That is very odd.
Do the packets share same IP ID number? ( you have to expand the IP header and check)
snoop runs between IP and NIC driver.
Do you have ipfilter enabled that could be a factor ?
# ipf -V
Does interface kstat statistics show anything abnormal - like no transmit buffers ?
# kstat -pc net | grep noxmtbuf
Hi Steve !
Thank you very much for your answer !
Yes, the packets have the same ID number.
Very useful to know snoops runs before the driver. That points directly to the kernel.
ipf: IP Filter: v4.1.9 (592)
Kernel: IP Filter: v4.1.9
Log Flags: 0 = none set
Default: pass all, Logging: available
Active list: 1
Feature mask: 0x107
but no configured at all.
zero noxmtbuf in all the interfaces, but that could be normal as the problem is not happening now.
thanks so much for your help !
You are welcome.
It sure seems like a odd issue in kernel streams.
I could not find a related bug fixed in patches like this, but it is always good to keep system up to date on patches.
You may need to collect kstat's before and after issue to help in troubleshooting.
# kstat -pc net
or possibly collect a crash dump when it happens again and open a SR and have a support engineer in Solaris Network group check the network and stream queues
# reboot -d