topic Re: slow ftp log export in General Topics

slow ftp log export

dieter_b — Tue, 22 May 2012 07:17:08 GMT

PA2020.

Exporting logs using ftp seems extremely slow. We are talking about speeds around 30 KB/s, this on a full GB network to a ftp server with fast storage. Logs are big (easily over 10GB) so it would take days to export them.

How can I speed things up ? Is there an alternative (like: using the usb port on the device ?

Re: slow ftp log export

npare — Tue, 22 May 2012 15:52:02 GMT

Hi,

The USB ports are currently not in use so that wouldn't work.

If the traffic from the firewall's FTP service route and the FTP server changes zones, it's possible that an anti-virus or QoS policy be applied. That might explain why so little data reaches the FTP server.

That's the first thing I would check, examine the logs to see if traffic from the firewall to the FTP server is matching an AV or a QoS policy.

Re: slow ftp log export

rahmant — Wed, 23 May 2012 08:58:21 GMT

Perhaps you can check for a duplex mismatch on the mgmt port? I remember on the PA-2000 series, there were some issues with link negotiation when plugged into Cisco switches.

Re: slow ftp log export

dieter_b — Wed, 23 May 2012 10:23:31 GMT

FTP went through management, so no policies involved.

Re: slow ftp log export

dieter_b — Wed, 23 May 2012 10:25:17 GMT

Thanks for putting me in the right direction. Seems like the management port was indeed connected to an older switch on FastEthernet.

Moved it straight to our core switch (Cisco), negotiated fine.

I will do another export to see if (and it should) it's faster.

Re: slow ftp log export

dieter_b — Wed, 23 May 2012 11:07:56 GMT

Doesn't seem to be any faster.

Management CPU is probably the bottleneck, seeing it being maxed out during transfer and responding slower than usual to commands.

Any way to force the export over a normal interface ? Data plane should be more powerful I guess...

Re: slow ftp log export

mikand — Wed, 23 May 2012 19:26:57 GMT

Check in service route configuration (Device > Setup > Services, click on Service Route Configuration) if you can reroute just the uploads to use a specific dataplane interface instead of the mgmt-interface.

Re: slow ftp log export

dieter_b — Thu, 24 May 2012 06:39:29 GMT

I already checked that, there is no "upload" service to configure.