1. An apparatus comprising:one or more communication interfaces configured to receive packets from one or more devices over a network;
queue management logic configured to queue the packets in one or more processing queues while the packets await processing by forwarding logic;
the forwarding logic, configured to:
process first packets of the packets and, based thereon, forward the first packets to destinations identified by the first packets;
determine that a particular packet of the packets is to be dropped without being forwarded from the apparatus to a destination associated with a destination address identified by the particular packet;
in response to the determining that the particular packet is to be dropped, tag the particular packet with a visibility tag, the visibility tag including an identifier of an error or type of drop that led to the forwarding logic determining to drop the particular packet;
further in response to the determining that the particular packet is to be dropped, forward at least a starting portion of the particular packet, with the visibility tag, to a visibility subsystem instead of the destination associated with the destination address identified by the particular packet.