topic Re: Interface Statistics? in General Topics

Interface Statistics?

mike_cc — Thu, 22 Aug 2013 14:08:01 GMT

Is it only possible to view interface statistics if QoS is enabled on the interface?

Mike

Re: Interface Statistics?

pulukas — Thu, 22 Aug 2013 16:52:45 GMT

On the cli you can see the statistics on any port with or without cos enabled.

pan>show interface ethernet1/1

--------------------------------------------------------------------------------

Name: ethernet1/1, ID: 16

Link status:

Runtime link speed/duplex/state: 1000/full/up

Configured link speed/duplex/state: 1000/full/up

MAC address:

Port MAC address 00:1b:17:01:35:10

Operation mode: layer3

Untagged sub-interface support: no

--------------------------------------------------------------------------------

Name: ethernet1/1, ID: 16

Operation mode: layer3

Virtual router PCI-PL-vr

Interface MTU 1500

Interface IP address: 10.24.32.7/23

Interface management profile: Allow_ping

ping: yes telnet: no ssh: no http: no https: no

snmp: no response-pages: no userid-service: no

Service configured:

Zone: PCI-PL-Outside, virtual system: vsys1

Adjust TCP MSS: no

--------------------------------------------------------------------------------

Physical port counters read from MAC:

--------------------------------------------------------------------------------

rx-broadcast 130264

rx-bytes 1352921351

rx-multicast 600048

rx-unicast 1544405

tx-broadcast 14696

tx-bytes 1816576

tx-multicast 0

tx-unicast 13688

--------------------------------------------------------------------------------

Hardware interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received 49992576

bytes transmitted 1266684

packets received 777517

packets transmitted 28384

receive errors 0

packets dropped 0

--------------------------------------------------------------------------------

Logical interface counters read from CPU:

--------------------------------------------------------------------------------

bytes received 49992576

bytes transmitted 1266684

packets received 777517

packets transmitted 28384

receive errors 0

packets dropped 70438

packets dropped by flow state check 0

forwarding errors 0

no route 42

arp not found 0

neighbor not found 0

neighbor info pending 0

mac not found 0

packets routed to different zone 0

land attacks 0

ping-of-death attacks 0

teardrop attacks 0

ip spoof attacks 0

mac spoof attacks 0

ICMP fragment 0

layer2 encapsulated packets 0

layer2 decapsulated packets 0

--------------------------------------------------------------------------------

Re: Interface Statistics?

mike_cc — Thu, 22 Aug 2013 21:34:29 GMT

Thanks for the info, but that's not really what I'm looking for. The statistics page on a QoS interface is what I'm not finding anywhere (except if QoS is enabled). It shows bandwidth, users, applications, etc. - things I'd expect to be able to see for an interface on this type of system. Although you can't arrange the columns which is strange.

Re: Interface Statistics?

mbutt — Thu, 22 Aug 2013 23:10:05 GMT

No Currently there is no way to build a QoS Report or statistics.

Look at the following posts

https://live.paloaltonetworks.com/message/31598#31598

https://live.paloaltonetworks.com/message/31127#31127

However if you are looking for data you can look at the ACC tab which shows you which application used how many session or bytes and many more details.

Also you can setup netflow profile on an interface as well.

Here is how to setup Netflow

Step1:

Configure Netflow Server Profile under

Device--> Server profiles ---> Netflow

Step2:

Once the Server profile has been configured you Add that to the interface under

Network-----> Interface

Select the interface for which you want data to be sent to net flow server.

Step 3:

Commit your changes

Let us know if this helps you.

Thanks

Numan

Re: Interface Statistics?

mikand — Thu, 22 Aug 2013 23:44:40 GMT

Doesnt the chrome plugin found in devcenter display interface statistics?

Re: Interface Statistics?

mike_cc — Fri, 23 Aug 2013 16:23:16 GMT

That's helpful, but still not what I'm looking for. The system just doesn't have it built-in and I'm not sure why that is. This is what QoS Statistics looks like. Why isn't this available on all interfaces?

Mike

Re: Interface Statistics?

mbutt — Fri, 23 Aug 2013 23:58:31 GMT

Hi Mike,

That sounds like a great feature request. I would encourge you to get in touch with you Local Sales Engineer so he can request the feature on your Behalf.

Thanks

Numan

Re: Interface Statistics?

shadowpeak — Sat, 24 Aug 2013 23:17:58 GMT

For a live, continuously-updating view of all network interface throughput numbers (useful when trying to locate intermittent traffic spikes that are impacting firewall performance) run:

show system state browser

Type Shift L and select Port Stats, type “y”, type “u”

To modify the screen refresh rate (default 5 seconds) hit “r”

This doesn't give historical statistics but can provide them in real time.

Re: Interface Statistics?

VinceM — Mon, 26 Aug 2013 08:19:45 GMT

Hi all,

Have you try to use the chrome plugin ?

You can find it here: https://live.paloaltonetworks.com/docs/DOC-4581

It's a great tool and can be modify if needed.

Hope help.

Re: Interface Statistics?

mike_cc — Mon, 26 Aug 2013 15:47:40 GMT

The chrome plugin is okay, but not what I want. It would be great if you could click an interface and drill down into the details - applications, source users, etc., but again, this should be a built-in part of the system.

I'll talk to my sales rep. about it.

Mike

Re: Interface Statistics?

VinceM — Tue, 27 Aug 2013 10:05:44 GMT

Hi,

Correct, fell free to make changes and add-on .... and share it 🙂