rx_fw_discards - Problem or not?

[rubber_chicken]

Hi,

I'm trying to diagnose whether I've got a problem or not (it is a "perceived problem" and I'm trying to prove either way).

The rx dropped counters on my external interface are incrementing. When investigating further using ethtool -S eth<x> I see that these are all in the rx_fw_discards category.

So this makes sense if this does indeed mean that the firewall as seen the packets and dropped them legitimately. Good - happy there, after all - thats its job.

But, is this the case? Is this actually a problem with the packet and that is why is it being dropped? Is this indicative of another problem? Speed/Duplex/transmission errors/retries etc?

I've had a bit of a hunt around Google/Checkpoint Docs/Checkpoint support site for information on this, but it is pretty scarce, although I might be looking in the wrong places. Have you got any links or recommended reference materials you can point me at?

Cheers