STAT_EHP1_INCR_FRAG : what the purpose of this counter (np6xlite) ?

Hi @gmozgala 

I think it's related to the statistics of dropped Fragment headers. You can repeat the test multiple times to observe how significant the changes are

Bill

Hi gmozgala,

Run the full command (including the 0) multiple times and observe the output carefully to determine if any packets are being dropped by the NP6 or NP6XLite process:

diagnose npu np6xlite dce 0

For example, the 'drop_ihp1_pktchk' counter refers to the number of dropped IP packets at the IHP1 level. This counter indicates the quantity of IP packets that were not successfully processed and were therefore dropped at this specific processing level within the NP6 processor.

Please refer to the document below for more information:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Increasing-error-counters-on-DROP-IHP1/ta-p/372271

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards,
Aman