policed discards: 0, L3 incompletes: 0, L2 channel errors: 0, L2 mismatch timeouts: 0, FIFO errors: 0, Resource errors: 0
Output errors:
Carrier transitions: 1, Errors: 0, Drops: 0, Collisions: 0, Aged packets: 0, FIFO errors: 0, HS link CRC errors: 0, MTU errors: 0, Resource errors: 0
Egress queues: 8 supported, 4 in use
Queue counters: Queued packets Transmitted packets Dropped packets
0 3915 3915 0
1 0 0 0
2 0 0 0
3 6252 6252 0
Queue number: Mapped forwarding classes
0 best-effort
1 expedited-forwarding
2 assured-forwarding
3 network-control
Active alarms : None
Active defects : None
PCS statistics Seconds
Bit errors 0
Errored blocks 0
Ethernet FEC Mode : NONE
FEC Codeword size 0
FEC Codeword rate 0.000
Ethernet FEC statistics Errors
FEC Corrected Errors 0
FEC Uncorrected Errors 0
FEC Corrected Errors Rate 0
FEC Uncorrected Errors Rate 0
MAC statistics: Receive Transmit
Total octets 1099569 1103217
Total packets 9718 10172
Unicast packets 3459 3265
Broadcast packets 2 650
Multicast packets 6257 6257
CRC/Align errors 0 0
FIFO errors 0 0
MAC control frames 0 0
MAC pause frames 0 0
Oversized frames 0
Jabber frames 0
Fragment frames 0
VLAN tagged frames 8944
Code violations 0
Filter statistics:
Input packet count 8970
Input packet rejects 4
Input DA rejects 0
Input SA rejects 0
Output packet count 9335
Output packet pad count 0
Output packet error count 0
CAM destination filters: 0, CAM source filters: 0
PRBS Mode : Disabled
Packet Forwarding Engine configuration:
Destination slot: 0 (0x00)
CoS information:
Direction : Output
CoS transmit queue Bandwidth Buffer Priority Limit
% bps % usec
0 best-effort 95 95000000000 95 0 low none
3 network-control 5 5000000000 5 0 low none
Preclassifier statistics:
Traffic Class Received Packets Transmitted Packets Dropped Packets
real-time 0 0 0
network-control 8761 8761 0
best-effort 955 955 0
MACSec statistics:
Output
Secure Channel Transmitted
Protected Packets : 0
Encrypted Packets : 0
Protected Bytes : 0
Encrypted Bytes : 0
Input
Secure Channel Received
Accepted Packets : 0
Validated Bytes : 0
Decrypted Bytes : 0
Link Degrade :
Link Monitoring : Disable
Interface transmit statistics: Disabled
To identify relevant counters, review the Preclassifier statistics section at the end of the output. This stage occurs early in the ingress pipeline and classifies packets as either network‑control traffic (destined for the Routing Engine or transiting) or best‑effort traffic.
The real-time field is not used and should remain at 0. This classification is performed per packet based on selected Layer 2 through Layer 4 fields. The final determination of whether traffic is destined for the control plane occurs later during the lookup stage. This early classification helps protect control plane traffic during periods of ingress oversubscription.
Preclassifier statistics:
Traffic Class Received Packets Transmitted Packets Dropped Packets
real-time 0 0 0
network-control 8761 8761 0
best-effort 955 955 0
Check Layer 1 and Layer 2 statistics next. Review the following counters:
- PCS drops—Indicate possible optical signal degradation
- FEC uncorrected errors—Identify errors that FEC cannot correct when FEC is enabled
- Ethernet CRC errors—Indicate frame corruption
- MAC pause frames—Indicate congestion
- Oversized frames—Identify frames that exceed the maximum size
- Input DA rejects—Indicate frames with an unexpected destination MAC address or untagged frames received on a tagged interface
Use these counters to identify physical or data link layer issues.
PCS statistics Seconds
Bit errors 0
Errored blocks 0
[...]
Ethernet FEC statistics Errors
FEC Uncorrected Errors 0
FEC Uncorrected Errors Rate 0
MAC statistics: Receive Transmit
[...]
CRC/Align errors 0 0
MAC pause frames 0 0
Oversized frames 0
[...]
Filter statistics:
Input DA rejects 0
Review overall input and output error counters. Focus on the following:
- Input resource errors—Indicate possible resource exhaustion in the ingress lookup engine (high packets per second)
- Output errors—Typically indicate congestion conditions
Depending on the class‑of‑service configuration and traffic profile, some queues might experience tail drop or RED drop. These drops are reflected in the Dropped packets counter.
Input errors:
Errors: 0, Drops: 0, Framing errors: 0, Runts: 0, Policed discards: 0, L3 incompletes: 0, L2 channel errors: 0, L2 mismatch timeouts: 0, FIFO errors: 0, Resource errors: 0
Output errors:
Carrier transitions: 1, Errors: 0, Drops: 0, Collisions: 0, Aged packets: 0, FIFO errors: 0, HS link CRC errors: 0, MTU errors: 0, Resource errors: 0
Egress queues: 8 supported, 4 in use
Queue counters: Queued packets Transmitted packets Dropped packets
0 3915 3915 0
1 0 0 0
2 0 0 0
3 6252 6252 0
Use a command to view per‑queue drop statistics. For each queue, monitor tail drop and RED drop counters in real time, along with queue depth (see Queue-depth bytes).
Under normal conditions, even near line rate, the current queue depth should remain close to 0.To determine if a sustained increase in queue depth is causing congestion, packet buffering, or latency, compare the current queue depth against the maximum configured buffer size, see the following snippet:
show interfaces queue et-0/0/8 egress
Physical interface: et-0/0/8, Enabled, Physical link is Up
Interface index: 164, SNMP ifIndex: 542
Forwarding classes: 16 supported, 4 in use
Egress queues: 8 supported, 4 in use
Queue: 0, Forwarding classes: best-effort
Queued:
Packets : 4430 0 pps
Bytes : 455622 0 bps
Transmitted:
Packets : 4430 0 pps
Bytes : 455622 0 bps
Tail-dropped packets : 0 0 pps
RL-dropped packets : 0 0 pps
RL-dropped bytes : 0 0 bps
RED-dropped packets : 0 0 pps
Low : 0 0 pps
Medium-low : 0 0 pps
Medium-high : 0 0 pps
High : 0 0 pps
RED-dropped bytes : 0 0 bps
Low : 0 0 bps
Medium-low : 0 0 bps
Medium-high : 0 0 bps
High : 0 0 bps
Queue-depth bytes :
Average : 0
Current : 0
Peak : 0
Maximum : 1191182336
[...]
PFE Drops and Exceptions
Drops can also occur during the forwarding process, not only at the interface level. First, check PFE exception counters. The lookup engine marks packets as exceptions, whether they are control plane or transit traffic.
Run the following command multiple times to identify counters that increment. Based on the ingress interface, review the output for the corresponding FPC (see the Slot field) and focus on counters labeled DISC.
show pfe statistics exceptions terse | except "PUNT"
Slot 0
PFE State Invalid
----------------------
sw error DISC( 64) 10 601
unknown family DISC( 73) 23799 2618664
unknown iif DISC( 1) 4 838
PFE State Invalid
----------------------
sw error DISC( 64) 3 184
unknown family DISC( 73) 344979 21875335
unknown iif DISC( 1) 2 646
Routing
----------------------
discard route DISC( 66) 8410 4574973
Use the show pfe statistics traffic fpc <slot> command to view traffic
statistics for a specific FPC. Apply filters to display drop counters only.
You can typically ignore the Normal discard counter, because it represents expected internal drops that do not affect transit traffic.
Review the Packet Forwarding Engine local traffic statistics section for punted traffic errors. These errors occur when packets are sent to the line card CPU or Routing Engine for additional processing. Drops in this section can indicate host path congestion or overload on the internal path to the CPU.
show pfe statistics traffic fpc 0 |match "^Packet|Drop|error|Discard|Input Checksum|Output MTU"
Packet Forwarding Engine traffic statistics:
Packet Forwarding Engine local traffic statistics:
Software input control plane drops : 0
Software input high drops : 0
Software input medium drops : 0
Software input low drops : 0
Software output drops : 0
Hardware input drops : 0
Packet Forwarding Engine local protocol statistics:
Packet Forwarding Engine hardware discard statistics:
Data error : 0
TCP header length error : 0
Normal discard : 8061748281 <<<< Do not take care
Extended discard : 0
Info cell drops : 0
Fabric drops : 0
Packet Forwarding Engine Input IPv4 Header Checksum Error and Output MTU Error statistics:
Input Checksum : 0
Output MTU : 0
Use the show pfe statistics traffic command to view per‑PFE details. Review
the fpc and pfe fields to identify the FPC slot and PFE ID.
The number of output sections varies by line card model. Each section corresponds to an FPC and PFE pair.
show pfe statistics traffic detail fpc 0 |match "^Packet|Drop|error|Discard|Input Checksum|Output MTU"
Use additional CLI commands to analyze drop conditions as needed. The commands described in this section address most common drop scenarios. For advanced troubleshooting, contact JTAC support.