article Nominated Discussion: Understanding Network Throughput Graphs in General Articles

article Nominated Discussion: Understanding Network Throughput Graphs in General Articles https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-understanding-network-throughput-graphs/ta-p/533472 <DIV class="lia-message-template-content-zone"> <P><SPAN>This Nominated Discussion Article is based on the post "</SPAN><FONT color="#FF6600"><STRONG><A href="https://live.paloaltonetworks.com/t5/general-topics/network-throughput-graphs-are-incoherent-in-pa-220/m-p/532084" target="_blank" rel="noopener">Network Throughput Graphs are incoherent in PA-220</A></STRONG></FONT><SPAN>" by <A href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/163507" target="_blank" rel="noopener">@AlanDeBoer</A> </SPAN><SPAN>  and responded to by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/70130">@A_Astardzhiev</a> </SPAN><SPAN>. Read on to see the solution!</SPAN></P> <P> </P> <BLOCKQUOTE> <P>Hi, </P> <P> </P> <P>We are experiencing an issue with the PA-220 network graphs displayed in one of our sites. </P> <P> </P> <P>We know that the router in front of the firewall delivers a 90 Mbps (Megabit per second) max throughput. This measure has been verified extensively. </P> <P> </P> <P>However when trying to visualize the traffic received by our test machine from the firewall web GUI, we notice some extremely high values in the hundreds of MegaBytes.</P> <P> </P> <P>This test machine is connected to the PA through a single NIC card, and the test consisted in a standard online bandwidth test service.</P> <P> </P> <P>For instance at 15:00, according to the graph below our machine would have received roughly 550 MBytes of data in 1 second? That's just impossible ...</P> <P> </P> <P>How am I supposed to read this graph and could there be an issue with the scale? </P> <P> </P> <P>This is the Network Monitor graph for the test machine : ( TBN that we get similar values when using the Ingress/Egress Interface Widget Graph from the ACC and filter using the same IP)</P> <P> </P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="f4lkon_0-1677147475652.png" style="width: 888px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48170iAC5A09F00E11C74B/image-dimensions/888x416/is-moderation-mode/true?v=v2" width="888" height="416" role="button" title="f4lkon_0-1677147475652.png" alt="f4lkon_0-1677147475652.png" /></span></P> <P> </P> <P>As a side comparison when we extract the bitrate graph associated with the interface used for internet communication on this firewall, from the Panorama we get something that is much more coherent : </P> <P> </P> <P>Here we get a max throughput of roughly 9 MBytes which translates to 72 Mbps, it makes sense.</P> <P> </P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="f4lkon_1-1677148310474.png" style="width: 948px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/48171i685AB0641F615076/image-dimensions/948x442/is-moderation-mode/true?v=v2" width="948" height="442" role="button" title="f4lkon_1-1677148310474.png" alt="f4lkon_1-1677148310474.png" /></span></P> <P> </P> <P>Any help on this matter would be greatly appreciated!</P> <P> </P> <P>Thanks,</P> </BLOCKQUOTE> <P> </P> <P> </P> <P>The Network Monitor graph time scale - it is one hour. This graph doesn't present throughput, but rather accumulated volume of data for one hour related to this address. This should include downloaded and uploaded data for one hour.</P> <P>So the proper way to read the graph is - "550MByes of data for 1<STRONG>hour"</STRONG></P> <P> </P> <P>You may found the following useful for determining the current throughput:</P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClaKCAS" target="_blank" rel="noopener">Graphic Traffic Monitoring for Interfaces - QoS Statistics - Knowledge Base - Palo Alto Networks</A></P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Clj0CAC" target="_blank" rel="noopener">How to Check Throughput of Interfaces - Knowledge Base - Palo Alto Networks</A></P> <P> </P> </DIV> Thu, 09 Mar 2023 19:28:27 GMT JayGolf 2023-03-09T19:28:27Z Nominated Discussion: Understanding Network Throughput Graphs https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-understanding-network-throughput-graphs/ta-p/533472 <P>This Nominated Discussion Article is based on the post "Network Throughput Graphs are incoherent in PA-220".</P> Thu, 09 Mar 2023 19:28:27 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-understanding-network-throughput-graphs/ta-p/533472 JayGolf 2023-03-09T19:28:27Z